Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: RtDsW4IdTWeqtebsdrE2cLava1uZZmg2ZalU+oySOpA=
Subject key identifier: 22:4A:4B:A1:7B:2D:8D:C3:EB:ED:78:14:8F:E0:46:41:3C:C8:C3:E6
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 0199FC58308C835F8EF2C31DF57342CC2332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0B2E
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: vH3z5d13J1CUxcAQswaI7UYb89ebbkkiMu6U+5Cm7qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:30:8c:83:5f:8e:f2:c3:1d:f5:73:42:cc:23:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=224a4ba17b2d8dc3ebed78148fe046413cc8c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:58:7c:af:33:0e:63:1a:9f:79:c7:29:55:
c6:33:6a:c7:3c:89:84:4c:8b:d7:f1:ff:46:9d:31:
16:47:e0:d6:1b:3b:58:4e:1a:ad:6b:cd:55:9b:64:
75:11:4a:a0:ef:8e:29:16:0e:2f:7b:0f:63:15:3f:
fc:4c:b4:c4:b0:58:ff:07:11:c7:52:c2:34:ca:c3:
a7:bc:69:21:59:f9:ce:06:77:bf:b0:eb:99:0a:be:
c7:cf:e7:b8:85:ad:3e:54:6f:a4:22:5f:33:03:23:
d9:0d:cf:d9:12:e0:a7:4c:20:61:79:8b:20:82:4a:
8e:97:40:28:93:9d:c1:32:81:e9:f5:cd:47:e8:78:
b9:89:a0:c0:8b:8a:d7:11:c8:29:9e:58:2f:93:45:
eb:ea:c6:98:2c:0a:8d:e7:58:ce:74:b7:78:af:36:
4c:ab:c5:26:f1:dc:38:4e:bf:5e:93:a7:64:93:d2:
54:14:c6:e1:74:26:97:06:1b:ee:48:cc:d4:c4:5e:
64:6c:ff:4c:1b:72:4c:b6:ba:8f:f5:b8:88:31:6c:
88:19:2c:70:35:0a:44:6b:a1:56:9e:9b:74:02:12:
58:cb:c3:fc:44:f1:44:56:87:fe:48:3c:a7:87:53:
7d:6e:0e:6a:be:e6:53:e7:d2:22:ca:af:30:89:3d:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:4B:A1:7B:2D:8D:C3:EB:ED:78:14:8F:E0:46:41:3C:C8:C3:E6
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:8c:50:41:d6:81:32:24:d4:fa:a1:bb:8d:91:df:40:cd:
b7:ec:55:3f:51:fd:18:e8:af:d8:d3:74:49:9c:7a:cf:00:35:
09:35:67:62:4d:85:a4:fc:f2:e7:f8:ee:f5:c7:16:3f:c7:a6:
80:49:19:df:61:8b:ff:e1:72:aa:7c:df:58:9b:d2:a6:c3:71:
dc:01:7a:8a:7b:0c:7e:a8:44:16:d8:2f:a0:0c:71:a8:10:39:
59:86:d3:af:eb:df:85:bd:75:49:74:db:9c:01:9b:e3:50:db:
5d:d9:85:2e:e1:8b:66:b1:94:0a:f1:4f:52:9c:10:23:9e:67:
45:ad:2d:7e:7d:19:19:0d:5e:99:6d:c3:ff:22:46:f6:f6:70:
5a:3b:43:c5:1f:f8:98:0e:1f:53:75:f4:72:fd:f9:51:88:d5:
1d:89:8b:c0:5c:2e:9f:60:c3:58:db:70:9a:70:39:01:ee:eb:
ab:31:0c:4c:5b:08:e4:08:bb:89:80:c1:a3:04:d5:1c:7f:dc:
c5:04:a7:32:5e:e2:0a:1f:c8:9a:ed:56:56:29:7f:f1:4e:58:
23:57:46:57:37:4b:dc:98:cc:71:9b:e9:7f:72:bd:81:59:29:
f5:f3:48:e7:9b:76:b4:33:88:b4:30:e8:2f:5c:eb:12:65:62:
1b:4e:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:37 2025 by rpki-client