Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: Cc3NdIAjKmkgoM0kDRY1DTjXDFZ1bxn25pCPtEGMvAE=
Subject key identifier: 25:74:16:92:FB:88:62:0B:AD:19:DF:12:9F:C5:D5:68:BA:CE:B6:D8
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 019A4EF59A9EC69E303F849040BF6DA4B511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: Q4gYjuSpVXeRKfaDBAGf6i1qCD35KyopHruA5aEN16g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9a:9e:c6:9e:30:3f:84:90:40:bf:6d:a4:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=25741692fb88620bad19df129fc5d568baceb6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:32:57:9d:6c:78:41:fc:87:82:5b:ba:54:
c8:43:1e:da:28:e1:b3:2d:dd:08:a7:e3:98:af:bc:
d3:42:30:97:53:55:3c:c5:d9:82:87:56:82:c2:01:
bd:18:db:54:9e:b9:1f:93:e7:df:f9:7b:0e:f1:21:
b8:4c:24:5f:13:39:dd:51:a8:96:50:f0:92:5c:b7:
d7:60:16:79:42:28:75:52:44:f9:a8:ff:12:c3:c8:
42:a4:1a:cb:db:d0:02:14:84:3d:5d:01:d0:b5:61:
60:1a:1e:13:09:a7:9b:28:14:f0:11:a7:51:a7:f1:
24:59:0d:d4:35:f9:dd:5e:1a:27:a4:d3:d5:88:39:
6d:85:85:08:b7:0d:3e:36:a4:a7:35:26:74:cf:46:
e4:c1:51:d2:78:42:ca:b8:7e:6d:58:00:fc:1a:b6:
e5:bf:05:b9:b6:45:e6:d6:17:35:00:65:61:c7:97:
c4:e5:27:ed:ee:4d:b1:63:9b:e8:00:2e:b2:31:43:
9d:55:32:da:69:98:8d:43:5a:6a:ed:1c:f2:f2:a8:
d5:ec:04:a2:df:e0:65:b4:3a:01:a9:c5:3a:62:3e:
4b:d1:81:fe:d2:f5:c7:52:be:a5:b1:6d:f9:39:d5:
5e:77:62:f8:a9:ff:f8:e2:de:9c:46:22:8b:5b:be:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:16:92:FB:88:62:0B:AD:19:DF:12:9F:C5:D5:68:BA:CE:B6:D8
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:02:71:35:9c:d8:94:e7:2a:f2:f5:a3:b5:33:5b:fa:94:ac:
b4:8b:56:86:75:4a:41:65:e1:cf:e0:bc:e7:8c:3b:9b:5a:23:
15:be:34:b3:4a:08:22:9f:9f:f7:e2:41:3f:94:39:6c:1d:73:
51:8e:60:cd:02:cb:9f:a5:04:94:40:a3:a5:c7:cd:35:1f:82:
14:bc:8d:64:2c:7d:30:19:70:3e:d8:0d:01:3d:60:d6:68:5c:
66:66:d4:b6:8d:e2:aa:c0:21:f0:12:63:5c:be:25:51:18:37:
8e:65:0e:7d:1e:19:53:d3:0b:0f:85:18:6b:55:b4:86:24:24:
ec:2e:5a:e1:6e:bd:3f:1a:72:c8:f4:a3:74:24:4e:a8:10:7c:
f4:dd:fe:0e:c2:19:bd:0d:43:3d:12:f7:7f:9c:bc:38:d2:b4:
a7:5d:cd:e4:d3:91:06:5f:4b:04:1c:74:72:a1:23:ee:28:49:
ae:1c:8f:46:03:9b:03:a5:84:1d:71:d5:2e:32:a5:ab:53:6c:
58:42:8e:84:bd:9e:4a:03:1a:7e:dc:07:47:35:17:08:b5:17:
7b:d2:07:20:9e:c4:02:ab:53:bd:a6:1f:3e:f5:c6:79:70:2b:
57:ab:88:8b:16:6a:28:98:d2:67:c4:a3:75:ed:1b:08:fa:ef:
e3:6a:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:14 2025 by rpki-client