Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: 7FI+6fqm7D6VHqdex+utM1v8kmDwzFpijJD6y1LAmBk=
Subject key identifier: 22:EF:7A:7A:53:D8:98:55:9E:CE:0F:E6:73:CC:23:49:D4:F2:52:DB
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 019A4EF58E839819BD000D8D6E676984C53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0AB2
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: hQGRqW87QlZCTGlRiftNCyPwlzY4zuN7zGRI0fqbIj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8e:83:98:19:bd:00:0d:8d:6e:67:69:84:c5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=22ef7a7a53d898559ece0fe673cc2349d4f252db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:95:38:d5:7c:b6:eb:b6:84:48:79:74:cd:
38:00:f6:6c:3c:f8:66:c6:cf:d2:58:89:9a:99:4e:
1b:c8:66:7c:58:80:58:29:e5:f2:2a:89:d2:dd:00:
13:9c:1c:5f:87:2c:60:31:ca:e6:39:62:b9:cb:06:
be:e2:e6:d0:d1:f4:ac:f4:6a:2e:44:1e:aa:84:a1:
7f:72:3f:c8:02:3d:26:92:41:b7:9c:36:4c:97:83:
30:6b:cd:ab:71:b3:c8:39:79:43:94:86:b5:72:de:
cf:1c:57:47:1c:c6:2b:4f:ed:f2:d9:76:ad:40:04:
fa:12:73:fd:2c:7d:cd:a4:bd:38:e4:88:cb:2d:6a:
7d:38:94:b6:b7:40:62:5e:cd:b6:6b:89:8b:9d:c1:
5d:c6:24:93:fa:79:c2:bf:11:96:7a:b1:46:61:8b:
84:2b:45:6b:b3:53:65:75:2a:cc:3b:5d:c2:35:d7:
39:70:03:fb:fc:b7:de:f7:ae:12:33:68:ae:d7:64:
32:cf:62:0a:e3:25:37:95:04:a3:7f:04:1e:5d:54:
bc:09:24:5c:dd:35:13:27:b1:a2:c1:16:8b:9d:83:
07:39:ed:22:64:32:91:76:07:3e:ae:84:e1:b1:ed:
dd:45:04:1c:eb:4e:cb:9a:a3:8f:b6:e6:4a:8f:ae:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EF:7A:7A:53:D8:98:55:9E:CE:0F:E6:73:CC:23:49:D4:F2:52:DB
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5f:0c:3f:42:24:f6:aa:7b:d8:fe:b4:fc:09:78:2c:a2:08:
df:f7:b4:74:4c:7d:f2:5a:7e:b1:4a:66:8e:7d:80:04:8f:31:
56:20:6b:a8:0b:34:4d:9e:43:36:ce:8d:b9:fb:7f:be:e4:96:
bd:09:22:28:a8:f6:ed:e2:44:92:3e:cb:8e:4b:af:28:6f:7b:
69:c1:14:54:c3:aa:3e:9e:a0:b5:21:2a:9c:6e:48:5f:9a:d6:
91:83:de:00:58:c7:a9:ee:26:1e:9a:d6:e5:5b:6a:5c:93:ad:
99:f5:96:6d:0d:22:0e:da:ef:81:c7:86:ff:46:89:02:39:b1:
15:04:e9:64:f1:72:b0:98:75:20:2b:c2:77:da:40:a2:0f:87:
f7:8e:79:8c:e4:fa:8d:dc:df:ae:ab:79:29:d5:69:ca:68:53:
46:15:f0:40:d6:b1:bd:4e:90:9b:be:5c:39:97:97:de:89:b5:
5e:32:81:5b:53:15:97:59:8c:1d:c3:2c:4d:96:36:39:96:49:
f2:99:c0:87:5b:8d:03:20:67:bd:2f:16:b6:21:a0:70:aa:c0:
f0:87:ec:2a:7c:e7:81:ff:3e:b1:c7:80:67:79:ba:af:f8:fb:
3e:85:3c:70:cd:9a:5c:78:d1:ee:39:7c:a0:b7:8f:10:4c:27:
62:02:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:47 2025 by rpki-client