Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: 0RaBueQposeeHIrCdJT630x9hh63PpASH8Pdu1qbJt4=
Subject key identifier: 2B:CF:32:78:C9:B8:E1:F5:39:72:CA:04:98:ED:CF:61:D0:E6:2F:3C
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019A4D078C11C8A1A9A161D57DDFAA23AB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:02:11 +0000
Manifest this update: Tue 04 Nov 2025 04:02:11 +0000
Manifest next update: Wed 05 Nov 2025 04:02:11 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: tUEZIyMEOjk1LzdOhOC2RHI8DXIuugi6Er3xIjWF2dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:8c:11:c8:a1:a9:a1:61:d5:7d:df:aa:23:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Nov 4 04:02:11 2025 GMT
Not After : Nov 5 04:02:11 2025 GMT
Subject: CN=2bcf3278c9b8e1f53972ca0498edcf61d0e62f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:ef:78:29:04:23:71:b1:93:82:de:ea:75:
53:3c:80:e4:e9:df:7d:a4:2e:67:d3:0d:78:45:23:
48:94:7a:b8:ab:84:9b:16:33:6b:82:ae:dc:85:e1:
89:27:21:25:2b:0c:6a:15:ba:a9:57:60:f3:45:c2:
39:96:28:e0:d6:f3:ae:e8:78:c6:5e:fa:6e:bb:1c:
7e:d5:d1:a0:3f:e8:3d:42:cd:35:88:b3:9a:62:d9:
00:80:fb:4b:4c:eb:2c:e0:25:5a:05:57:10:92:92:
f2:91:f5:ac:69:80:08:d9:bb:b2:65:24:0d:74:2c:
69:e7:90:7e:c4:7a:16:3c:23:47:6e:58:06:89:48:
a7:b6:3c:df:04:ff:25:b1:7f:96:40:bf:28:ab:56:
65:0b:2f:6a:c2:94:9f:fe:9f:f4:28:20:76:fe:3f:
73:a1:9e:c5:d9:a9:9b:f2:e2:0b:73:75:29:49:9e:
fd:98:a4:83:ea:c9:ac:a8:16:22:8f:7c:e8:24:9c:
c5:96:8c:72:42:4a:a0:85:40:85:43:14:6e:ed:c3:
d1:5d:f5:36:a9:a4:e2:03:d9:e1:59:d7:f3:c9:58:
36:a3:1a:15:d5:ab:c8:a8:15:ad:d4:c7:9c:c6:15:
15:7c:85:ad:77:bc:92:55:9e:a8:13:fe:f2:05:90:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:32:78:C9:B8:E1:F5:39:72:CA:04:98:ED:CF:61:D0:E6:2F:3C
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:25:7a:e0:be:02:75:32:f6:27:ec:b0:28:6a:d7:7a:a6:
c1:6c:83:d4:12:ef:22:29:e4:be:1e:b0:f2:2f:1a:aa:fb:0c:
0c:50:cb:c9:e8:e0:d5:d8:e7:73:c3:3c:be:c1:24:ec:1d:44:
d6:bb:84:d4:57:73:aa:23:27:33:4b:51:6a:49:2d:77:69:60:
cb:03:fc:38:5f:8e:93:df:9e:cc:3f:6b:bf:72:cb:1a:43:e7:
05:9a:13:ec:0b:ae:46:92:7b:ed:2b:1f:2c:7e:b0:1e:1d:f8:
79:c0:58:4f:08:49:a7:dc:2c:b6:ce:b3:72:8c:f7:ed:8b:f1:
ed:b5:f9:6b:82:27:55:a8:34:6c:d7:88:cc:f1:0c:d7:26:6a:
0a:92:8d:4b:27:30:64:6f:e0:68:ce:02:6e:01:ba:de:42:1a:
b4:36:30:99:b4:ed:10:d5:bf:a7:eb:77:8a:50:b1:50:8a:35:
b1:14:57:d4:69:e1:9c:f5:3f:b5:98:1f:a5:87:75:9f:8d:78:
85:c6:c3:66:ee:40:3c:8a:b5:44:9e:b5:f4:8b:28:0a:4a:77:
9c:6d:31:f3:12:07:56:fa:1b:a3:ad:ed:7d:db:34:db:23:6d:
bd:81:63:1d:46:dc:26:e8:de:8d:a7:77:59:de:81:4e:4a:6f:
87:bf:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:30 2025 by rpki-client