Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: 3lCumNyFWEM6XlrneNv3jXbEvznI5aeUWuOz4yVM9VA=
Subject key identifier: 98:A6:EF:4C:A1:30:F6:AB:FD:E4:BA:C4:01:55:60:6F:7A:3B:A2:64
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 019A7293AE0F6134EFAA19F17DE6374764BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 12B7
Signing time: Tue 11 Nov 2025 11:01:12 +0000
Manifest this update: Tue 11 Nov 2025 11:01:12 +0000
Manifest next update: Wed 12 Nov 2025 11:01:12 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: P7u1Nd8blQDmzK8XrYl99otnwLFHJuILMU/2M+emBk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ae:0f:61:34:ef:aa:19:f1:7d:e6:37:47:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Nov 11 11:01:12 2025 GMT
Not After : Nov 12 11:01:12 2025 GMT
Subject: CN=98a6ef4ca130f6abfde4bac40155606f7a3ba264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:00:28:63:0d:14:97:77:6c:e6:c3:9f:99:
f7:fe:9a:36:e7:f6:30:b9:cf:1c:a4:6a:31:1c:d1:
9c:6d:f3:7d:ca:3a:6d:a1:00:ee:09:65:81:99:79:
8d:64:32:5b:4e:a6:de:32:23:09:67:8b:29:0c:06:
86:4a:cd:3e:ed:fd:79:61:a9:82:e1:48:6b:80:b6:
2c:da:6b:c5:7d:44:0a:f7:d6:63:46:58:20:c1:eb:
2d:76:ee:57:e9:f7:37:e9:54:c0:b3:3d:a5:46:cc:
ef:32:62:c2:6f:f9:00:8e:07:35:58:01:36:3e:fc:
87:65:a5:45:1b:e5:76:b2:56:7c:b7:0f:cb:c6:74:
6f:52:bc:44:b1:e8:bb:fc:6f:96:97:c1:8d:77:04:
a8:e9:1f:18:71:cf:0c:f5:19:a4:95:3d:a5:5b:34:
68:62:ab:47:83:23:24:a1:fa:56:6e:18:04:ce:36:
7f:c0:cf:59:a1:07:b0:d1:c7:6e:3f:78:31:cf:2b:
ee:43:ab:04:e8:bb:4d:58:72:f8:2c:18:a0:78:56:
f4:48:d6:fd:bb:cf:cd:4d:76:e3:9a:ca:35:75:56:
9e:6d:18:63:e2:be:74:35:43:7a:3e:1b:50:97:8a:
1a:81:dc:df:9c:86:8a:86:9a:cd:40:ab:ce:0c:43:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:EF:4C:A1:30:F6:AB:FD:E4:BA:C4:01:55:60:6F:7A:3B:A2:64
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:89:c3:5e:46:49:ff:c1:43:c3:93:97:69:5e:5a:20:d7:f7:
18:1b:ca:d2:83:96:88:10:db:cd:95:f7:15:38:4a:6e:ea:5b:
05:24:de:f0:c1:df:a6:12:58:05:8e:f4:45:9d:3e:5f:d7:96:
f2:bd:49:15:1c:d5:04:2e:e1:05:30:17:df:64:48:35:7c:bc:
2b:6f:d3:7a:d2:15:1b:f1:96:32:5b:d5:8b:e0:81:24:01:6e:
cd:06:a3:33:f0:4e:25:74:47:e1:62:ef:7f:64:c5:db:b3:8c:
22:a9:25:56:1d:f7:5e:b8:06:f2:fa:21:10:02:1a:f0:94:e4:
e4:98:ec:7a:5a:86:bc:72:9d:ae:3d:88:9a:0f:00:b5:cd:82:
8f:f1:a8:a8:1d:a1:05:8c:64:d1:aa:07:b8:75:26:ec:6a:e9:
4d:31:83:b4:ed:22:e3:8a:e9:fe:2c:af:42:65:fb:c9:be:a7:
5b:c6:60:a9:10:cc:a0:da:35:0b:5d:5b:4d:d3:6e:53:5d:24:
70:88:04:ad:9f:e5:d2:e7:f9:9f:2f:d9:43:64:52:00:20:4c:
0f:81:4e:9e:33:98:51:c3:ce:ff:da:20:40:80:3a:ff:ab:91:
6d:da:e9:09:12:9f:53:27:98:1e:69:94:d8:6a:50:a9:a8:8e:
8d:43:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:10 2025 by rpki-client