Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: +pXCxZeF1MCFFlWHVroAE79mCwBJNCjAicXa6rY+FBs=
Subject key identifier: B1:A6:21:D3:7A:82:70:26:32:2D:0D:59:10:99:EE:26:33:5D:BD:53
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 019A4FD06B0FE2B7342D2FEBC222ACA224E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 12A5
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: c/uX3k3Oaglqax2g/yUMjbPxws5R96AybTJ1jR80YNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6b:0f:e2:b7:34:2d:2f:eb:c2:22:ac:a2:24:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=b1a621d37a827026322d0d591099ee26335dbd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:c8:16:a9:43:6b:7e:c7:1f:c7:3e:c6:40:
8a:9e:a1:f2:23:a2:d4:a8:0d:d6:8f:40:34:2b:95:
f9:34:8c:d6:19:c4:88:ba:3f:9c:dd:d5:6a:0d:eb:
26:8b:13:f8:49:bc:2d:69:80:ef:12:dd:bf:70:a1:
d3:9e:ba:9d:47:fd:be:08:64:d6:1b:27:b2:7d:db:
e2:69:f3:0d:39:2f:4f:c6:86:01:1d:7b:be:fb:7b:
5d:eb:49:a3:c0:62:14:87:d1:7d:4c:2e:7f:e4:a9:
78:19:29:af:42:8a:9c:11:8f:67:2d:60:c7:82:61:
0d:cd:5e:ed:38:c5:03:b6:21:bf:b2:e3:b1:24:1d:
4e:3a:3d:c4:e8:bd:ca:ef:90:de:36:dc:95:3d:87:
04:b3:4a:dc:72:2f:a6:5a:56:eb:86:58:c6:6a:38:
89:8c:93:1e:c0:07:31:6a:32:f5:ae:09:6c:21:9c:
14:75:b2:56:4a:13:05:fa:86:b7:24:cb:b7:5c:27:
35:6f:55:98:87:2f:43:a3:85:f1:e6:21:ec:33:26:
ca:25:e8:63:fa:c6:12:f4:f8:be:16:b9:3d:53:06:
ca:9a:fb:0c:fb:7e:5f:df:54:01:66:2b:2d:e9:bf:
3e:01:40:80:40:97:de:9f:ef:02:6a:10:d1:7e:46:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A6:21:D3:7A:82:70:26:32:2D:0D:59:10:99:EE:26:33:5D:BD:53
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e6:53:dd:89:54:9f:46:89:c2:e1:8a:39:48:68:18:28:87:
64:d2:7a:c3:c9:3c:29:12:57:4c:4c:48:39:f2:57:25:c7:2c:
ba:9d:f0:25:ad:41:e5:09:c2:c3:f2:1b:52:e6:f8:b0:37:47:
00:ff:03:0b:7e:b5:32:66:99:4e:be:b8:ff:c2:19:9c:0d:58:
6e:b9:4b:ca:39:25:be:6d:d9:64:b5:3f:39:cd:2e:1a:1c:bf:
1d:46:85:d7:1c:6e:c1:9f:2d:34:a6:99:be:a6:fd:14:3c:c7:
a1:e8:90:82:8f:71:71:f4:c5:1b:e7:b2:b5:82:05:80:8a:06:
99:a2:ff:f3:70:a8:16:21:d0:0e:28:1c:66:37:b7:15:f1:3c:
69:39:9a:ad:33:45:26:3f:3e:86:21:16:4a:2a:dd:ea:f0:be:
d4:cf:43:a1:57:8b:aa:80:af:3b:14:4c:0e:62:20:7f:b9:ac:
c6:53:17:14:e5:87:6f:f4:dd:d4:60:98:04:56:81:b3:32:99:
10:c0:c3:58:c0:8d:a9:77:63:4e:62:71:30:a7:09:76:37:d1:
05:f0:5a:71:58:c9:1f:56:08:d0:69:84:e3:8b:d9:4e:9a:9f:
2a:3b:ed:6f:4a:51:3d:9c:39:82:f0:dc:e1:a4:77:03:cb:f8:
3a:81:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:00 2025 by rpki-client