Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: v3vlJIyld1abABCoS5Z4SvamrgJTQ3tjVw9CcNRCMEU=
Subject key identifier: 37:F5:88:93:90:04:03:4B:AB:98:75:37:55:7A:27:E9:1D:50:A6:12
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019A541B02F579F5BE6A803963D1A385F846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 13:00:47 +0000
Manifest this update: Wed 05 Nov 2025 13:00:47 +0000
Manifest next update: Thu 06 Nov 2025 13:00:47 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: w1S98hNN5tIvXYLVak+sx7kJs6Ajjauc4RUXorCZ8b4=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:02:f5:79:f5:be:6a:80:39:63:d1:a3:85:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Nov 5 13:00:47 2025 GMT
Not After : Nov 6 13:00:47 2025 GMT
Subject: CN=37f588939004034bab987537557a27e91d50a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:c2:f4:a2:ae:87:6e:90:7f:61:02:2b:d0:
4b:66:0d:48:c0:2f:05:5c:b5:33:fc:e9:59:8d:f9:
20:d5:b6:b6:f2:39:24:f5:9b:a0:9e:58:f0:c2:1a:
a8:da:9a:e1:22:21:c3:13:a3:5d:4e:b7:b3:06:e7:
27:c9:10:38:f8:b5:dc:51:3d:f2:2e:e4:97:f7:f6:
c7:d8:8a:9f:99:5d:9d:dc:90:17:59:c3:0b:06:c5:
6f:31:57:04:dc:3d:46:b5:00:ca:71:ca:b1:e4:f9:
53:66:28:45:2b:53:7f:79:da:f5:74:26:ac:16:85:
dd:b3:01:76:31:28:15:fa:2d:d9:12:ab:35:32:25:
7b:93:1b:20:54:24:a7:83:de:31:ea:6a:8e:8d:ed:
0a:43:8a:1f:de:80:15:5f:80:da:21:ea:c2:bf:9f:
44:80:4f:0a:80:55:b5:3c:55:93:e4:b7:79:4e:57:
05:d6:21:71:0c:94:8e:8a:2c:cc:6d:87:78:71:8f:
0c:43:6f:44:11:ae:ef:4f:a9:ed:61:4e:35:4a:00:
f1:6b:75:34:17:01:18:ee:4a:4d:70:12:e6:f9:42:
0c:9f:53:f2:08:26:cc:22:6c:28:fc:d0:a1:2b:5d:
ac:95:95:be:a8:50:b8:19:a9:39:7a:07:48:32:61:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:88:93:90:04:03:4B:AB:98:75:37:55:7A:27:E9:1D:50:A6:12
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:fe:8f:c2:98:b9:48:c9:7a:1d:dd:ef:2a:55:f1:d7:9a:
1f:1c:14:00:50:79:f9:62:c4:92:00:67:60:bc:3e:07:dc:f7:
42:6e:b2:f3:d1:2f:9e:bd:d3:e4:14:51:03:3d:ff:4a:87:21:
0a:3c:cf:4e:86:ae:a1:b3:8f:fe:be:1f:2c:66:dd:30:91:c1:
f8:b6:49:f2:6e:59:a4:e0:ac:2e:2d:a2:2e:c1:95:c1:73:35:
19:7f:d5:c0:8e:0f:a5:22:4d:c4:9c:16:ac:7e:e1:3c:ed:46:
b7:79:e1:69:f6:7d:11:be:b6:6d:2f:83:10:17:62:55:46:0e:
ac:c6:0e:ea:12:7b:62:67:d2:1e:8b:a6:2a:33:10:87:20:1a:
a9:88:4e:d6:70:75:53:f7:1c:c6:f5:75:99:66:18:07:cc:59:
bd:52:25:56:92:b4:4a:fa:18:35:b3:10:46:c4:61:02:48:f2:
ae:25:3d:6f:e1:a3:df:90:4c:04:21:ec:de:e0:ac:b3:76:8a:
82:bd:27:08:3f:e0:3c:8d:58:94:20:30:b1:9d:dc:85:3f:27:
16:19:1c:fb:5d:7b:19:7f:fc:83:e3:4a:28:8c:0a:ee:dd:b6:
ee:7d:6f:fb:43:64:9b:c4:28:84:06:1a:21:60:28:5e:8e:e4:
54:9e:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:28 2025 by rpki-client