Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: PAlrmBnxRTXNRq3VUfzkbEXlgrzr3Jz6CXUImFk+/kU=
Subject key identifier: E6:E7:86:A8:62:AA:AC:48:FC:20:18:6D:AA:6A:56:B4:87:22:EB:F2
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 0199FCFD3E3FB735DD9BBB094298DE3501CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 10DE
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: kh2TYKjMJKdRj7+evqrAa4lCDffxyxhlsBWTWgAjMYM=)
2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3e:3f:b7:35:dd:9b:bb:09:42:98:de:35:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=e6e786a862aaac48fc20186daa6a56b48722ebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:7d:12:42:e8:a4:ab:52:e1:1d:af:22:fb:
a3:ad:58:76:1c:c7:d1:7e:62:7e:da:e2:fb:19:f3:
1f:0b:e4:84:3e:93:99:b8:8a:88:24:17:41:1e:91:
cd:d5:04:9a:5d:3e:8f:18:1f:a4:92:f3:8a:82:4c:
26:13:44:e4:6e:4a:3a:22:32:0c:03:8e:cd:06:ae:
10:f3:78:d7:7d:b6:ee:8a:fd:e9:c9:a4:da:e2:ce:
6d:e5:54:c7:fb:46:70:e2:35:ce:08:e3:82:b4:ca:
54:eb:80:01:ac:a1:33:70:ae:cd:06:ef:83:f1:84:
c4:33:34:6f:9a:cb:4f:c5:34:e8:60:a5:b0:3f:11:
42:d7:14:73:82:53:e9:66:e1:c1:55:c8:7f:6e:3b:
6b:7c:39:87:ae:bc:2b:7f:39:55:be:b4:d0:59:9f:
14:ab:2d:63:47:25:38:fc:5e:ea:46:7e:b1:e2:0e:
ff:82:58:1b:85:01:e6:79:0d:d3:9a:3b:be:27:3d:
5d:7d:82:45:2f:14:84:d1:75:5b:89:50:b5:9b:8d:
a4:06:73:ab:b1:27:54:64:d5:47:5e:cc:d3:86:e9:
fd:f5:72:2d:75:e3:cb:0d:d2:cf:df:32:42:44:fd:
20:c2:10:67:63:8a:a7:97:ba:b9:7b:16:43:f2:38:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:86:A8:62:AA:AC:48:FC:20:18:6D:AA:6A:56:B4:87:22:EB:F2
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:6b:a6:0c:87:1c:1b:42:4d:99:12:a8:19:af:43:80:e3:
e6:af:ef:c8:82:ca:48:51:c6:49:a4:1d:3d:4a:9e:7d:ba:82:
95:22:a7:84:a7:9b:35:fe:d8:2f:4e:28:a3:70:d7:ca:90:e8:
c6:0d:fd:5d:1e:5c:40:49:b0:73:d2:b5:6d:28:53:92:ff:81:
91:ee:c9:ae:ee:e8:b2:f9:f7:e4:23:8c:f5:7a:79:2e:cb:6d:
d6:e9:24:7e:34:bc:cb:4f:a2:b6:64:51:99:c4:12:2c:44:fc:
6d:20:ac:7d:9e:f6:65:49:fa:97:1f:f5:fb:67:19:81:36:66:
72:08:46:2c:78:00:fb:c2:06:5e:d3:1b:52:a8:98:01:8c:f1:
76:34:05:c9:fd:28:ed:2d:08:d1:3b:08:7e:2d:b5:7c:2c:59:
f6:d9:95:f4:c8:cb:da:fc:49:b9:97:e3:66:e0:23:0a:8c:64:
72:1c:8c:cc:65:6b:2e:cb:30:bd:4e:f6:54:5a:cd:1c:6c:c4:
c7:66:3a:61:6b:8f:2d:6d:b3:2f:cc:f9:0e:aa:05:74:83:b8:
37:2d:68:e2:0c:55:62:47:ac:90:49:30:f1:60:f4:42:98:e0:
1a:8f:15:ff:61:4b:84:5f:03:75:b5:7c:ad:ed:4e:b0:61:ea:
61:de:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:24 2025 by rpki-client