Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: dKqK3HTjopfd6z3PMigZkWd5peAFYgmYrCr2tNRV0YA=
Subject key identifier: B2:FA:DF:9F:F5:05:6E:5E:02:2A:A1:9B:AE:EE:E0:A6:4F:30:17:95
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 0199FCC6B216B490AE98AD6FE56481927C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 127A
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: ReEhIDWQA/aQvnXh7r8zFyax5ZJvhBo+SU0rY80237g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b2:16:b4:90:ae:98:ad:6f:e5:64:81:92:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=b2fadf9ff5056e5e022aa19baeeee0a64f301795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:ef:82:84:1a:1c:36:af:ee:ee:bf:ee:8e:
04:f4:e4:1e:73:14:00:96:be:ba:e2:c7:f9:25:7c:
50:69:69:c8:a5:7a:3d:28:15:bc:18:8e:a8:f8:4f:
3e:9c:e7:34:9f:29:94:fa:83:f6:e6:b7:a1:4f:f7:
8f:02:b2:8f:87:87:76:f2:f9:8d:f8:b1:85:bf:0a:
d7:80:28:0b:51:a2:c6:a0:11:93:a1:35:09:be:32:
16:c3:e8:5f:33:ae:fa:b9:ee:04:44:3c:ca:48:0b:
31:68:7f:da:fb:ce:8c:d0:d8:ee:af:3b:b3:5b:59:
e7:1a:e9:48:80:ef:f0:69:d7:31:07:20:4c:d7:6d:
74:d9:64:ec:40:12:62:2a:b0:c5:c3:27:9a:20:a7:
2d:29:f4:68:ed:03:9e:69:b5:57:48:29:20:fd:71:
eb:f7:73:4f:78:a9:54:68:ca:67:93:77:7f:88:cf:
d5:41:95:c9:07:cb:c7:a2:29:bb:8f:da:04:a3:8d:
63:d8:81:cb:52:27:50:19:9c:3e:b5:6c:cb:ec:3c:
e0:26:87:6c:9e:f4:a8:34:bd:f8:9f:64:09:dd:29:
18:a2:1b:84:60:e5:70:b6:c1:a7:32:01:6b:3b:bb:
23:7d:21:33:88:f2:67:68:a5:cf:7f:29:b5:28:24:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:DF:9F:F5:05:6E:5E:02:2A:A1:9B:AE:EE:E0:A6:4F:30:17:95
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:63:9f:d0:59:a1:22:d9:66:43:12:36:74:0e:e4:27:91:ad:
78:81:1f:7e:55:8f:0d:eb:90:6b:9b:8a:b5:3b:57:cd:e7:6f:
12:a4:c5:7c:f7:5c:00:72:69:23:33:8e:17:4f:77:77:2e:67:
26:e5:d6:99:e0:7e:aa:ab:48:7b:5d:94:5c:15:57:5b:d9:0a:
c9:8c:81:39:43:60:c0:c4:f1:fc:11:a3:2f:42:4c:52:c5:59:
66:b8:b4:0c:f3:61:d9:91:e9:04:6c:af:02:ca:fd:73:cc:67:
c6:05:77:b1:c6:ec:d0:02:f5:ed:f0:ea:bc:b3:52:03:54:d4:
c1:d7:7f:c5:b9:66:fb:ea:d4:a9:b6:5b:81:2b:49:97:4c:50:
4e:b2:78:d0:6a:f0:2f:d1:a2:2f:17:11:36:2f:c0:07:84:6e:
26:64:9f:55:a3:ff:75:cf:bf:5a:83:84:1d:05:69:8d:17:93:
ae:cd:41:d9:67:79:cc:05:69:75:27:f3:36:9e:43:68:5c:3c:
fe:54:80:75:00:98:8f:9f:4f:cb:ae:10:65:ba:0e:8e:bb:24:
9a:66:28:d0:53:53:ca:b7:df:b1:39:b5:00:9d:be:85:71:d5:
d8:89:9a:2f:ca:f5:ef:bd:d9:5c:30:e4:52:fb:d2:15:27:a2:
46:6f:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:49 2025 by rpki-client