
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: 8CfqtsCcehR0u2dqc/5SSelcs0YX8mB7gk3M1D/46f0=
Subject key identifier: 18:CC:BF:6F:B6:F0:D7:DB:26:AA:68:14:0C:34:C7:05:D4:D2:47:30
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 0199FBEA95AC0F2433639E368883168E7200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: 8Xp+K9GGSS659Ore6DCqtZkewEwuXJk+gB+Oj47kcpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:95:ac:0f:24:33:63:9e:36:88:83:16:8e:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=18ccbf6fb6f0d7db26aa68140c34c705d4d24730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:23:bc:0e:dc:2c:23:de:2d:c2:a0:59:73:
0b:a5:3f:00:28:48:4e:9c:0f:50:23:0c:be:16:95:
1e:05:cd:5d:47:d3:60:f8:bf:9f:ea:64:92:86:49:
3d:ec:aa:7b:7f:db:c8:89:b6:81:71:ae:9b:04:cf:
ed:02:db:4a:15:27:02:a0:0a:52:50:d2:04:19:16:
96:6a:bd:1a:a4:95:be:f1:1b:7b:a4:31:ff:48:66:
f0:1a:37:fa:a4:06:b5:0e:38:f4:58:3b:5c:fc:fc:
f5:a3:77:db:f1:48:13:10:4e:f3:49:91:42:93:cb:
97:d8:ac:67:4c:82:be:31:1b:1d:1a:48:cc:f9:5e:
01:fd:7f:56:27:e5:d8:26:15:10:fe:9a:2b:67:e0:
a7:bd:08:b8:65:29:e9:c1:e3:54:c7:14:36:5f:89:
e4:7f:18:bb:44:21:8b:24:bd:b4:d2:47:56:35:66:
74:80:59:d3:d9:e4:fb:d6:40:b5:75:6f:9d:5e:ab:
4e:06:3a:9a:82:5d:63:b4:8f:c3:d4:ae:ec:81:ca:
b3:e7:d5:38:c8:88:78:c8:a6:cc:2e:c8:28:69:b7:
71:e6:16:dc:b3:15:30:52:a3:c3:a6:43:89:30:0b:
f0:3e:d4:72:ad:77:4b:56:3a:e5:20:ab:8c:b9:66:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CC:BF:6F:B6:F0:D7:DB:26:AA:68:14:0C:34:C7:05:D4:D2:47:30
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:e6:46:21:5c:c9:80:02:79:9a:a1:05:9b:db:a3:60:09:
62:47:13:48:37:8c:c2:2a:9e:f2:50:9a:60:b5:31:d9:88:7b:
cd:13:4a:55:de:8c:c8:cb:1d:5c:f3:16:77:ba:26:49:61:be:
d7:a9:2a:ed:c8:ea:9e:76:29:fc:42:44:16:92:26:31:ba:8f:
4a:a3:8b:0c:b4:82:04:a6:b3:b5:21:71:eb:2b:80:58:f9:2a:
1f:d9:fd:59:21:29:8a:d3:0a:c3:c9:fe:97:83:bb:b7:66:b0:
82:28:03:18:36:a8:53:34:c6:fa:d9:2f:f6:16:2a:43:6a:7e:
59:9b:07:7c:93:5c:44:cd:8d:d9:e9:35:1c:5b:e4:b0:03:7a:
97:e2:22:99:ea:8e:9e:d4:22:f1:45:67:ee:69:81:34:cc:a6:
eb:27:b8:7c:91:4a:e1:77:9d:c3:d4:56:2c:4b:ae:68:3b:41:
1d:95:7f:4c:41:54:c1:fb:43:49:a1:c8:43:cd:a6:20:2e:0f:
83:a2:5c:3e:41:be:14:51:63:ec:94:b2:ec:78:fb:d2:2f:8d:
ab:1c:c6:ab:68:9d:d4:ac:29:6d:49:0c:94:f6:d5:20:5c:f3:
d9:f5:a4:9e:53:4f:5e:31:fb:64:68:75:17:0d:7e:8c:58:85:
90:e6:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:59 2025 by rpki-client