Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: KqFLDRf204y3MVmFfWW50nEf1yu0yIbfeE14ctl3v30=
Subject key identifier: AB:84:FB:58:62:4D:31:4F:D0:22:E4:BC:12:67:51:1C:05:9F:C8:0B
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019A29D56D44C59495B0F7DF043FB0DA55DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0C6B
Signing time: Tue 28 Oct 2025 08:00:44 +0000
Manifest this update: Tue 28 Oct 2025 08:00:44 +0000
Manifest next update: Wed 29 Oct 2025 08:00:44 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: hga5J3ImxI7nzROZ7xEBqtXW0zT68nP3YngxaFYgL1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:6d:44:c5:94:95:b0:f7:df:04:3f:b0:da:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Oct 28 08:00:44 2025 GMT
Not After : Oct 29 08:00:44 2025 GMT
Subject: CN=ab84fb58624d314fd022e4bc1267511c059fc80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:47:83:39:12:01:5b:3b:9f:75:2e:a5:53:
d1:64:df:e9:bc:04:46:f6:39:7b:65:02:25:b8:4f:
a8:66:7c:8d:95:bc:72:4e:2f:78:c0:4a:f9:b2:ce:
36:d7:6e:29:6a:99:10:5e:f0:bf:6f:a0:64:f2:52:
9b:7f:13:9a:05:fd:67:09:c2:fd:23:b5:80:e6:14:
1f:ec:f2:02:d2:ad:3a:28:92:49:84:b6:5f:dd:44:
61:25:cc:b7:c1:c7:9e:32:95:81:b0:3a:2c:18:6a:
82:f5:80:e4:b8:82:e0:bb:82:bc:6a:b5:a1:40:c9:
42:0c:0f:5c:b6:61:86:fc:59:e4:2e:6e:fd:eb:1f:
89:9d:a1:48:13:cb:78:17:c1:b5:62:69:a3:88:f5:
75:cc:f1:1a:3a:3a:9b:96:ed:af:19:2d:2d:d7:f3:
49:8b:48:9b:c8:7d:cf:83:3a:93:10:33:65:25:cb:
3b:9e:3e:f1:f8:e4:54:28:49:b6:59:64:80:22:6f:
23:e7:92:55:26:9d:0a:91:12:f7:45:d8:5c:4b:d7:
3c:b4:41:08:b6:85:be:e0:ff:1b:d7:22:80:2c:35:
de:43:6d:09:e3:59:cc:30:d0:e1:62:fc:21:ce:b2:
38:e0:be:3a:de:a7:7e:53:70:b3:0a:aa:37:61:e8:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:84:FB:58:62:4D:31:4F:D0:22:E4:BC:12:67:51:1C:05:9F:C8:0B
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:97:75:87:46:ad:9a:22:17:3b:6a:1b:a2:44:41:da:28:d0:
ca:87:c0:13:0b:16:e4:c3:7c:9d:9d:f7:26:11:2d:c4:dc:08:
30:29:22:a5:2f:87:99:a7:36:44:d2:aa:87:ff:39:d2:ce:47:
25:b5:c2:ca:77:f3:3b:f7:f9:52:bc:a1:45:3f:cc:62:12:4d:
a6:18:83:5b:af:6b:a7:54:b5:a4:69:17:f4:f2:8f:d1:33:7b:
d7:7a:25:c4:21:ce:ba:57:66:bd:ed:10:c2:b7:a2:d7:14:96:
ae:e0:d2:3a:cc:c0:a6:c2:0f:00:3c:3d:60:14:0b:be:89:d5:
db:eb:54:24:ac:f4:b9:6c:0d:ff:86:43:c1:4d:9f:3c:3f:3d:
ce:f2:23:1f:d7:b3:7e:bb:ff:89:1f:b2:5c:3e:ce:7d:67:7b:
81:61:6f:56:44:be:8e:e9:59:4f:06:9b:ae:f5:48:53:71:ca:
1c:01:43:4f:ff:22:98:90:b1:ad:4d:3f:59:78:3d:9f:53:76:
8e:eb:12:e6:26:94:a8:76:e4:1e:9e:10:b1:ef:f3:0d:b8:1f:
8b:94:9b:28:90:fc:05:c1:dc:83:a3:07:f6:c6:d8:12:22:a1:
cf:a5:6d:5a:0b:66:22:50:7f:8e:03:2c:77:af:d1:1e:c8:7e:
23:48:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:04:01 2025 by rpki-client