Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: Y5NzZOQon2n1rh3CH4X5vWG5kuVIrkXl6zQRRMZXZ1A=
Subject key identifier: B1:5C:AB:CD:12:69:F2:2A:F6:CA:C8:14:96:50:5F:84:ED:9A:EC:1A
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 019A50E40863519C9821C05C869A933B2814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 0DF9
Signing time: Tue 04 Nov 2025 22:01:52 +0000
Manifest this update: Tue 04 Nov 2025 22:01:52 +0000
Manifest next update: Wed 05 Nov 2025 22:01:52 +0000
Files and hashes: 1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: u9vqReR90IY/oG66GxIC2p5JoB36uMU83LUB4N9BTFE=)
2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:08:63:51:9c:98:21:c0:5c:86:9a:93:3b:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Nov 4 22:01:52 2025 GMT
Not After : Nov 5 22:01:52 2025 GMT
Subject: CN=b15cabcd1269f22af6cac81496505f84ed9aec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:fc:29:eb:42:d7:1f:f6:db:c1:b4:f8:a6:
bd:1f:bc:be:f9:67:10:6e:02:3b:a7:2c:4a:9d:31:
c8:7e:ce:ff:bf:09:c4:3f:a1:e5:d5:0e:ea:d4:80:
83:76:e3:19:ba:e8:06:e8:df:d3:e7:68:22:91:f6:
ab:ea:d2:cf:1f:fb:80:a0:f7:d7:4a:49:34:49:46:
ab:fe:45:8f:d0:31:b9:6f:48:75:4f:33:92:23:a0:
32:4a:6b:1b:b7:87:e3:0d:2f:2a:1d:33:a9:c7:f5:
b4:98:06:13:e5:c3:c9:01:e1:89:17:ad:43:7b:90:
2e:5b:39:7a:7e:c5:79:90:98:64:02:54:cd:dc:3a:
04:a3:83:7e:86:07:d0:56:05:00:69:f8:21:1e:65:
bd:3f:85:da:83:4b:af:34:e8:39:dc:f2:7f:8b:ac:
13:f4:76:92:c4:c5:d1:ae:d1:c9:80:9f:75:b5:f3:
db:0c:48:83:67:c0:81:a3:2e:d5:23:76:44:db:c1:
92:60:ac:49:d9:1b:a2:b1:71:e4:92:c7:c5:84:38:
e8:bd:ac:b3:6d:f0:e6:d6:eb:eb:79:a9:69:56:33:
75:c9:92:04:f1:32:45:eb:df:b6:2f:af:a9:67:f1:
80:63:f3:15:ac:24:6b:04:15:2d:e4:6d:26:35:cf:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:AB:CD:12:69:F2:2A:F6:CA:C8:14:96:50:5F:84:ED:9A:EC:1A
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:4b:cd:af:31:e8:08:27:6b:8f:7a:04:26:72:47:32:96:
af:e4:e4:93:06:d2:92:05:13:11:56:b2:71:72:2a:cb:db:1c:
0f:59:a5:3d:74:d5:c8:39:97:c9:1e:00:3d:ab:c8:1f:d0:34:
8e:6e:63:07:ab:30:fd:c7:e0:a7:1f:3f:fd:fe:6e:7b:9a:49:
61:ac:9f:c6:c4:82:55:d8:00:51:31:0c:29:c8:77:54:d2:16:
84:c9:86:67:f3:c9:7c:d1:5f:e6:ac:e8:d0:46:eb:b2:e2:0f:
cf:d8:e3:6a:cd:19:a6:a3:6d:46:a5:73:06:78:49:51:8d:db:
3a:17:f0:5f:cb:e0:64:4d:91:2f:48:5a:52:75:b8:84:82:19:
28:d8:ec:58:7c:e7:64:9e:01:37:4f:93:5f:0f:27:5b:cb:06:
86:fc:37:13:33:60:7b:91:27:8c:aa:d3:8f:bb:79:4c:f8:d8:
6d:88:66:50:f1:d1:43:b5:8c:47:07:9b:a7:3a:6d:70:35:62:
37:20:76:5d:eb:d9:06:51:b4:b9:ec:ee:b6:a3:f9:83:49:4b:
d2:43:cf:71:8e:9b:72:29:ef:92:d3:1e:e7:e6:2a:65:06:74:
ad:56:a1:f3:17:38:24:49:3b:fe:a6:2c:75:fa:cf:c1:13:93:
2a:9c:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:09 2025 by rpki-client