
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: eO4ml9wqgyvB1aHhMFJUM2XtLJrkTKlkgNPfKy+K5kg=
Subject key identifier: BA:EA:43:59:88:37:A6:47:42:2B:E9:01:57:0D:05:78:1A:E9:97:F8
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019879E41C1E1CF88DC535621C17DC06C5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 12FE
Signing time: Tue 05 Aug 2025 11:00:49 +0000
Manifest this update: Tue 05 Aug 2025 11:00:49 +0000
Manifest next update: Wed 06 Aug 2025 11:00:49 +0000
Files and hashes: 1: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (hash: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=)
2: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=)
3: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=)
4: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=)
5: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=)
6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=)
7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: BgrYbMOg0eOSOMeLMC04g3WoRagaiDFzbKFjh5cvGUE=)
8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=)
9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:1c:1e:1c:f8:8d:c5:35:62:1c:17:dc:06:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Aug 5 11:00:49 2025 GMT
Not After : Aug 6 11:00:49 2025 GMT
Subject: CN=baea43598837a647422be901570d05781ae997f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:0d:58:0b:21:e6:5e:5e:cf:dd:6b:8f:1f:
fc:a0:0b:5e:c3:cd:c7:25:60:84:16:20:18:8a:3b:
c0:4e:77:fe:c4:68:28:ee:dd:92:f6:33:f6:cd:3e:
29:a4:09:e4:9e:55:02:a0:46:7e:27:29:a4:5c:da:
61:cb:c6:6e:5d:9c:4b:72:1f:5b:21:c1:6d:a7:b5:
06:e4:ca:e5:e4:c5:bc:56:d1:3d:9b:f2:83:90:c0:
47:fa:bc:1f:1a:f8:b2:98:94:38:50:f1:20:bd:ee:
86:40:6b:00:00:73:df:c4:86:d9:0b:d0:86:d5:4f:
a5:64:d4:76:e6:d4:1e:63:bb:f3:e9:c2:be:df:dd:
d8:a4:a7:58:f0:ef:52:17:74:3f:2d:39:00:9e:19:
05:79:87:55:7d:6b:be:76:ab:85:8a:97:f8:87:1d:
70:6d:b3:2e:15:68:5e:fa:94:c2:27:bf:ae:ef:cb:
75:bf:e6:67:88:c3:a9:76:53:f8:3a:42:50:ce:16:
96:d0:cd:d0:74:f0:6c:49:a5:da:42:56:dc:71:8c:
0f:b9:00:eb:b1:61:4d:b3:6a:39:42:0b:2b:5c:a3:
65:88:6b:3c:56:dd:58:c7:44:70:64:82:f9:1b:3a:
ae:30:d8:96:5e:d3:20:b5:af:30:1b:d0:ad:be:2c:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:43:59:88:37:A6:47:42:2B:E9:01:57:0D:05:78:1A:E9:97:F8
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c4:70:83:06:5d:d6:84:7b:10:ac:b5:ba:0d:ff:8e:87:2c:
59:51:50:a7:ae:8a:26:3d:74:01:4f:9c:14:14:99:4f:d2:b1:
71:15:c9:0f:bd:75:27:6a:df:b8:4b:e1:14:94:fb:c6:b2:43:
3c:2e:42:fa:a6:6b:4e:c6:88:79:cd:11:53:d8:28:1a:72:de:
45:fb:d7:26:43:60:4f:d7:93:d4:f7:d9:1c:09:b5:4f:6c:96:
74:df:13:5b:2d:47:b6:3c:8a:c8:e7:52:8c:33:89:b4:c5:b7:
1c:0d:9e:19:75:db:fa:66:fb:a6:78:b1:dc:2c:f6:de:0c:c1:
47:10:73:e8:66:77:0b:af:75:ee:ad:89:3c:64:d8:20:9c:ec:
75:bb:2f:e4:ba:6d:47:2e:8b:f7:4f:aa:ba:46:e8:8d:a3:3f:
5e:75:06:dc:5b:ed:24:da:31:a2:06:13:86:5b:87:18:68:70:
bd:e0:e6:61:5c:ee:a8:2e:88:84:5c:2f:44:79:6f:4d:0f:a7:
a4:4d:d9:72:81:5d:00:22:db:82:05:25:ba:97:ef:b3:4b:9e:
78:b7:8f:87:38:fb:56:15:04:63:0e:fe:28:ee:2a:eb:40:ea:
27:ed:48:74:a2:13:e9:b4:fd:10:d8:d6:05:37:44:4b:c1:39:
63:91:1e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55BweHPiNxTViHBfcBsWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjUwODA1MTEwMDQ5WhcNMjUwODA2MTEwMDQ5WjAzMTEwLwYDVQQD
EyhiYWVhNDM1OTg4MzdhNjQ3NDIyYmU5MDE1NzBkMDU3ODFhZTk5N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK0NWAsh5l5ez91rjx/8oAtew83H
JWCEFiAYijvATnf+xGgo7t2S9jP2zT4ppAnknlUCoEZ+JymkXNphy8ZuXZxLch9b
IcFtp7UG5Mrl5MW8VtE9m/KDkMBH+rwfGviymJQ4UPEgve6GQGsAAHPfxIbZC9CG
1U+lZNR25tQeY7vz6cK+393YpKdY8O9SF3Q/LTkAnhkFeYdVfWu+dquFipf4hx1w
bbMuFWhe+pTCJ7+u78t1v+ZniMOpdlP4OkJQzhaW0M3QdPBsSaXaQlbccYwPuQDr
sWFNs2o5QgsrXKNliGs8Vt1Yx0RwZIL5GzquMNiWXtMgta8wG9Ctvixg4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrqQ1mIN6ZHQivpAVcNBXga6Zf4MB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsRwgwZd
1oR7EKy1ug3/jocsWVFQp66KJj10AU+cFBSZT9KxcRXJD711J2rfuEvhFJT7xrJD
PC5C+qZrTsaIec0RU9goGnLeRfvXJkNgT9eT1PfZHAm1T2yWdN8TWy1HtjyKyOdS
jDOJtMW3HA2eGXXb+mb7pnix3Cz23gzBRxBz6GZ3C6917q2JPGTYIJzsdbsv5Lpt
Ry6L90+qukbojaM/XnUG3FvtJNoxogYThluHGGhwveDmYVzuqC6IhFwvRHlvTQ+n
pE3ZcoFdACLbggUlupfvs0ueeLePhzj7VhUEYw7+KO4q60DqJ+1IdKIT6bT9ENjW
BTdES8E5Y5EeVw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:28:01 2025 by rpki-client