Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: k6hkb6cH1+/wgF2JB4RnwEm/aSlFokAK7dapPsZjtqQ=
Subject key identifier: A1:C7:34:A0:4C:3B:15:C5:A5:6E:82:B4:D5:7B:A4:D8:00:6D:EB:DF
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 0199FD6AE249EEAE8A3E917E4DEDD0F9C7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0C54
Signing time: Sun 19 Oct 2025 17:01:04 +0000
Manifest this update: Sun 19 Oct 2025 17:01:04 +0000
Manifest next update: Mon 20 Oct 2025 17:01:04 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: QmlWS/uJTSEawr3M5wifz7qztdGfvUJiN41rR5oSLSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e2:49:ee:ae:8a:3e:91:7e:4d:ed:d0:f9:c7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Oct 19 17:01:04 2025 GMT
Not After : Oct 20 17:01:04 2025 GMT
Subject: CN=a1c734a04c3b15c5a56e82b4d57ba4d8006debdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:84:f0:06:95:90:6b:54:71:34:96:64:77:
6b:44:f9:62:db:fd:05:0b:1b:41:46:62:ee:7e:c4:
05:90:fb:d9:d9:2d:ed:3c:e9:84:6c:ce:f0:42:9f:
11:1e:f2:7c:97:a3:85:4c:fb:f0:21:b9:37:0c:52:
10:b3:ab:42:c0:d2:4d:63:4f:34:44:f0:0d:c3:ea:
4c:92:6a:64:1e:98:60:4c:e6:58:17:16:f5:8b:61:
37:3b:73:83:e7:4c:2a:ab:e7:5a:08:20:19:01:dc:
7f:8e:e5:11:9b:de:c2:5a:80:a7:31:ca:cc:f8:09:
ef:a2:de:8b:12:06:cd:86:a8:1b:0b:0c:c8:cc:22:
be:e6:58:92:b6:50:64:e1:51:a7:f1:ea:9c:b8:89:
2c:f0:4e:39:a3:33:69:5f:11:3b:6b:31:2b:34:6e:
6c:c2:b2:43:ea:00:19:84:14:8a:bf:da:ce:9c:f5:
2c:47:2f:7b:9a:80:9d:6c:6c:99:ad:2d:6f:d9:64:
48:29:98:ac:07:7d:9c:53:49:30:1b:dc:21:de:fa:
6b:d1:2e:b8:9c:7b:d3:af:17:cf:eb:ce:a3:4e:c7:
76:22:90:9a:ad:ab:a6:00:d7:d3:37:27:6b:69:dc:
c7:9b:07:92:97:e9:26:45:3e:46:77:c5:c2:1b:6f:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:34:A0:4C:3B:15:C5:A5:6E:82:B4:D5:7B:A4:D8:00:6D:EB:DF
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:09:e0:73:e9:cf:0f:39:40:55:71:04:c8:2e:ed:c6:f4:a7:
3d:8e:74:82:f7:a0:13:b9:5a:c1:2f:27:bb:82:4b:0d:78:10:
28:83:2d:3a:3b:0b:9b:69:23:3c:79:42:2b:f5:bf:80:b6:0b:
79:cc:18:fe:12:e4:d6:e0:5f:e0:41:37:81:57:7a:36:c1:79:
51:f5:7d:d5:4e:49:7f:d7:cd:5a:cf:a6:b5:22:18:d1:54:2f:
88:c3:91:83:e2:87:96:f9:9a:c3:51:e2:d5:9d:a1:1a:85:dd:
84:81:ed:01:5c:41:31:b6:56:0c:ac:ce:0b:dd:1b:6e:32:12:
b2:81:80:54:e0:c7:6f:ff:2d:12:56:78:01:20:a8:26:6d:b6:
21:db:e9:ac:be:16:6f:69:0c:bf:ad:f4:c3:7d:9d:4e:c7:e7:
9c:e3:02:f7:b7:0c:ca:72:12:1c:e1:81:19:7d:c8:a5:a7:7d:
6a:54:bb:95:ab:65:40:ac:bf:a4:64:64:1c:d9:ee:9a:e4:d7:
53:f4:2f:c0:ef:de:5e:8a:70:75:31:b2:e2:83:ca:53:b4:b1:
aa:55:08:30:a3:86:0b:d8:e7:e0:9c:fa:66:e7:9b:6a:71:17:
3e:bc:c3:01:90:01:6c:43:dd:32:28:7a:b2:ab:bd:a4:6c:ac:
69:13:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:57 2025 by rpki-client