Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: Hc3k2Jr/YhtP93uT6jJA+Syjq/mm34e3PgeRCT1ZZn0=
Subject key identifier: 18:71:6C:58:33:6D:CE:E7:91:0B:2C:92:67:3A:D8:1B:6B:B5:2D:18
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 019A725C463DC47EAA1DAE897355DE9138D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 02FE
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: v4CE8f6cuEjC45Li7U5YxCs6t+qzMOmxjArey0/nUmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:46:3d:c4:7e:aa:1d:ae:89:73:55:de:91:38:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=18716c58336dcee7910b2c92673ad81b6bb52d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:49:7e:5d:38:e5:c3:75:99:18:17:06:a5:
a7:ee:d3:9f:28:87:f7:a1:ff:7b:01:c8:74:cd:b3:
bb:de:40:eb:fe:ec:1b:44:7f:f5:af:6b:fb:31:04:
36:5d:c8:8f:22:0f:ae:bd:11:1b:d2:1c:b1:98:f7:
66:ce:b3:c6:e5:c6:9e:5f:33:7a:5b:5e:39:88:94:
8e:88:a5:ee:9f:86:09:b2:85:17:b0:46:87:c6:50:
5e:d0:4b:54:79:1d:52:70:f1:0a:c6:f9:fe:4d:e4:
21:1c:9e:46:44:44:be:00:b3:20:65:96:01:b7:7e:
52:e8:37:bc:4e:72:84:5e:13:14:b5:ea:48:50:2e:
6c:d1:10:98:e1:a5:64:5a:5d:8c:79:b6:64:19:d5:
3a:ec:31:88:aa:37:24:1a:d3:7a:0c:02:f9:2b:28:
2b:da:02:8a:4a:5e:61:20:9f:18:34:0f:86:e7:14:
40:36:6c:bf:28:6f:d1:e9:2e:09:ed:63:2b:02:96:
5d:92:1b:e5:01:93:65:56:be:a2:d7:8f:a4:ca:17:
a9:86:b8:c4:57:a6:a8:b1:73:76:0d:ec:a9:cf:c1:
f7:5c:60:bd:40:84:a9:a0:95:77:5c:09:3e:bd:b6:
0d:f1:00:70:5a:4c:4f:df:ac:91:29:40:e3:d3:de:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:6C:58:33:6D:CE:E7:91:0B:2C:92:67:3A:D8:1B:6B:B5:2D:18
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:50:64:4e:37:8c:e7:10:19:da:4c:90:ec:d1:bf:68:67:51:
12:e1:9f:0e:c6:d8:ec:76:d7:65:00:8e:97:b5:92:89:49:09:
c6:de:8f:ef:8d:ca:10:30:4d:15:a7:56:26:c5:1a:20:6d:12:
3b:9a:a2:92:a8:8a:2b:4c:4f:0c:1a:77:01:3c:2e:0b:04:55:
cd:ee:c0:35:20:eb:78:07:eb:07:1a:25:e8:8b:c9:1f:3b:88:
22:de:8a:11:2f:1c:25:84:37:99:7b:c2:85:f5:09:1b:0c:d3:
29:32:00:28:c2:b9:52:f1:55:8b:54:97:bf:7f:0c:e1:10:2f:
09:d0:37:43:2c:af:34:63:9a:29:5e:ab:5f:49:22:a8:24:53:
7a:65:d5:33:c3:55:ec:fa:94:f2:ee:29:77:36:df:1b:49:0b:
ad:8e:94:05:e9:5d:4e:0e:29:01:09:00:b0:91:45:f8:9d:27:
f5:79:b8:d3:4d:37:ca:0b:dc:83:8d:14:fe:51:8c:1b:5d:24:
bd:94:80:c5:e2:a9:82:1b:ce:67:1f:17:a3:4b:b4:99:59:4e:
e3:b7:83:64:a9:15:a2:28:a1:bf:d6:2b:be:20:52:b2:f4:17:
83:82:fe:a4:3d:67:e3:6d:68:c5:27:00:f5:8b:0c:63:f2:1f:
0d:1d:5a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:42 2025 by rpki-client