Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: iaeH0Aoohp8mWzbKFlTDz3nUYJNnrKpirXPpZNFlgeA=
Subject key identifier: 0E:45:A8:B5:99:74:3D:8D:EF:4B:E7:A5:14:D4:17:91:F6:9A:E7:D8
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019A706DF801351918571055C8C0FEDBC30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0B25
Signing time: Tue 11 Nov 2025 01:00:46 +0000
Manifest this update: Tue 11 Nov 2025 01:00:46 +0000
Manifest next update: Wed 12 Nov 2025 01:00:46 +0000
Files and hashes: 1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: 1r3y9z1e8VAIsZysUDvYIoahs6S46+8yp6xAdRA42Uk=)
2: oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa (hash: dicu1vprnt1mxmGFnS2f3yDtWezJRT6KC1umgv5QkRo=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f8:01:35:19:18:57:10:55:c8:c0:fe:db:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Nov 11 01:00:46 2025 GMT
Not After : Nov 12 01:00:46 2025 GMT
Subject: CN=0e45a8b599743d8def4be7a514d41791f69ae7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:9a:27:7a:dc:f7:c3:c4:31:49:6c:88:d5:
46:d1:48:87:21:10:96:82:38:b8:5a:63:a5:ad:6a:
50:8f:c5:45:8a:ca:5a:05:a1:3d:83:a1:d8:bf:eb:
ac:60:42:83:c2:54:b0:59:64:ca:d6:a5:18:92:bd:
90:3f:b6:51:e1:57:17:1a:72:56:74:fb:07:55:64:
d6:f5:22:18:88:db:ec:77:ef:c1:fa:b3:e7:dc:c5:
e7:3b:87:7f:b1:33:dc:ea:d9:a4:c2:6c:4c:54:9e:
c6:c5:62:5a:6a:b3:35:96:19:b3:1e:7d:30:ba:1e:
bd:9c:55:0d:94:26:1b:46:c6:3d:17:db:19:af:ca:
d4:14:f6:dd:e2:cf:61:ec:33:0f:01:34:21:96:d4:
25:3e:4b:87:07:3d:f6:f7:ce:62:7d:76:2c:e4:2c:
7e:8b:ff:5a:7d:e5:b2:ad:a2:94:04:8b:8d:ce:f6:
9c:fa:d7:f7:48:47:40:ba:36:36:9b:ae:24:43:40:
7b:c9:a9:f0:db:c1:57:4b:5a:51:b7:42:9d:e3:98:
a7:f1:0a:cf:9e:59:ae:d8:22:f6:c4:a2:c7:53:13:
5d:c8:db:60:a3:c8:b7:c9:44:ba:c8:5b:8e:84:57:
fd:73:a2:8a:c8:47:ac:39:b0:9a:22:ff:15:80:e1:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:A8:B5:99:74:3D:8D:EF:4B:E7:A5:14:D4:17:91:F6:9A:E7:D8
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:61:8e:51:13:ce:09:7b:21:15:19:66:b2:fd:d4:3c:2c:5c:
23:04:0f:a8:c5:6e:39:8f:8c:92:15:a5:ae:42:01:5b:92:12:
e5:5f:94:d5:71:a8:b6:28:b8:bf:67:86:2a:37:31:6e:45:6f:
e4:76:e1:eb:98:ac:f4:d9:7b:c4:ca:37:73:25:40:c1:39:a3:
a1:5f:a3:44:95:76:d0:01:be:c3:80:6d:2e:f0:41:33:19:ad:
52:75:e9:6f:de:96:42:be:0b:ee:16:5b:5c:13:de:53:0c:68:
77:98:cc:2e:3c:24:61:ea:3c:c3:5a:f8:e3:65:91:48:28:82:
d0:3e:a7:ce:38:b4:2e:2f:a8:ca:7f:49:69:5a:f3:52:f7:3f:
a0:8e:56:86:e6:71:1a:98:ed:c7:07:19:2c:0f:ff:42:16:00:
a0:ce:f7:18:41:c4:c9:89:da:fb:9e:41:66:a0:8d:32:3c:ab:
08:f0:7f:77:a0:50:42:ba:df:cb:40:37:8f:3d:e5:f3:1c:23:
e0:65:19:1f:74:fc:6b:e8:fe:94:2c:12:57:2c:19:2c:2c:82:
c3:f9:a5:7c:ed:ce:e7:01:b5:39:fd:f1:25:20:4b:ee:d0:98:
af:9c:71:0f:c3:d1:af:ea:c0:d8:88:c2:90:2a:7a:12:e9:90:
20:68:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:53 2025 by rpki-client