Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: 13JYUnpmN9nHsfpChv3B4w2NGUj6sFHrFJx3JczWSUw=
Subject key identifier: 11:8C:B4:83:29:E3:F6:D6:BE:DC:E7:37:0F:FA:19:88:44:1C:E0:8D
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 0199FBEBD3B1072EB82ED00AF188FA68E32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: IJBul+H8nNFMDCIS2We+HFyoqqoWrupDRKSnHnFw/to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d3:b1:07:2e:b8:2e:d0:0a:f1:88:fa:68:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=118cb48329e3f6d6bedce7370ffa1988441ce08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:a8:34:82:62:49:75:c1:2e:e7:c3:aa:13:
c5:0a:67:c4:56:76:fa:2c:32:15:9e:a2:d9:60:c2:
04:e0:1a:d0:34:ad:65:07:7c:5a:9f:05:d3:02:cc:
2c:43:02:e8:49:42:6a:a1:6a:b6:59:46:a2:fa:ae:
7d:1e:c1:b2:08:79:3d:34:a3:d7:42:c5:74:35:9b:
79:d7:03:62:e7:da:23:23:0d:45:dc:1e:1f:c9:0e:
e7:a4:ff:43:a1:db:b3:58:7f:f1:d6:b6:66:ec:0b:
55:05:82:8e:12:e7:b2:a4:06:f8:38:ad:8c:f1:e6:
f3:ff:ef:3a:aa:d5:2a:2a:9d:a9:de:3d:c5:23:b1:
a2:80:31:a1:ba:2e:9e:8a:80:0a:b1:09:4d:cd:98:
7c:16:dd:09:17:7f:f3:4a:c5:61:9f:66:27:89:c4:
15:06:b6:2c:01:61:69:ee:64:1d:3f:87:95:e9:87:
6f:56:d2:56:ea:81:72:f0:0f:3b:2d:00:05:8f:76:
a6:74:ad:f9:51:45:78:12:d8:5f:82:a0:f0:5f:02:
99:86:b9:f8:90:b0:c1:88:7b:57:c1:ca:58:71:5d:
f4:83:e2:aa:0e:4c:b7:9b:fa:27:6a:1f:94:d3:9b:
5a:72:bd:21:73:b8:44:67:55:71:26:db:6d:d6:8e:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:B4:83:29:E3:F6:D6:BE:DC:E7:37:0F:FA:19:88:44:1C:E0:8D
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1d:67:58:be:a2:44:36:05:4b:77:3e:33:9f:a8:f9:17:a2:
33:c5:f6:ff:ad:50:3f:ac:e7:b9:44:ec:f7:89:1b:f0:a0:2b:
11:1f:1c:3b:09:ec:0b:22:9d:ca:a6:a0:b3:40:8f:82:b8:9f:
aa:bc:cd:c0:2e:c8:a8:39:0d:d9:cb:92:44:26:16:b7:04:11:
30:4e:01:0a:46:ec:97:0c:a3:4b:af:2c:5c:d0:5a:8b:65:e7:
12:d5:04:23:93:3c:54:c5:3d:fa:b8:39:fa:d9:25:5d:08:18:
5c:33:e5:d4:54:17:23:44:94:dd:97:f4:97:16:17:26:84:ab:
47:66:d6:0f:71:a3:83:51:b0:d1:03:50:8d:4a:bc:70:f5:8b:
08:01:43:a4:64:84:52:63:6f:cd:1a:87:4c:c3:17:c3:fa:28:
75:08:3f:78:a0:e9:3a:a8:a2:1e:68:10:d6:47:cc:db:1a:b1:
f9:e0:24:cc:59:0f:ce:39:00:e5:3c:54:97:d1:d2:98:46:a1:
2a:c5:08:98:b6:43:15:7c:e1:e6:6f:0b:9f:0d:22:e6:71:7e:
8b:3f:7f:49:07:4b:f0:57:7f:72:e2:47:e8:c0:3d:aa:ea:9b:
d3:ae:09:bd:e8:56:c6:53:85:3b:79:39:71:6f:ce:6c:24:7c:
82:f8:aa:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769OxBy64LtAK8Yj6aOMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz
YmVhMWQwHhcNMjUxMDE5MTAwMjQwWhcNMjUxMDIwMTAwMjQwWjAzMTEwLwYDVQQD
EygxMThjYjQ4MzI5ZTNmNmQ2YmVkY2U3MzcwZmZhMTk4ODQ0MWNlMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72KoNIJiSXXBLufDqhPFCmfEVnb6
LDIVnqLZYMIE4BrQNK1lB3xanwXTAswsQwLoSUJqoWq2WUai+q59HsGyCHk9NKPX
QsV0NZt51wNi59ojIw1F3B4fyQ7npP9DoduzWH/x1rZm7AtVBYKOEueypAb4OK2M
8ebz/+86qtUqKp2p3j3FI7GigDGhui6eioAKsQlNzZh8Ft0JF3/zSsVhn2YnicQV
BrYsAWFp7mQdP4eV6YdvVtJW6oFy8A87LQAFj3amdK35UUV4EthfgqDwXwKZhrn4
kLDBiHtXwcpYcV30g+KqDky3m/onah+U05tacr0hc7hEZ1VxJttt1o4HLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGMtIMp4/bWvtznNw/6GYhEHOCNMB8GA1UdIwQY
MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt
N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3
LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwx1nWL6i
RDYFS3c+M5+o+ReiM8X2/61QP6znuUTs94kb8KArER8cOwnsCyKdyqags0CPgrif
qrzNwC7IqDkN2cuSRCYWtwQRME4BCkbslwyjS68sXNBai2XnEtUEI5M8VMU9+rg5
+tklXQgYXDPl1FQXI0SU3Zf0lxYXJoSrR2bWD3Gjg1Gw0QNQjUq8cPWLCAFDpGSE
UmNvzRqHTMMXw/oodQg/eKDpOqiiHmgQ1kfM2xqx+eAkzFkPzjkA5TxUl9HSmEah
KsUImLZDFXzh5m8Lnw0i5nF+iz9/SQdL8Fd/cuJH6MA9quqb064JvehWxlOFO3k5
cW/ObCR8gviqaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:34 2025 by rpki-client