Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: SvyOSLqlmUvGlm+M7ftkRW9UwdtsjxG41tCpVMvdAFQ=
Subject key identifier: 3B:E8:46:BD:5E:D9:1A:B3:BF:41:2F:1D:EE:BA:2D:B0:F9:AA:1C:EB
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0199FDD984AE2E7EB151133443134CD3C61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 13C7
Signing time: Sun 19 Oct 2025 19:01:54 +0000
Manifest this update: Sun 19 Oct 2025 19:01:54 +0000
Manifest next update: Mon 20 Oct 2025 19:01:54 +0000
Files and hashes: 1: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (hash: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=)
2: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=)
3: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=)
4: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=)
5: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=)
6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=)
7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: 5jMTMUo2l4aobHh1W/FcD6qLxZWDHsr0UOW1/LvS3y8=)
8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=)
9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:84:ae:2e:7e:b1:51:13:34:43:13:4c:d3:c6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Oct 19 19:01:54 2025 GMT
Not After : Oct 20 19:01:54 2025 GMT
Subject: CN=3be846bd5ed91ab3bf412f1deeba2db0f9aa1ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:ee:d9:3a:21:38:ff:cd:9b:08:84:28:fb:
d0:be:74:11:a8:77:df:dc:df:ac:46:d9:1d:e0:15:
95:de:33:7c:99:22:ae:cb:c6:79:74:72:98:ad:e8:
5a:10:f3:75:3c:67:df:44:0c:f3:d0:f5:3a:ad:78:
4b:cc:7d:53:67:85:02:ee:8e:1a:f3:80:06:d1:fc:
8c:18:8b:04:c7:3a:2b:26:46:99:ec:d3:4a:c6:87:
7e:ea:a9:39:9e:61:4b:ad:1e:83:cc:b7:2a:07:e7:
fb:4d:49:51:34:79:3e:91:d2:b0:f1:4b:2e:30:3a:
03:72:81:2d:bd:78:85:85:16:08:2e:72:49:5d:6c:
a9:9b:1d:6c:a6:17:f2:89:37:02:89:c7:3c:ad:ee:
02:e7:2f:2b:cd:b2:61:65:d0:9b:5f:b8:3e:f1:59:
c9:d8:04:4a:87:10:30:35:9f:f1:71:89:e3:f7:e4:
f7:33:41:18:e7:3c:a1:c0:e1:8a:e0:cd:a2:88:8d:
eb:5d:7a:b9:04:82:25:a0:b1:1e:55:a4:c9:b8:5a:
3f:8a:ff:4f:72:1a:b6:26:7d:b0:9f:83:fe:bc:86:
32:7e:54:8e:b0:5b:ad:be:fd:14:24:b7:b2:1d:ef:
5e:1e:5d:57:b2:98:27:92:74:43:47:bc:4e:8a:77:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:46:BD:5E:D9:1A:B3:BF:41:2F:1D:EE:BA:2D:B0:F9:AA:1C:EB
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:00:7c:c0:11:55:c6:7f:1e:39:5d:9d:86:65:96:b5:25:ab:
6d:50:41:29:8b:cd:5b:04:9f:4c:6f:d4:16:09:ef:07:fe:d7:
d1:15:be:78:ab:81:6c:3e:69:55:f2:82:25:41:3c:39:ca:8f:
b9:f2:0b:dd:c3:7b:e8:51:b6:24:79:77:bc:82:0b:79:8d:22:
cd:55:a0:6c:0e:1e:75:8c:7a:ac:f9:47:dd:81:5a:84:4d:fd:
52:e3:e3:a0:c7:c5:00:be:f3:70:d2:6a:d9:16:f0:aa:19:53:
10:b5:5b:27:36:04:4f:40:95:09:02:65:6d:39:1d:e8:a2:17:
11:6a:38:7c:d5:d9:5f:5e:8b:39:2d:57:50:66:c5:85:9a:33:
3b:c5:e0:c2:56:7f:f2:76:4c:3b:1f:4c:bc:99:90:ff:f8:7b:
72:78:59:c8:05:c9:34:e9:9e:c3:b2:51:9f:79:a8:7c:58:9f:
9c:d4:21:ca:93:33:79:23:55:b4:2c:9e:99:6f:87:43:50:94:
31:9c:e0:54:b0:e8:f4:c9:ba:ac:8c:43:da:2a:8e:d6:21:d0:
02:06:03:7d:14:a1:42:5e:34:50:8c:ef:93:ac:4f:07:01:73:
81:cd:9c:dd:69:7a:e5:90:3e:09:d0:df:47:e4:8d:01:0e:45:
10:30:31:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:14 2025 by rpki-client