Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: AmWJNY7tTUjiFU28eQwV+IDq6p/EA1a5G1eQfxHladg=
Subject key identifier: F7:9C:C5:83:6F:7F:7E:93:FE:AC:5E:12:3E:87:40:EE:87:06:63:A6
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 019A4E8632B369EF3FDCB7BDE1BEA3989F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 0658
Signing time: Tue 04 Nov 2025 11:00:08 +0000
Manifest this update: Tue 04 Nov 2025 11:00:08 +0000
Manifest next update: Wed 05 Nov 2025 11:00:08 +0000
Files and hashes: 1: iSLwTqep0NbUn-xM6ERQaCHn1tI.roa (hash: khQ4c7Qn9evkEyI3Gv7ZG1leD8nar2lQ0KO438Y9oxI=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: DfSMgymNFNNoiW5IqSm23022D/YJaxBF+h4AoYIWb4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:32:b3:69:ef:3f:dc:b7:bd:e1:be:a3:98:9f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Nov 4 11:00:08 2025 GMT
Not After : Nov 5 11:00:08 2025 GMT
Subject: CN=f79cc5836f7f7e93feac5e123e8740ee870663a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:06:e4:2b:b2:e6:48:6d:2e:99:c7:05:2c:
e2:25:68:23:9a:8f:61:d8:94:67:73:40:6a:b3:b9:
c7:a6:3a:cf:c3:3f:8e:09:48:bb:41:06:f2:19:5b:
32:db:66:3d:58:70:7a:50:1d:24:d2:f5:e8:91:80:
cb:fc:ab:f5:86:66:cf:13:9a:05:4b:88:c2:a5:c6:
5a:3b:9a:72:ce:c0:eb:6e:bd:71:a5:98:4d:02:7d:
cc:ff:29:b7:71:88:16:ee:24:83:e4:d8:a0:d2:8c:
09:31:bd:91:62:9a:94:d4:3f:5a:74:55:3a:22:51:
af:54:23:da:ff:65:cb:a3:ea:4a:1b:4c:1a:b6:2e:
ef:51:f2:71:8a:b1:7e:c7:4f:d5:20:30:e8:52:ef:
0a:35:3e:91:83:a3:83:20:93:78:b7:00:57:d7:b4:
8f:0f:10:1c:38:d6:53:f3:3c:c3:8c:35:de:b5:d8:
a4:fa:d7:6b:2b:c5:5a:36:44:3f:bf:f7:81:e2:84:
7c:bc:23:cd:e7:f8:20:d9:da:85:6c:4d:e7:70:2c:
90:76:1e:26:22:b0:ed:57:b3:6f:62:80:6e:d7:8e:
b1:24:f3:fd:0f:66:0c:74:83:6d:63:e4:34:5f:95:
3b:ca:82:f2:85:5e:43:01:55:8a:0f:e6:59:db:7c:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:C5:83:6F:7F:7E:93:FE:AC:5E:12:3E:87:40:EE:87:06:63:A6
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:1d:ec:60:9b:c9:e7:6e:34:cf:ab:3d:63:6b:43:e5:d1:
a7:a6:88:4f:bd:9d:97:1e:cd:17:dc:17:1c:64:8d:cf:a9:e7:
2d:e6:70:78:41:78:6b:70:72:19:1f:c6:ef:96:97:96:29:95:
97:5c:2e:3a:13:8d:de:07:a6:8a:db:06:3c:ae:f9:99:0c:62:
52:e2:b1:b1:3d:b9:ab:41:ae:2f:81:73:ab:2d:d3:61:0c:25:
ca:4e:da:5d:03:0f:2e:53:2a:0d:3f:5c:0e:0c:b8:ec:cd:0f:
d8:f9:71:37:ee:bd:72:8c:a4:fe:de:74:76:49:2b:d3:87:00:
ed:d5:5b:c1:ac:be:9e:1f:86:b5:9e:e5:ed:e5:e2:a1:a8:a0:
63:90:c0:c0:e2:2f:5b:72:0e:11:1c:0e:e6:14:79:cf:28:ac:
3b:7d:50:7c:9c:6a:48:cc:c0:c9:cb:0e:ff:8b:a1:e3:1c:5d:
e7:d2:7a:6b:00:81:8b:5a:d7:ff:a6:94:27:c9:62:29:13:4e:
c4:8b:46:be:c0:92:9e:0c:d9:ab:09:7a:09:a2:7e:aa:98:09:
05:52:30:22:1f:d5:4c:8b:41:e1:b3:0d:eb:c1:79:13:26:2a:
ef:36:91:e8:4c:32:37:8d:a7:ef:a8:b9:ee:44:fd:40:fc:06:
56:6d:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:57 2025 by rpki-client