Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: UVtQcaFM75GXqGIBR3N78wRE+mukUp2tFpVW8zq5Ngw=
Subject key identifier: 12:C0:DB:8E:55:12:72:4F:4E:0C:98:7C:B9:E8:F9:87:8B:33:90:3D
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 0199FC8F85410217F1FF4CF7506459769594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 0AE9
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: M+FOk59ddQ4DyQRryxqWe3LkrXCudq3QRInjjM3DM1o=)
2: oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa (hash: dicu1vprnt1mxmGFnS2f3yDtWezJRT6KC1umgv5QkRo=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:85:41:02:17:f1:ff:4c:f7:50:64:59:76:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=12c0db8e5512724f4e0c987cb9e8f9878b33903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:c2:4e:1a:1a:9d:c6:08:19:6b:f1:03:38:
7f:33:8b:09:ec:e4:85:31:09:bb:bc:81:3d:8b:ef:
a6:5e:b6:11:18:b1:5b:8c:84:03:63:a3:07:6a:0b:
ec:2f:13:0f:a7:68:91:e5:3f:27:30:19:7d:2f:14:
c2:e5:f5:8d:77:48:29:7a:61:38:d7:31:0b:10:9f:
1c:ed:c4:08:f2:81:fa:11:35:bc:e2:f2:be:ec:38:
b6:b0:cd:a1:e8:5f:a4:c0:82:37:8b:1f:2d:03:92:
fb:a7:25:75:de:3e:38:80:ea:21:cb:c7:d8:1b:5c:
57:97:3f:57:97:1f:31:aa:0c:7d:1d:a8:b8:c4:ce:
59:f8:4d:bf:ee:d0:1d:24:f3:0e:d2:93:a7:60:22:
c8:31:9e:aa:85:b1:4f:bc:76:a6:49:d7:61:d4:3c:
be:db:ab:15:d9:62:13:12:37:9b:ba:d9:73:58:e4:
25:1f:a3:21:59:4d:e2:d5:50:06:10:31:26:3f:cc:
ee:a6:9d:34:52:87:f2:ad:1c:e4:45:ff:f1:16:d6:
80:bd:0e:a2:e1:35:84:1b:93:eb:0d:ff:f8:f1:52:
0a:22:54:87:86:52:4c:9a:6e:14:df:7e:2e:b2:7d:
17:3c:38:ee:ed:4d:ac:61:7d:e2:24:bb:fc:88:d4:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C0:DB:8E:55:12:72:4F:4E:0C:98:7C:B9:E8:F9:87:8B:33:90:3D
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:74:94:cf:6d:df:d7:96:eb:05:b9:02:c7:38:3c:00:3e:d5:
6f:3c:27:e7:d7:79:44:9a:d0:7f:56:4a:ff:e3:5b:4e:a1:42:
3e:91:7f:b3:c4:e5:5b:36:66:e6:ed:3a:72:b5:5b:e5:96:d1:
87:72:36:49:f0:9e:af:e5:8e:5f:6b:0b:e5:2b:64:4f:c2:da:
55:54:dd:51:ed:55:f4:9a:1f:38:13:34:0c:fd:9c:ba:a3:36:
21:22:ac:34:0c:13:73:77:84:09:8b:03:2c:12:57:9a:c3:31:
74:dc:fc:53:bf:9c:97:d7:e1:12:6e:23:1c:80:19:e9:43:04:
ea:8b:0f:52:b5:41:db:4c:b6:53:17:42:12:7e:9c:d1:c2:96:
10:2f:41:d8:43:17:62:2b:84:62:85:45:00:8c:92:fc:b1:a1:
a0:7f:ef:8b:02:20:e2:01:7b:ea:6b:0f:e4:d2:80:c4:58:32:
4f:b6:8d:2a:b0:2f:15:ff:4e:c4:71:73:82:85:5a:ee:b4:c3:
7d:cf:7f:e9:ae:cd:0f:65:70:e9:e7:e1:a5:9f:29:9f:63:b8:
3f:01:4e:a4:50:3b:ae:e1:ab:84:a8:aa:d7:13:87:ee:2f:d0:
67:a6:8f:72:e3:32:f4:d3:76:5b:34:38:44:62:17:9f:70:53:
28:bc:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:30 2025 by rpki-client