Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: 0m66Ho+vLqmYCbrSsQ21qJGnQX1VydRs0vue7cHDRMA=
Subject key identifier: 7A:2D:BA:A3:E0:BC:79:0A:54:50:F3:CB:FB:7B:E6:BA:E7:F9:71:35
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 0199FDD8B793B4D766E58D1A17030BB74DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 12D7
Signing time: Sun 19 Oct 2025 19:01:02 +0000
Manifest this update: Sun 19 Oct 2025 19:01:02 +0000
Manifest next update: Mon 20 Oct 2025 19:01:02 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: ehzgei3NsHtnIKyen7i52tjjDMbi1HtwR5feWgV95Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b7:93:b4:d7:66:e5:8d:1a:17:03:0b:b7:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Oct 19 19:01:02 2025 GMT
Not After : Oct 20 19:01:02 2025 GMT
Subject: CN=7a2dbaa3e0bc790a5450f3cbfb7be6bae7f97135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:cc:24:6f:8f:a0:23:4a:ef:0a:4f:05:80:
fd:e4:c6:7a:41:a3:53:5e:09:e5:9f:f8:01:a8:cb:
01:ae:a5:cd:ca:2d:a8:54:d9:fb:6e:83:98:54:04:
2b:be:1b:4d:b8:47:cd:90:3a:25:bd:32:d7:7b:6c:
5b:69:dd:b9:57:08:65:35:ac:6e:be:e5:b0:32:9f:
d3:68:08:44:f4:c7:c4:50:28:71:e0:4b:13:75:2a:
ec:1e:0b:b5:da:9a:32:b7:99:03:e5:f0:2f:05:03:
0c:c9:21:08:2f:65:df:43:85:61:4b:24:18:bd:b0:
62:7b:0f:cf:ce:0c:86:aa:98:de:ad:21:08:91:26:
f1:3c:7d:0e:be:4e:49:37:54:27:9e:f1:45:fd:5a:
aa:8d:9c:84:61:50:c1:e0:71:ee:b6:67:a4:c9:05:
6d:78:4b:8c:70:3b:ac:a2:0a:a1:3b:c9:45:57:5f:
39:f5:89:85:66:31:e4:c4:1a:52:da:60:c0:1d:23:
f5:f1:de:51:7a:6e:1e:ce:00:b4:fe:a0:77:0f:cf:
79:a0:73:98:17:b2:63:d7:e3:63:44:68:cb:8b:e5:
69:95:f7:93:29:06:eb:0e:a4:61:b2:b0:01:ee:0e:
c0:56:c2:af:83:8e:ca:58:31:8c:59:e6:05:61:ac:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:BA:A3:E0:BC:79:0A:54:50:F3:CB:FB:7B:E6:BA:E7:F9:71:35
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a4:e9:d9:1e:96:f0:4c:82:f4:4a:3b:7c:0c:2b:7c:7d:e8:
05:17:2b:39:85:01:3a:15:92:22:70:6a:4e:06:96:0d:1a:2d:
af:da:06:75:bf:43:3a:b6:0b:90:61:84:eb:35:e8:f8:31:7e:
3d:89:31:e0:9d:22:e1:81:60:7f:27:41:9a:a2:2f:6a:fe:82:
79:b4:25:66:59:d5:d7:a3:67:99:cd:2f:bb:a7:35:6f:60:ff:
b6:51:ed:6b:82:14:19:82:0c:ea:79:14:89:73:4a:18:b2:b1:
ea:73:24:a0:d1:cb:da:90:88:f3:95:b2:ef:04:dc:dc:2b:0e:
7e:47:eb:7b:19:89:50:c1:53:61:59:7a:34:b0:58:0c:25:63:
86:35:52:0d:62:b7:e5:34:68:f6:2f:b3:20:0d:c9:c0:8d:0a:
23:35:b2:65:bb:d0:f7:cb:d7:88:13:fb:6a:7b:d4:bd:d2:4c:
1f:f1:48:ac:75:a4:d3:2d:b8:2c:3c:41:a8:ad:68:93:b4:a2:
95:80:bb:34:38:b8:2a:0f:1c:29:b3:72:a1:55:f7:35:4a:e0:
07:c0:53:5d:ad:58:b9:4a:e0:5e:83:bd:d1:37:f6:5a:78:90:
d4:51:ce:e5:e0:49:be:d9:9d:88:35:7f:e9:41:5a:77:66:4c:
cd:af:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:51 2025 by rpki-client