Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: gWY2gs/zBU761uLkTZqLbRpMx4QIJMI5T1ept7xaIe0=
Subject key identifier: 02:EE:9B:47:49:99:D3:69:75:44:39:CE:0F:0F:DD:39:8C:2C:B8:64
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 019A70DBFDD5BF3DA921CE0A15D4C1E96AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: iGoTvJHypbyHJqboK9QpGaiqg8fIylHVW/Rf7WVKw5c=)
2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fd:d5:bf:3d:a9:21:ce:0a:15:d4:c1:e9:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=02ee9b474999d369754439ce0f0fdd398c2cb864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:96:5b:a4:ce:8b:f4:45:9a:3e:3b:d4:60:
01:d7:fc:08:87:db:1d:5e:bf:ab:db:50:c3:3f:fc:
37:80:8a:02:f4:e5:1c:b1:08:fa:c6:9e:44:8d:a6:
ee:58:b2:ee:7d:2f:39:a3:50:d2:25:54:0c:72:6c:
e3:8d:fc:20:a8:03:5c:2c:56:2d:24:da:ce:69:ce:
a7:cf:5b:fa:27:d3:d3:d0:09:1d:8a:0f:3e:96:57:
9f:f8:ac:32:a9:09:45:90:c0:e1:36:49:de:c4:19:
e6:57:1b:46:5e:5f:46:d7:da:ad:56:86:f0:a4:e0:
7a:aa:e5:76:f1:fd:03:c0:70:4b:5b:b5:ce:b9:4f:
72:c2:5e:1b:bd:96:bd:b0:dc:c7:b9:67:60:22:49:
43:07:14:43:2d:e5:07:19:cd:c7:15:eb:5e:2d:f3:
95:c7:f6:0c:76:39:15:c1:60:bb:fb:28:5e:1b:70:
11:64:41:69:53:5a:78:14:9c:92:21:28:31:ed:d0:
c6:7e:45:f9:a0:95:c9:25:fe:ab:83:3b:e2:69:16:
36:a5:b2:1a:a3:bc:66:de:d0:97:eb:2c:37:fc:10:
8f:3f:50:10:1a:47:28:70:5e:22:d4:95:8b:db:93:
22:c6:d6:20:ed:eb:c2:49:1e:69:1a:45:2c:d6:7a:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:9B:47:49:99:D3:69:75:44:39:CE:0F:0F:DD:39:8C:2C:B8:64
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:7b:86:3b:1c:23:6d:80:53:42:41:37:c9:27:54:43:8a:
04:33:bc:76:0a:08:bb:bf:dd:a0:5f:8e:04:0e:ac:c2:c5:46:
03:12:92:d9:67:d6:56:ad:1b:b2:39:e8:61:58:8c:c3:39:42:
23:99:fb:10:fe:d2:27:96:ee:3a:55:bb:d1:d1:50:e5:3f:55:
37:1c:e3:ab:61:2f:0c:d3:e6:af:33:1b:88:9f:8d:fd:d0:28:
12:39:f8:37:fd:06:fe:92:95:9a:43:09:ca:df:73:09:0d:51:
2e:b2:a5:fc:ac:3e:43:3f:2c:c2:8d:cd:84:70:72:86:7c:a2:
4a:a2:35:c2:14:de:ac:65:15:ba:c1:a2:4a:a1:e5:a3:6a:db:
11:ce:67:f3:f6:ff:74:2d:57:2b:65:c1:b8:cf:91:69:ae:52:
e2:1a:d0:20:7a:08:27:b5:1f:90:5e:fe:4b:14:dc:3b:f4:3b:
4c:f3:42:fc:f2:3c:65:66:f7:95:1c:85:df:2e:f8:b9:43:82:
5d:cf:0b:63:4a:ff:05:c2:b2:e7:bd:dc:15:cc:55:fa:77:f1:
e4:8f:28:d1:0e:2b:08:fb:84:10:c1:15:71:53:f6:1a:66:4f:
ae:a3:0b:13:76:8d:00:bb:17:15:72:58:bc:82:32:5f:02:11:
85:8e:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:33 2025 by rpki-client