Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: mjgSqp9PBDgEdSvOorf7C4CgUXOVFdVyXJ2DNa/XWYk=
Subject key identifier: 0B:B9:58:41:6E:FD:C3:72:09:15:20:2F:77:E9:7C:97:2E:41:15:80
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019A4EF4A33A41C5570ADFE23B52A6F560AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: oJ5CbrTcGFFaYZ52UTrKzXVm0XZ264QejFLO2wXX1Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a3:3a:41:c5:57:0a:df:e2:3b:52:a6:f5:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=0bb958416efdc3720915202f77e97c972e411580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:9c:31:99:47:da:41:0d:72:b6:59:12:30:
0d:84:66:69:5b:94:b9:e4:da:e3:09:02:c5:3c:a0:
7b:87:5b:3c:5a:07:95:fb:ac:45:9f:d5:00:b0:27:
a3:68:b8:25:6e:aa:c3:df:9e:74:a9:31:75:42:dd:
c9:52:a6:f6:21:41:a3:3c:a0:20:52:28:e3:71:2b:
94:77:a3:9f:8c:e6:95:46:25:5e:68:34:76:3c:93:
4f:e6:fc:ec:f5:da:c0:20:3c:16:8a:51:29:38:bd:
e3:df:98:9b:59:26:77:43:4f:61:08:67:c7:d4:8b:
e2:29:12:c9:59:b5:3a:c4:2e:6b:ac:be:f4:00:fb:
85:ed:3a:c3:84:6e:0f:e2:7f:87:45:51:56:d3:11:
c8:bb:da:f1:00:9c:f7:ae:56:52:0f:4e:33:c6:46:
12:48:44:3d:c8:11:40:da:ef:37:94:a4:43:a1:f6:
00:09:de:e7:9c:5e:86:01:9c:1a:08:aa:24:78:d5:
26:78:db:82:a9:f4:dd:32:74:83:a4:55:2a:2f:c4:
5e:c5:97:d7:be:ce:ae:20:64:dc:66:cc:53:6d:55:
d4:83:4b:44:2e:1a:b2:e1:4d:b5:4a:0f:64:9d:96:
61:62:64:c4:d2:b4:b8:22:14:c7:44:e1:e6:b8:a9:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:58:41:6E:FD:C3:72:09:15:20:2F:77:E9:7C:97:2E:41:15:80
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:64:8f:70:91:98:30:25:90:6a:98:3c:7d:f7:c7:59:76:13:
b0:3d:d5:9c:f3:b6:17:37:c1:2c:63:9f:fe:3b:2d:aa:23:f4:
ae:0f:c0:0a:e0:ea:ce:ae:2d:27:fa:8a:f4:76:96:1d:f9:d8:
9c:fd:e9:18:05:79:a0:f2:5b:3e:30:59:d3:97:39:cb:10:11:
63:59:ca:96:ab:2b:ad:9c:7c:66:ad:49:43:fa:85:77:4e:12:
85:9d:68:d4:95:4c:bf:9c:a3:b6:56:d8:a8:10:7e:fb:f0:c1:
dc:e8:9d:36:c6:2a:46:e9:98:e3:57:04:ab:cc:65:d7:73:2c:
6e:e2:8e:13:3f:99:71:3c:43:69:6c:ee:2e:d5:6b:7e:97:c1:
dc:9b:d7:df:a4:a0:0b:22:80:1e:66:6f:35:bb:fc:68:a5:ef:
f0:f5:3c:9e:60:58:9a:39:2f:60:2c:2f:ac:97:5b:7f:b8:8b:
3c:36:ca:b9:bc:74:54:fe:e7:7c:80:b8:4e:d7:98:50:f1:fc:
45:2b:b9:4e:f8:56:e6:67:04:d1:d3:89:a1:ef:76:27:86:dc:
b6:63:81:b7:e7:67:1c:f9:8e:7c:55:5a:8d:0c:30:e9:28:42:
a5:b8:ee:ff:e9:76:69:96:b7:95:40:52:69:0b:12:67:6a:22:
65:e9:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:04 2025 by rpki-client