Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: aoHGZI1byB8DXPl73GqQ8pphiBYjDONu4POhJVO0uyQ=
Subject key identifier: BA:50:98:3E:9D:A0:62:2E:1D:98:85:7B:A3:94:40:1F:76:AC:05:D0
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 019A73A63471F70780F68F8F80D73B46F147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0AC5
Signing time: Tue 11 Nov 2025 16:01:03 +0000
Manifest this update: Tue 11 Nov 2025 16:01:03 +0000
Manifest next update: Wed 12 Nov 2025 16:01:03 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: 6IEGJXvh9kdB1T35uZEqrcTqaaky173OOKFMd9wx2gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:34:71:f7:07:80:f6:8f:8f:80:d7:3b:46:f1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Nov 11 16:01:03 2025 GMT
Not After : Nov 12 16:01:03 2025 GMT
Subject: CN=ba50983e9da0622e1d98857ba394401f76ac05d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:52:27:01:03:81:e1:8f:19:77:a8:9b:57:
c0:00:5b:7e:24:97:0a:e9:02:10:3f:c5:6a:58:50:
8b:f5:7c:67:6c:fc:ed:69:94:29:4b:77:38:4a:05:
cc:27:9a:2f:8b:ba:c9:08:36:68:83:b2:57:32:41:
be:64:e4:ed:51:6a:9e:db:47:a6:93:c2:f9:71:90:
3f:66:1f:dd:32:a0:4a:85:67:05:8e:d8:a8:e2:66:
34:51:1c:55:c9:11:c4:7b:ac:64:f6:63:a4:64:24:
12:75:8b:7b:02:e0:e2:6f:71:27:8b:f1:bc:9c:73:
ea:b7:f1:f2:18:3c:51:dd:05:c4:38:60:f7:5f:b0:
ce:a8:92:d9:41:5d:f2:51:e2:af:31:e3:2c:46:39:
93:e8:b9:af:f0:57:fc:52:06:01:39:8f:e5:2e:c3:
84:d2:5f:5d:d9:37:1c:d9:26:49:46:fa:b1:c9:a5:
08:4d:06:ee:ed:04:1c:ad:e8:18:5d:10:0f:8b:0f:
3f:d9:45:51:32:8a:1d:28:18:04:ad:2a:8e:de:c9:
e5:da:df:0b:47:17:7a:95:ed:91:5d:5c:b3:19:4a:
7e:0d:5b:b9:6b:a3:0b:a5:66:46:c0:87:8c:ff:75:
9a:37:e0:ee:07:34:76:41:a0:35:b6:fe:bb:30:cc:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:98:3E:9D:A0:62:2E:1D:98:85:7B:A3:94:40:1F:76:AC:05:D0
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b2:b3:c3:00:17:e1:60:3e:63:09:9d:9a:61:8e:53:6e:8b:
93:ea:d8:5e:37:3e:ce:62:9d:eb:2c:e1:84:0e:ce:e8:75:b7:
45:ef:49:2a:47:be:43:9e:18:58:0f:92:00:c3:70:78:c4:26:
b8:b2:31:32:36:56:d2:b3:a3:40:6a:60:7e:51:08:1d:2f:aa:
d4:07:34:38:1a:d7:ee:2b:ba:03:15:7a:fb:4e:c2:c3:3b:42:
71:82:eb:b0:43:72:bb:23:1d:1a:a8:65:0c:7d:f6:df:89:7d:
9f:2f:41:d0:82:7d:a5:d2:e5:b2:26:0e:f3:ff:a8:d8:36:ac:
37:07:b0:fd:e5:f9:b3:f4:50:7c:82:ce:d9:73:3c:1f:ef:e2:
36:20:ff:4a:1b:84:b9:e5:5c:8c:50:a0:d5:00:a8:08:b0:b1:
5b:21:66:ab:4b:9a:d6:23:34:0a:93:b0:2d:4e:98:c8:8b:35:
81:f8:f8:66:ee:3e:41:12:d0:63:af:8e:90:f9:c9:06:b9:73:
98:21:2d:00:85:47:1a:cd:3c:3d:cb:e8:af:47:8b:75:66:8c:
d5:17:2d:73:2e:ca:bf:70:04:fc:64:cb:5f:dc:61:3d:d4:70:
34:58:80:b6:45:68:f7:ae:3c:b7:1a:39:9b:d0:fc:ec:33:a2:
b3:7c:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:44:50 2025 by rpki-client