Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: TMnMTrUxoIeYA5SyKjVe+qQTS+6fptfRYdGQMyIC9mI=
Subject key identifier: AD:10:F1:30:54:17:B3:76:67:4B:64:B7:9E:10:6B:A0:8D:5F:EB:4F
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 0199FE7DCA7FCC74DE130297914D754DBDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 0302
Signing time: Sun 19 Oct 2025 22:01:20 +0000
Manifest this update: Sun 19 Oct 2025 22:01:20 +0000
Manifest next update: Mon 20 Oct 2025 22:01:20 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: lr5bXSauLvlbdBlkfdMBcDeVmCOVvEfEaRwRwqMDRbs=)
2: WZzhEpaA95Ez0phxnjpQh59XWdg.roa (hash: rNbkHKD1F2pmZbtIEu+jRxIqu+6kK3Eh8JznaVaKxmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ca:7f:cc:74:de:13:02:97:91:4d:75:4d:bd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Oct 19 22:01:20 2025 GMT
Not After : Oct 20 22:01:20 2025 GMT
Subject: CN=ad10f1305417b376674b64b79e106ba08d5feb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:5a:c9:da:a3:85:2c:a4:c6:b5:8b:6c:2e:
ef:75:93:a9:1d:99:d2:4b:d2:ad:b2:6a:dd:96:aa:
c4:cc:26:09:ad:45:0a:6a:93:9d:27:dc:9f:f9:9c:
9d:e4:d3:9b:95:8c:26:a9:79:48:4a:8c:a4:2d:0e:
d8:39:dd:a9:a4:5b:a4:27:29:5c:40:99:02:ab:fc:
36:0a:fa:c8:ac:a5:1a:61:0f:6f:46:dd:85:fb:28:
d2:64:e4:a2:d8:9d:2f:4b:e8:36:79:cb:bd:a7:2b:
e5:11:8a:a9:fb:b5:1f:14:22:a6:58:14:fc:8a:56:
3c:e7:4c:27:6c:31:1c:83:c2:9b:61:30:86:b3:e2:
f6:e7:a5:fc:fb:4e:4f:25:d1:9a:f3:6e:4e:df:31:
c7:58:c2:3b:4c:0f:2e:59:37:b5:8c:d6:77:e7:ca:
a6:7c:f5:fc:b7:98:a7:a0:ed:d4:2e:41:a7:be:bf:
dc:58:cc:da:bf:f6:d0:33:d3:2f:7d:dc:ef:65:e5:
4e:23:ee:8f:ee:38:30:cf:01:4c:f0:d7:46:61:57:
8b:af:c8:af:51:cc:f6:41:b8:e1:53:cf:03:ab:8d:
9b:44:ba:45:bd:97:20:37:9f:a2:3d:2e:fa:8a:f3:
96:62:c7:cb:a9:23:a1:6e:90:32:51:e6:45:86:0c:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:F1:30:54:17:B3:76:67:4B:64:B7:9E:10:6B:A0:8D:5F:EB:4F
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:f0:63:16:02:99:11:ea:8d:fe:d7:a2:43:16:82:74:f7:
fd:c1:44:1a:b5:dc:a0:d6:e9:23:ed:c8:fb:4c:4c:05:5b:0c:
eb:20:0a:3a:6c:36:04:af:8e:0e:38:a7:11:11:c1:82:93:db:
d0:57:4f:e6:af:17:06:65:16:9e:a0:4e:23:0b:2a:53:1f:e2:
f8:b6:7c:1c:db:2a:ee:49:0e:9c:d5:fe:cb:04:6d:65:97:90:
c5:00:9d:73:e8:ed:1c:aa:71:bb:3f:e1:2e:ac:d2:3f:3c:70:
03:3a:08:c0:1c:fc:a0:1e:63:ea:9f:38:3b:ca:7f:52:cd:9a:
95:e1:d1:20:0a:d2:21:7a:ef:72:78:41:b5:cd:25:63:e5:2b:
25:25:db:7d:9b:9e:29:be:26:2b:8c:dc:34:a9:48:df:d2:ea:
ae:1a:a1:06:44:86:11:90:76:3a:e8:ec:55:38:25:9b:d5:69:
fd:a9:2b:7b:23:9b:3a:1b:9a:50:fa:9c:19:b2:b7:68:e3:29:
44:ae:9c:81:7b:0d:f6:5f:24:f5:4f:63:52:49:ea:b3:ae:74:
ca:2f:bd:17:1e:45:43:53:c5:c3:dc:43:c4:d0:e1:cb:d4:15:
4a:85:dd:da:26:db:22:f6:8b:dc:b3:67:74:07:8e:19:4d:d0:
ff:76:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:00 2025 by rpki-client