Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: 4L9nhdxjmg/gO2zk8CsF22KFwIPRtqz+0MPmvkXCAoM=
Subject key identifier: 9C:3A:24:CB:84:C5:71:9C:1A:F9:26:F2:8D:07:4A:5F:70:E6:56:8D
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019A55649BD137DF0991EF772687A6C15420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 07ED
Signing time: Wed 05 Nov 2025 19:00:48 +0000
Manifest this update: Wed 05 Nov 2025 19:00:48 +0000
Manifest next update: Thu 06 Nov 2025 19:00:48 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: TQOKRLDW8AVs+Ew3147Hox6Gja689KpCyjabFngSDT0=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:9b:d1:37:df:09:91:ef:77:26:87:a6:c1:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Nov 5 19:00:48 2025 GMT
Not After : Nov 6 19:00:48 2025 GMT
Subject: CN=9c3a24cb84c5719c1af926f28d074a5f70e6568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:d3:44:e8:31:22:eb:82:68:9d:0b:bd:37:
4a:35:9c:83:00:51:de:3e:05:9f:1b:ba:be:9c:89:
08:fd:45:c9:de:58:46:77:7f:45:6e:a8:7b:fd:bb:
c6:8e:37:cc:d7:16:c4:52:75:1b:26:0e:57:44:54:
76:de:df:3e:96:44:77:09:38:c9:12:cf:50:3e:48:
28:f9:63:d4:08:6d:f3:79:36:19:ea:49:43:a0:16:
1a:62:8b:d2:b4:d1:5c:c5:f2:fc:a3:8d:51:38:c2:
90:ac:86:65:8f:59:ed:d4:17:65:86:ea:4a:17:29:
c5:11:ec:d4:1a:0c:29:a2:d0:a4:35:35:51:80:0a:
22:6a:79:b8:32:82:09:34:87:0d:d7:a7:e0:43:91:
18:cc:90:50:f9:16:10:41:8f:1a:07:71:b6:14:ea:
1e:76:bd:f2:e9:5c:fe:26:7b:b5:a3:11:8e:91:07:
fd:1f:ff:e5:a8:fa:15:59:32:1e:87:1a:de:b4:84:
0f:3c:c3:64:6a:44:92:e8:20:e1:fe:f6:49:61:5c:
5c:98:5e:ac:17:01:ab:02:22:06:43:6d:ad:3a:c4:
d6:ef:15:7d:5c:bd:4a:bb:05:14:ce:be:c9:6b:f9:
d5:11:d1:68:18:22:91:67:40:0f:52:40:1c:5e:e1:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:24:CB:84:C5:71:9C:1A:F9:26:F2:8D:07:4A:5F:70:E6:56:8D
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:39:c0:2f:53:db:da:34:2c:38:4e:f1:b5:45:fd:7f:a4:9b:
71:79:90:8c:2c:89:95:8b:77:dc:4c:76:04:07:32:f0:a4:ee:
61:9e:51:8f:67:ed:34:2b:e0:90:49:31:32:d8:2a:f2:e4:82:
07:c2:a2:8e:f8:76:02:91:c5:63:6b:e2:22:cd:75:c5:91:b0:
bd:1a:30:0e:bd:0e:cf:cd:35:ca:e5:c9:85:50:ac:cf:f2:cb:
76:f7:34:a0:71:13:60:1e:0a:15:c0:3d:2a:6c:f5:51:99:65:
ac:50:6c:c0:8e:19:b1:86:72:70:64:c5:4e:5d:25:55:fc:42:
aa:67:a6:41:a4:d6:a6:b1:e8:ef:e6:02:d0:fd:af:e6:09:b7:
33:dd:b1:77:8b:06:57:3d:89:2d:59:12:93:5d:52:23:ec:62:
cf:ed:59:43:60:5f:9f:21:2d:36:7d:df:55:a6:84:01:af:0c:
18:1b:78:8b:12:75:53:01:6e:64:19:bd:f4:51:16:9e:b4:2a:
22:5e:9f:df:8e:9d:f7:d7:47:8a:7c:25:f0:95:dd:42:d0:c8:
c9:f8:1c:fb:af:fb:bb:19:cb:31:f0:ac:35:47:be:9d:28:b2:
ab:04:b0:ac:fd:9e:d0:2c:49:67:3a:db:40:54:cf:11:06:2a:
6b:40:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:37 2025 by rpki-client