Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: TPA2VJTPeEfKq5LVu+WYsfxv8WjvgkcSIgSkSnMBuaw=
Subject key identifier: E9:A4:7D:1D:70:35:C1:DA:CB:4B:4E:93:46:A7:40:CC:22:C2:3E:C1
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 0199FC8F5D05E369CF56F9A4DA44F9EB0D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 07BF
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: 269bz1iTJWok1dxisky9YIagsIvughWOuQJQujqkODs=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5d:05:e3:69:cf:56:f9:a4:da:44:f9:eb:0d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=e9a47d1d7035c1dacb4b4e9346a740cc22c23ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2e:b6:4a:a3:b4:b3:98:15:fd:d0:44:d2:4e:
4e:ad:b0:65:46:67:2e:a7:3d:ce:27:47:93:c8:54:
a9:76:74:8c:db:0a:d0:45:9c:d7:21:0a:fc:bd:b0:
fd:b7:31:21:2d:b5:93:b3:77:ad:72:11:ad:c1:87:
5a:47:78:56:6e:9e:60:04:2b:9b:04:3b:7a:08:04:
e7:f5:1a:cb:69:f2:28:f9:28:8b:da:00:5b:a3:b6:
7b:b0:62:68:f8:e8:15:69:65:6f:b6:70:af:0a:b6:
ec:ca:d8:8c:54:d7:e4:58:eb:a0:dd:10:42:e2:37:
c4:65:10:53:cc:a3:ea:83:e4:4e:8d:d9:16:a2:4b:
b1:5c:e9:c3:be:61:6f:3c:b5:f5:ac:20:2c:d8:31:
4a:c9:49:6c:6f:39:14:a5:cc:bd:71:49:66:52:09:
2e:26:3a:78:ca:c0:b8:8c:c7:f3:ec:66:a4:c7:82:
9e:ee:6a:1f:20:73:41:92:0c:48:6f:1c:00:97:7b:
e2:9b:2d:1d:81:23:04:92:e5:4c:c5:0e:6b:8f:10:
bb:d3:8e:1c:6e:2b:f2:06:d7:f9:07:a7:71:0f:ed:
5e:a1:a2:48:de:35:bf:be:b0:ee:29:f9:35:fa:bb:
73:01:b3:46:05:40:f3:d6:52:47:8c:df:b9:fe:a7:
ce:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:7D:1D:70:35:C1:DA:CB:4B:4E:93:46:A7:40:CC:22:C2:3E:C1
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:df:d1:25:a0:32:00:11:d2:db:e1:f1:b8:74:cc:e2:7c:
e0:de:01:3d:6f:4d:3e:81:95:f2:c4:c0:c8:f2:e2:e8:09:b3:
27:f5:0f:8a:f2:a2:38:08:71:af:a8:8a:fe:b0:6e:f7:78:ea:
1e:61:4e:1e:34:36:ea:13:a3:f4:2e:2b:e6:38:db:fa:ad:09:
49:ca:8d:4b:14:26:6a:9b:31:37:a1:e6:17:bf:e8:d8:c4:26:
d7:f9:db:ef:63:ab:18:5c:73:4c:f9:b3:01:d7:9f:58:c7:6b:
98:6a:71:95:39:c2:85:c0:75:1e:26:a2:6c:d9:22:f7:be:a3:
38:6f:5f:6f:f8:83:69:70:7d:98:ff:5b:c0:f5:b1:51:19:a8:
54:36:ba:76:4f:06:9d:9d:ec:02:ad:b0:d1:65:e2:86:37:e8:
c3:75:44:91:55:9a:e6:39:81:6f:69:d1:a1:e0:09:40:d7:2e:
2c:85:f5:7f:9c:3e:02:32:90:80:42:c5:20:f9:77:d1:7c:05:
1d:a8:c0:9f:3a:a5:f0:cc:21:7b:49:2f:2e:e8:75:37:e3:62:
07:da:25:e7:05:5d:3c:39:3b:29:55:73:ee:06:32:89:66:9d:
c6:8f:dc:94:cf:de:f1:b8:37:95:47:ae:4f:08:f8:9a:99:10:
13:9c:1c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j10F42nPVvmk2kT56w0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4
YWNiZTIwHhcNMjUxMDE5MTMwMTE3WhcNMjUxMDIwMTMwMTE3WjAzMTEwLwYDVQQD
EyhlOWE0N2QxZDcwMzVjMWRhY2I0YjRlOTM0NmE3NDBjYzIyYzIzZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+S62SqO0s5gV/dBE0k5OrbBlRmcu
pz3OJ0eTyFSpdnSM2wrQRZzXIQr8vbD9tzEhLbWTs3etchGtwYdaR3hWbp5gBCub
BDt6CATn9RrLafIo+SiL2gBbo7Z7sGJo+OgVaWVvtnCvCrbsytiMVNfkWOug3RBC
4jfEZRBTzKPqg+ROjdkWokuxXOnDvmFvPLX1rCAs2DFKyUlsbzkUpcy9cUlmUgku
Jjp4ysC4jMfz7Gakx4Ke7mofIHNBkgxIbxwAl3vimy0dgSMEkuVMxQ5rjxC7044c
bivyBtf5B6dxD+1eoaJI3jW/vrDuKfk1+rtzAbNGBUDz1lJHjN+5/qfOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmkfR1wNcHay0tOk0anQMwiwj7BMB8GA1UdIwQY
MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt
OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm
LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9/f0SWg
MgAR0tvh8bh0zOJ84N4BPW9NPoGV8sTAyPLi6AmzJ/UPivKiOAhxr6iK/rBu93jq
HmFOHjQ26hOj9C4r5jjb+q0JScqNSxQmapsxN6HmF7/o2MQm1/nb72OrGFxzTPmz
AdefWMdrmGpxlTnChcB1HiaibNki976jOG9fb/iDaXB9mP9bwPWxURmoVDa6dk8G
nZ3sAq2w0WXihjfow3VEkVWa5jmBb2nRoeAJQNcuLIX1f5w+AjKQgELFIPl30XwF
HajAnzql8Mwhe0kvLuh1N+NiB9ol5wVdPDk7KVVz7gYyiWadxo/clM/e8bg3lUeu
Twj4mpkQE5wcKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:29 2025 by rpki-client