Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: LO5MC+4xlruh8fMwTOuQ/j0yclz0guUgI6Nr+s+hxY8=
Subject key identifier: 37:48:CB:EA:77:19:03:35:1A:1D:6F:63:FA:8D:20:8B:0E:C8:3B:E1
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 019A04ED235DC762EDFB30E957856C2B9B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 0EDD
Signing time: Tue 21 Oct 2025 04:00:41 +0000
Manifest this update: Tue 21 Oct 2025 04:00:41 +0000
Manifest next update: Wed 22 Oct 2025 04:00:41 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: M9G3dyHuBK+vxlinC2sbIzLMaxxm1Mlnqpv8odOY08s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:23:5d:c7:62:ed:fb:30:e9:57:85:6c:2b:9b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Oct 21 04:00:41 2025 GMT
Not After : Oct 22 04:00:41 2025 GMT
Subject: CN=3748cbea771903351a1d6f63fa8d208b0ec83be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:ce:79:b1:92:d1:0a:ef:4e:f4:70:af:b2:
08:20:01:8c:c2:9f:82:08:7a:c4:c0:86:34:f7:18:
76:fe:6f:a4:a9:71:8f:b1:f9:bd:e9:a4:02:bb:84:
6a:02:d3:ca:c8:da:a3:a3:32:51:4a:07:06:3c:68:
ad:2a:fc:60:7f:f0:f0:b8:d7:da:9b:ce:ab:e8:78:
d4:02:46:0c:91:60:fc:2f:b2:5a:85:ea:ac:2a:a6:
07:ff:63:78:9d:82:2a:5b:b7:3b:d1:37:c8:f2:6c:
e6:ab:f9:b1:e2:ed:e6:ac:24:4d:8f:8b:15:f5:2e:
e8:ff:b1:ff:9e:9a:fd:f9:e8:7f:51:44:b2:90:83:
e1:85:ac:97:91:96:90:2e:71:13:d1:36:58:a0:02:
bf:66:d0:24:62:84:5a:1d:b0:17:9d:db:17:de:58:
f9:49:e7:71:95:94:56:eb:47:58:c1:5a:e7:ae:f8:
9c:9b:c0:d9:f1:dd:f1:39:07:a4:1f:f2:de:c0:9f:
55:1a:7e:24:2a:d3:3b:e5:f5:42:67:49:9e:9f:1e:
17:33:41:11:31:9d:20:d1:3a:8d:77:93:f6:7f:0b:
ca:63:f1:f2:ab:49:81:fd:f5:11:92:e7:0a:f7:27:
b1:c9:a2:01:45:e3:72:58:33:4a:4f:85:e7:1d:cd:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:CB:EA:77:19:03:35:1A:1D:6F:63:FA:8D:20:8B:0E:C8:3B:E1
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e9:93:70:d1:d1:6d:19:5c:4d:d3:a9:8d:2e:2e:59:b4:ed:
01:84:f3:ff:72:10:d2:a2:92:c4:d7:db:f9:f7:0f:60:06:3a:
77:93:87:15:24:2b:b3:59:bf:03:63:48:0c:de:ef:84:f9:20:
1c:57:50:e4:d2:0b:f4:c5:a0:7c:9e:04:19:9c:de:3d:a2:3d:
ff:0b:ac:f6:75:2c:ab:1b:71:54:f3:00:5d:04:2d:82:fd:ca:
4a:f1:7e:3c:07:23:fb:2c:63:d9:bd:25:a8:69:bb:eb:77:6d:
f9:39:e0:4a:ea:af:3c:cf:23:0d:d6:85:5e:3a:37:67:2e:dd:
85:75:67:1a:92:ce:ee:9f:96:eb:eb:b4:5b:27:a4:c7:8e:cd:
aa:03:d6:93:57:14:34:d9:f7:03:74:a2:69:0b:65:82:02:d6:
7b:ec:f7:48:d8:25:4e:89:3e:b5:b6:e6:32:e2:25:26:8d:f6:
47:6d:d7:8b:21:2b:8e:8f:36:a9:e2:c7:4e:e5:96:33:89:93:
6f:d9:18:f0:f7:91:e0:0a:23:1d:75:47:b8:2a:0b:6f:b5:f6:
48:44:f5:29:53:94:28:27:b6:dd:bd:7d:9c:88:14:81:cd:c7:
46:94:86:74:f7:75:c8:01:59:c9:ca:3c:3d:6a:21:17:ac:64:
9f:33:68:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoE7SNdx2Lt+zDpV4VsK5tcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzBmNGQxMzk0NWYxNmY5Yjc0YjEyNjQ3ZWExMmNjNWQy
NzQ4Y2YwHhcNMjUxMDIxMDQwMDQxWhcNMjUxMDIyMDQwMDQxWjAzMTEwLwYDVQQD
EygzNzQ4Y2JlYTc3MTkwMzM1MWExZDZmNjNmYThkMjA4YjBlYzgzYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBrOebGS0QrvTvRwr7IIIAGMwp+C
CHrEwIY09xh2/m+kqXGPsfm96aQCu4RqAtPKyNqjozJRSgcGPGitKvxgf/DwuNfa
m86r6HjUAkYMkWD8L7JaheqsKqYH/2N4nYIqW7c70TfI8mzmq/mx4u3mrCRNj4sV
9S7o/7H/npr9+eh/UUSykIPhhayXkZaQLnET0TZYoAK/ZtAkYoRaHbAXndsX3lj5
SedxlZRW60dYwVrnrvicm8DZ8d3xOQekH/LewJ9VGn4kKtM75fVCZ0menx4XM0ER
MZ0g0TqNd5P2fwvKY/Hyq0mB/fURkucK9yexyaIBReNyWDNKT4XnHc3BzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdIy+p3GQM1Gh1vY/qNIIsOyDvhMB8GA1UdIwQY
MBaAFDgw9NE5RfFvm3SxJkfqEsxdJ0jPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYt
ZWNkZWMwYTQxMDI0LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iMTNjZDgtMDczYi00MDZhLThjNWYtZWNkZWMwYTQxMDI0
LzEvT0REMDBUbEY4Vy1iZExFbVItb1N6RjBuU004LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOmTcNHR
bRlcTdOpjS4uWbTtAYTz/3IQ0qKSxNfb+fcPYAY6d5OHFSQrs1m/A2NIDN7vhPkg
HFdQ5NIL9MWgfJ4EGZzePaI9/wus9nUsqxtxVPMAXQQtgv3KSvF+PAcj+yxj2b0l
qGm763dt+TngSuqvPM8jDdaFXjo3Zy7dhXVnGpLO7p+W6+u0Wyekx47NqgPWk1cU
NNn3A3SiaQtlggLWe+z3SNglTok+tbbmMuIlJo32R23XiyErjo82qeLHTuWWM4mT
b9kY8PeR4AojHXVHuCoLb7X2SET1KVOUKCe23b19nIgUgc3HRpSGdPd1yAFZyco8
PWohF6xknzNouw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:29:33 2025 by rpki-client