Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: DyiwOo5UBOxw5nDsEdmtloVf2WY0v/Qc8nXEwrrIyNU=
Subject key identifier: 13:76:10:30:DE:3C:2C:84:78:71:FA:3D:2A:8A:48:F6:8E:6D:BB:9C
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 019921B0E5590B145555265C0945F943F9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0A16
Signing time: Sun 07 Sep 2025 01:01:04 +0000
Manifest this update: Sun 07 Sep 2025 01:01:04 +0000
Manifest next update: Mon 08 Sep 2025 01:01:04 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: QTKTaPlorz8J+7LqZ748CRDpYMGE04sRwjDErMm/qoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e5:59:0b:14:55:55:26:5c:09:45:f9:43:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Sep 7 01:01:04 2025 GMT
Not After : Sep 8 01:01:04 2025 GMT
Subject: CN=13761030de3c2c847871fa3d2a8a48f68e6dbb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:05:5d:58:80:c0:b1:91:06:6f:13:d6:d5:
c9:38:ee:7c:05:cc:98:dc:82:1b:0f:f2:dd:8e:66:
d1:8a:74:96:96:53:c9:6e:51:c1:af:43:7f:ed:0e:
12:d0:6a:77:4f:d7:7d:b6:16:34:f9:20:35:71:66:
78:ab:91:44:a3:08:b6:d7:82:6c:a3:af:39:48:ef:
9a:c8:46:e5:6f:39:a0:6a:66:cd:3e:c5:93:5b:96:
d2:69:fc:da:59:7e:03:6f:2b:2d:fe:78:05:b7:20:
ac:5b:c3:b5:24:ad:ce:80:b4:87:38:1b:85:03:6c:
c5:20:05:4c:f0:20:f6:ae:e9:08:a1:bc:29:9b:f4:
c1:f3:e3:07:a1:c4:d9:11:9e:53:73:75:0d:27:5b:
9e:14:f8:d4:0c:d5:27:b7:f2:ff:78:a3:3b:a6:fc:
2d:d4:dc:27:ff:51:46:4e:84:cd:bb:94:13:95:f1:
3d:1c:2e:7d:61:0b:13:20:a6:cc:e3:4b:c1:d6:a4:
1d:0e:3b:86:3e:94:20:7e:4a:4e:a2:ea:1b:60:43:
a0:a0:cb:ec:0d:d8:94:cd:cf:58:eb:0f:0b:6c:8a:
f7:ae:14:b1:1a:25:75:0f:52:23:88:6d:6b:55:ea:
af:0e:fb:2a:f5:38:35:83:0f:68:3c:bb:2d:7c:39:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:10:30:DE:3C:2C:84:78:71:FA:3D:2A:8A:48:F6:8E:6D:BB:9C
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b1:69:44:40:82:ff:cd:25:b5:3d:22:dc:b0:7e:d9:99:f3:
e6:86:18:9d:a8:63:1d:f3:ec:0e:2e:75:6a:bc:8b:e0:72:ff:
21:f1:93:2a:eb:61:57:96:d3:2e:b0:da:e4:24:38:f3:eb:06:
60:59:eb:04:c8:a8:d6:c9:33:97:95:03:9c:12:30:32:fc:34:
e4:38:d8:2f:14:16:0e:12:23:70:ce:64:70:a7:e7:b5:bb:f3:
4b:cd:e2:0b:48:ad:b5:16:4e:c3:3d:84:32:16:11:30:1c:41:
ed:84:3a:54:75:63:8b:b8:c7:a6:59:63:f2:4b:5e:4f:95:77:
e2:c5:6b:fa:b5:40:95:fd:23:d9:e4:10:9a:7c:e5:ab:7a:f8:
01:25:5d:77:64:a6:7c:98:43:81:44:94:fc:be:d2:84:e1:36:
5e:cc:97:53:fa:d7:6e:fd:90:64:9d:cb:c0:e3:d3:0d:ed:f9:
9a:5c:07:33:aa:1a:18:7c:5f:7e:cd:bf:a5:fd:64:6d:8a:72:
71:26:af:ee:c1:19:a2:ed:0f:b7:53:c3:d0:4b:89:4f:e6:94:
9a:17:46:bb:85:e2:00:be:95:83:93:27:99:ab:82:3b:99:4b:
88:2e:eb:cf:7d:d6:c4:53:6b:20:eb:9f:f1:00:c8:09:a4:d9:
27:d3:6a:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsOVZCxRVVSZcCUX5Q/nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzQwZmY2NjlhM2FkYzlkNjY5NjEzNWM4ZDcxZjZkZjVl
YWMyN2IwHhcNMjUwOTA3MDEwMTA0WhcNMjUwOTA4MDEwMTA0WjAzMTEwLwYDVQQD
EygxMzc2MTAzMGRlM2MyYzg0Nzg3MWZhM2QyYThhNDhmNjhlNmRiYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/4FXViAwLGRBm8T1tXJOO58BcyY
3IIbD/LdjmbRinSWllPJblHBr0N/7Q4S0Gp3T9d9thY0+SA1cWZ4q5FEowi214Js
o685SO+ayEblbzmgambNPsWTW5bSafzaWX4Dbyst/ngFtyCsW8O1JK3OgLSHOBuF
A2zFIAVM8CD2rukIobwpm/TB8+MHocTZEZ5Tc3UNJ1ueFPjUDNUnt/L/eKM7pvwt
1Nwn/1FGToTNu5QTlfE9HC59YQsTIKbM40vB1qQdDjuGPpQgfkpOouobYEOgoMvs
DdiUzc9Y6w8LbIr3rhSxGiV1D1IjiG1rVeqvDvsq9Tg1gw9oPLstfDlvkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN2EDDePCyEeHH6PSqKSPaObbucMB8GA1UdIwQY
MBaAFDg0D/Zpo63J1mlhNcjXH2316sJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2Mt
Mjg0NmVhYWRkZTY3LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2MtMjg0NmVhYWRkZTY3
LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbFpRECC
/80ltT0i3LB+2Znz5oYYnahjHfPsDi51aryL4HL/IfGTKuthV5bTLrDa5CQ48+sG
YFnrBMio1skzl5UDnBIwMvw05DjYLxQWDhIjcM5kcKfntbvzS83iC0ittRZOwz2E
MhYRMBxB7YQ6VHVji7jHpllj8kteT5V34sVr+rVAlf0j2eQQmnzlq3r4ASVdd2Sm
fJhDgUSU/L7ShOE2XsyXU/rXbv2QZJ3LwOPTDe35mlwHM6oaGHxffs2/pf1kbYpy
cSav7sEZou0Pt1PD0EuJT+aUmhdGu4XiAL6Vg5MnmauCO5lLiC7rz33WxFNrIOuf
8QDICaTZJ9Nqdg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client