Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: A+iJvB3Y+dKTfDboNgavZz8E/1gg7ce3CkvjthOyUoo=
Subject key identifier: 75:DA:51:42:66:EB:DA:E8:29:01:36:E7:48:CD:F0:46:E2:ED:9B:41
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 0199FC8FC7B7804ED844544F2C53C8BDE32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 02C1
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: uPReX/Pw6EJ8/vGkMLDEiMhovyOYJHr8RZ/8A69A7vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c7:b7:80:4e:d8:44:54:4f:2c:53:c8:bd:e3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=75da514266ebdae8290136e748cdf046e2ed9b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:2f:14:b1:8c:4d:76:2b:05:87:76:df:8f:
69:84:c0:d1:0e:b0:71:08:27:7e:21:c7:4d:2c:f3:
05:41:a8:4d:1c:63:ea:87:33:51:b6:f2:ed:4d:91:
bd:b1:bf:ea:f4:6b:dd:a7:aa:dc:b2:7a:34:34:72:
cb:10:34:5d:c9:e5:db:13:44:9c:69:27:dc:b6:ae:
88:5d:cb:e6:19:7d:78:02:7c:24:d7:69:bb:0e:2c:
5f:83:42:14:e7:bc:ec:2d:ec:98:d7:af:72:b2:33:
83:40:ba:26:f9:c4:21:56:b2:0b:5b:56:c9:58:66:
8c:12:4d:0f:3f:d8:4e:ce:73:9f:86:ed:a8:78:46:
61:51:e4:32:19:58:85:e2:2a:a0:f1:5a:53:83:9c:
24:72:60:73:aa:c1:8e:77:0a:6e:f6:ae:13:98:77:
9b:d4:2e:fa:6d:16:86:9c:c8:ed:08:33:5f:9c:d3:
67:5d:bf:75:d9:24:d5:34:9f:16:8f:7c:f3:25:05:
35:d3:9e:43:98:42:fc:f3:3b:fb:09:16:c2:7d:9b:
13:9a:3d:55:92:a1:9d:d3:6a:9d:20:c1:8e:31:3f:
76:74:1f:56:e5:95:c1:68:5e:24:f1:59:22:5a:b2:
97:a1:28:9d:4c:03:4c:19:8d:c3:4f:e9:46:52:c7:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:51:42:66:EB:DA:E8:29:01:36:E7:48:CD:F0:46:E2:ED:9B:41
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:d2:9c:63:07:40:c9:65:b0:90:21:14:18:ac:60:86:38:
3e:8d:73:31:01:15:9a:67:56:5c:64:75:fa:b2:8d:26:12:ea:
69:b8:64:67:3f:51:f6:48:5c:78:2d:68:28:5b:8f:41:a0:45:
a1:0c:d6:af:5d:d4:02:1a:77:da:92:f0:c7:b0:fb:11:37:7a:
f9:30:f8:3d:c0:6e:69:87:28:c8:81:2c:a2:c4:8c:2a:f7:46:
85:4c:97:a5:57:64:93:a2:18:03:17:ea:f2:94:15:7e:9b:8f:
c5:b1:fa:8e:ff:86:34:8c:d0:9e:16:f2:e7:d8:ee:27:e7:d4:
63:b8:0f:66:98:73:81:9f:e0:c8:db:f9:8e:7b:52:3f:e8:0a:
23:4b:51:e2:39:94:96:ab:be:e8:e2:7c:81:13:b8:c8:e3:da:
36:71:e6:e3:5f:34:6d:18:6a:03:1d:95:3c:80:4b:df:35:cb:
8c:a4:d0:13:2a:83:b0:51:93:33:da:20:14:9a:8a:ae:de:fd:
4f:cc:83:c8:28:49:4b:8f:22:c4:be:3f:bd:c3:b3:46:39:c9:
bb:1c:46:5b:83:6b:73:02:4b:70:6f:f2:ed:fb:b0:36:63:a1:
7c:44:2e:b3:19:1a:28:3a:0d:e6:51:f3:6a:bb:b5:f8:f2:62:
8f:88:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:32 2025 by rpki-client