Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: nvWjlYXnTVe8On+IMp6fJYX9qzawfcCxTyWCEiNC//o=
Subject key identifier: 54:69:24:F5:20:B1:31:AD:67:77:A5:DF:C4:E1:48:0E:F9:0A:68:0E
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019A71B7AC20423BB327C687423009649F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: wjnwlr5To+c4zarp5S3COd2kZrU+u0JvBL+3gP5em/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ac:20:42:3b:b3:27:c6:87:42:30:09:64:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=546924f520b131ad6777a5dfc4e1480ef90a680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:84:e6:85:4f:bd:93:b2:13:0c:22:ba:c5:7c:
44:6f:b6:b2:b7:59:d1:e7:22:2e:6b:4a:39:03:f1:
91:04:c4:3a:4f:86:fa:5e:f9:df:e3:05:2e:b3:5e:
1d:cb:1a:6d:c0:2d:7d:33:d3:b6:2d:a1:3d:2b:51:
86:60:5c:3d:5d:28:5d:59:9b:0b:3f:8d:d6:8e:1e:
8b:eb:10:2f:0d:08:62:4b:93:ea:98:bc:80:ef:ad:
9d:96:46:c1:1b:cd:0b:1d:bf:dd:05:1d:83:03:ec:
7c:90:c5:54:79:87:9d:ba:17:ab:8b:d3:77:6a:78:
2e:7b:75:ce:94:1a:c6:be:d7:36:41:f1:bd:37:2e:
bc:a6:09:43:d7:d1:ff:17:d1:5d:e6:7c:e0:3d:57:
0a:0c:7b:29:bf:12:bb:3f:f9:75:2b:2a:c3:09:d4:
61:23:97:ec:fb:35:81:9d:65:07:d4:6d:dc:0c:b9:
2d:18:6c:9c:2a:68:d0:76:47:a4:80:47:ac:e4:a6:
2f:71:a0:93:e7:26:1c:71:77:a2:a8:fc:6b:05:fb:
8c:9e:f0:12:af:5d:cd:79:7b:7c:3f:c3:74:e9:59:
ea:bf:74:da:50:82:6a:8c:cd:38:ac:88:63:53:54:
d7:1a:6d:57:29:b5:11:9e:09:2d:45:0b:6e:42:99:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:24:F5:20:B1:31:AD:67:77:A5:DF:C4:E1:48:0E:F9:0A:68:0E
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:38:4d:1b:f9:d8:7e:54:5b:05:1f:ce:d7:e5:07:31:45:1e:
69:42:90:a4:3d:31:9f:b9:96:60:32:21:fe:81:d9:21:e4:eb:
32:f1:b4:ef:26:c7:06:b7:b8:61:cf:0b:3e:e1:47:9a:d3:be:
75:85:bf:ed:4f:a1:ca:b0:dd:20:09:5d:0d:42:96:fa:91:07:
63:55:30:6c:53:73:c3:64:a1:dc:4f:c4:85:a3:99:9d:38:8e:
20:59:e6:7b:83:de:d5:9a:6b:73:2f:39:a5:7f:27:d1:72:77:
3e:dc:33:0c:ff:d7:73:fa:4b:a5:32:43:04:fb:b2:af:eb:52:
25:43:c2:f0:57:95:56:7f:8f:fa:cc:be:ca:28:2c:37:9a:2f:
6f:a2:d6:75:a4:e6:08:be:b4:f2:fa:bb:fa:f2:bd:3d:e1:4e:
68:6d:e0:a7:f5:8e:29:b1:96:43:95:aa:0c:9f:e6:ea:d5:f5:
56:5e:e8:d8:1c:c3:70:1a:22:b2:47:13:44:71:1e:00:ce:09:
af:de:81:95:59:88:4e:b6:e8:9f:c3:ab:86:c5:40:e2:1d:75:
1a:0f:c6:7f:53:ea:9e:ba:d6:87:1a:81:0f:af:16:fa:7a:90:
b9:84:53:be:fe:71:3c:e3:10:8e:8d:b8:6b:4e:c1:55:bb:5a:
b0:17:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:28 2025 by rpki-client