Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: mp+fQ37fTbhSCO0SDZLCrUjeK7oQD6b5/7vg/q4QRA8=
Subject key identifier: 38:A7:B3:53:6C:C8:6A:6F:71:25:9F:EF:F5:D6:D3:F8:67:F6:E6:5C
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 019A12A83766BD8E90E3F0B095336778EBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 0639
Signing time: Thu 23 Oct 2025 20:00:05 +0000
Manifest this update: Thu 23 Oct 2025 20:00:05 +0000
Manifest next update: Fri 24 Oct 2025 20:00:05 +0000
Files and hashes: 1: iSLwTqep0NbUn-xM6ERQaCHn1tI.roa (hash: khQ4c7Qn9evkEyI3Gv7ZG1leD8nar2lQ0KO438Y9oxI=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: Io9z2NpiNSQhARbwjSW2bJs52Sun0hdDbUr2tnJZHos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:37:66:bd:8e:90:e3:f0:b0:95:33:67:78:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Oct 23 20:00:05 2025 GMT
Not After : Oct 24 20:00:05 2025 GMT
Subject: CN=38a7b3536cc86a6f71259feff5d6d3f867f6e65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:82:b7:66:4e:ba:fa:ce:10:bc:71:55:58:
e8:e6:30:93:40:9b:74:bc:54:44:d3:5f:c4:a2:81:
18:34:e7:a1:86:38:1b:89:b8:fe:79:67:fa:9f:c4:
d6:54:4e:38:45:60:fe:b4:7b:a5:7e:22:e3:50:7a:
c7:af:d6:fb:35:fb:43:2a:0c:1c:0c:88:d8:47:d3:
9a:35:1c:a5:b7:16:50:1e:b5:e1:71:2b:f7:20:28:
c3:f0:45:79:a5:d3:16:1b:9a:6e:18:63:5a:1e:a1:
7a:86:3c:e7:50:91:5e:c5:99:35:5d:f0:e6:be:3f:
2a:10:49:9f:27:c0:75:7b:90:cb:b6:f6:07:e8:dd:
15:dd:6b:8c:06:aa:fa:48:f6:76:49:34:99:b7:17:
59:40:6e:f8:e9:5f:43:eb:87:5f:01:a3:7e:a6:23:
45:02:c4:06:96:c6:37:ac:7c:b1:f6:88:60:a9:11:
5b:eb:66:6a:6b:da:da:28:eb:bd:80:34:c7:10:8b:
14:e1:0d:5d:42:63:c1:fc:9c:d6:71:f0:b5:72:5d:
42:69:1e:ad:09:54:4b:44:42:b1:aa:49:73:5a:29:
eb:e5:9e:8c:80:f1:ba:6d:42:a0:6c:67:74:c2:4b:
4b:85:9f:07:42:6b:7d:a1:fc:0f:39:b8:b8:1e:f3:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:B3:53:6C:C8:6A:6F:71:25:9F:EF:F5:D6:D3:F8:67:F6:E6:5C
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:71:eb:f0:8b:21:49:5c:78:89:14:ee:6f:0a:34:b1:61:
e5:e1:fc:08:65:62:a0:a5:06:0a:75:36:f9:2c:48:28:ec:85:
b0:dc:ed:03:05:95:f0:72:aa:1e:d5:32:06:10:8b:7a:58:04:
10:0f:75:7b:47:27:fe:72:24:35:ea:5a:e0:44:0d:a7:6f:51:
db:b1:3f:c5:90:4e:03:9d:c6:29:2b:fc:5e:55:ba:aa:97:3a:
02:e5:12:1b:e4:9e:86:b1:89:aa:36:f9:93:79:b2:28:46:a9:
1d:a5:ad:ea:32:88:4b:14:f3:c2:ae:cc:65:50:b1:89:98:e2:
6f:91:4d:f4:05:0d:b5:05:7b:6e:a3:db:a8:26:57:aa:de:e1:
e7:90:57:5d:e7:03:9e:30:d3:47:44:8e:6c:92:a5:c2:01:60:
4b:11:1e:db:09:b7:1d:f6:2a:f5:a4:7a:a1:19:a0:db:38:8f:
69:34:b0:0b:ea:7c:c2:97:fa:e3:5d:bc:5a:46:e3:dd:21:97:
b0:79:fd:43:8d:55:00:50:56:ed:4d:ec:f5:4b:a5:e0:53:cc:
2c:a1:3e:54:3c:86:9a:b3:db:95:de:e5:ba:f3:ba:73:54:80:
bd:71:bc:3b:55:95:a2:a3:9a:fb:21:1c:b1:ed:bd:a3:9f:e0:
86:1c:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 05:58:53 2025 by rpki-client