Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: mtqadE95g3rxvnypTk+zQEPZzZNnrCztKg9bkVdRGMI=
Subject key identifier: 31:CA:08:45:FB:55:CB:EB:E8:B4:DE:DB:E4:38:CA:3C:87:AC:38:F9
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 0199FBEAFCE0C35596752CFD9433956517FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: 04X3IgztjFfvzkLtJ7zeRpaR+celgFsFGbX5JuAKINY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fc:e0:c3:55:96:75:2c:fd:94:33:95:65:17:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=31ca0845fb55cbebe8b4dedbe438ca3c87ac38f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:cc:78:b1:9c:f0:27:48:8e:e1:3a:f6:fb:
53:8d:4f:c7:8a:73:7d:a2:15:96:fb:bd:29:af:18:
3f:84:a7:58:8c:d8:b3:fc:d4:f3:67:c7:e6:bb:44:
c9:59:be:93:95:5a:11:d6:07:f2:a3:7c:28:c3:e1:
87:36:d0:37:cc:82:62:19:b7:fc:c3:21:21:d1:7e:
cf:64:3f:a0:5a:43:9c:cd:52:a8:8d:3f:57:88:b6:
e2:d2:fb:bb:5e:8b:9b:63:38:15:c6:92:7b:0c:48:
0a:de:d2:fc:90:84:9f:10:70:28:4c:96:40:70:86:
37:84:1b:76:92:59:0a:a9:42:1a:d9:2e:a8:91:46:
d0:70:12:93:22:e2:cb:03:52:09:22:4a:40:ad:98:
d5:d2:31:91:3d:c9:a0:60:c1:78:12:32:04:dd:1c:
34:2f:e2:25:52:ca:d0:ad:45:23:34:97:2c:d4:e8:
7f:1e:6f:8f:10:2f:a1:cb:11:db:31:af:1f:f1:c5:
68:c8:11:d0:29:c0:95:50:21:ce:f8:a6:c6:97:53:
11:92:45:cc:15:e9:d7:2d:61:d8:14:d2:71:c4:13:
30:44:48:32:1a:46:44:1a:61:43:10:8b:11:9a:bc:
ad:3a:ad:35:c6:60:0d:22:9c:cb:1b:96:0b:da:53:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CA:08:45:FB:55:CB:EB:E8:B4:DE:DB:E4:38:CA:3C:87:AC:38:F9
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:17:b1:92:20:d0:77:26:c7:ac:40:ac:ad:d8:c8:9b:9d:3f:
72:e7:ba:d9:ee:a7:ea:0f:e9:92:0d:94:7e:27:1e:d4:bc:85:
38:9c:34:98:bc:5e:58:bf:1f:70:be:1c:0d:d1:ec:4c:81:ee:
e0:8b:65:9d:11:2f:12:da:0c:ad:21:43:6b:9c:87:48:3c:9a:
bd:3b:10:3d:ef:01:a6:66:6e:03:19:4e:f8:5e:24:f0:a2:5b:
45:64:2e:12:82:96:72:76:72:3e:a5:96:8f:4f:55:36:f5:cd:
46:b1:cc:2c:8c:62:82:00:25:50:1f:b8:14:64:f1:a4:6c:b6:
54:92:cd:61:ae:12:4d:2e:2b:fc:17:d0:c8:86:f2:67:5d:85:
2c:54:31:7d:c8:57:2c:f0:27:eb:e0:bd:88:b6:42:0f:31:ad:
60:7b:93:31:25:e5:fe:d9:3a:f4:1b:d0:a2:92:f0:03:42:ee:
fa:a2:d3:af:f8:c7:b0:16:38:cb:45:a7:e5:aa:57:8a:26:ac:
b2:af:07:48:d8:82:73:71:57:c9:49:94:67:20:b2:86:df:f4:
e2:fe:ab:d5:22:dd:08:7c:3c:48:d5:cc:89:22:41:f6:f2:ef:
27:1f:05:e2:e1:58:1e:89:6b:d6:4f:14:09:40:c9:cd:56:4e:
ef:99:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:30 2025 by rpki-client