Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: PGfbw3ETiXHigrm4jyUvhzO6n77gXkILYQe3jI8ZZZY=
Subject key identifier: 8D:AE:22:C7:6F:E6:60:B2:16:A2:BF:2B:13:93:FD:57:74:83:C4:76
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 019A71B870E37296274D444434184C2D4639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 1313
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: Ey54DcPjeKNVXCZE/kWKZm+QxzC8LCWthpMTX6zyDJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:70:e3:72:96:27:4d:44:44:34:18:4c:2d:46:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=8dae22c76fe660b216a2bf2b1393fd577483c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:a6:7e:5c:d8:7e:f2:07:69:22:87:fe:03:
d3:45:82:0f:7d:8f:b2:6f:d7:a9:a4:2d:28:93:70:
4b:8d:8e:52:6a:c7:14:ac:b0:03:67:bc:58:a4:22:
b3:6f:e3:d2:50:75:e3:47:8c:ff:7e:63:99:c1:6f:
68:08:68:23:f2:bf:a4:86:d5:83:e6:7f:48:7b:1e:
46:6d:6f:7e:38:5a:a3:0f:71:0e:b6:20:3c:9a:52:
1b:c6:30:84:30:c4:80:3f:b1:c0:04:51:80:b2:99:
cc:cf:b9:52:48:43:a1:17:0e:93:76:6a:39:93:d5:
b3:94:39:74:91:42:0d:39:c2:a3:0d:c9:f4:b9:d2:
2c:a7:9d:e6:2f:1d:75:4b:d4:0f:93:a1:45:98:38:
71:95:f3:2f:84:cc:d2:83:41:a6:f7:ac:9f:88:3c:
1c:df:20:8f:be:24:c5:48:51:d4:af:9e:ab:b4:fd:
cd:70:0b:ad:7d:ff:03:30:ad:0a:b5:bd:11:e7:ba:
aa:f8:24:97:c2:74:24:59:95:70:ca:e2:db:70:b6:
d3:3f:cf:7c:15:62:b4:40:80:72:0d:02:39:ee:f0:
b1:53:be:38:7d:30:26:f8:df:90:0d:63:ca:32:e5:
7b:b7:d8:8e:d4:49:48:31:eb:5f:b9:84:00:95:44:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AE:22:C7:6F:E6:60:B2:16:A2:BF:2B:13:93:FD:57:74:83:C4:76
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:56:4f:40:2d:ba:25:07:d3:9c:44:af:35:58:19:cf:ee:73:
41:ae:03:c2:9d:15:b1:1f:65:e4:61:bc:1e:bf:0f:be:a9:4f:
67:21:23:8c:09:1b:6a:c9:69:26:6b:8d:d7:f2:2b:81:86:a8:
46:82:a2:78:f6:db:13:29:d3:6e:78:54:f0:6b:b6:28:a5:0d:
9d:0b:9e:9a:5a:7d:8a:4a:e4:b2:68:e7:15:a7:e0:39:ac:67:
b7:51:e7:b2:b0:ac:81:d9:2a:84:4a:ea:b5:4c:e8:64:bb:6d:
5d:d8:5f:60:8a:cd:b0:64:11:11:7e:09:50:b0:93:4a:dd:53:
59:9e:b3:ec:80:26:9b:80:d2:e9:aa:8e:a6:de:62:92:d2:73:
26:44:a3:bc:5a:85:5d:ca:c6:55:bf:da:12:e4:a7:ad:e1:9f:
79:ca:12:05:d5:2f:58:a9:01:a1:28:09:51:c3:ff:4a:80:4e:
0b:0f:09:d4:4a:c0:8a:26:86:4e:7e:38:a4:54:7b:bd:08:ee:
58:92:83:ad:77:26:b1:38:b4:e8:f8:d1:07:0f:be:97:a4:a6:
8b:c0:23:bc:4c:d5:7d:c9:5d:9a:68:9a:d3:a8:b4:5a:c1:83:
e7:86:15:9c:ce:4f:fd:78:3e:bf:3c:1c:9a:5c:99:a3:2e:f8:
15:de:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:09 2025 by rpki-client