Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: AdIBDYevmfxASrrsq1KqYuWLwrTEtfHm/m84Lo0zU0g=
Subject key identifier: 2B:D5:6F:CE:01:D7:3B:71:56:69:90:FD:B8:E8:C9:61:6B:3D:B6:50
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019A4E4FC796E4570CFD0E13E7407CC7AF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: 27Nfv9Cuvgz9KenmrK09bLElo3aopJOiR7iLEXaK1Zo=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c7:96:e4:57:0c:fd:0e:13:e7:40:7c:c7:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=2bd56fce01d73b71566990fdb8e8c9616b3db650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:6c:42:ba:0a:59:60:cb:4e:13:d1:c7:e4:
56:23:11:54:8a:d2:6e:ca:69:41:5d:b3:3f:10:10:
94:ad:ef:2b:f0:26:5c:7b:7f:ad:87:22:01:30:3f:
52:3d:25:c1:fa:4e:17:7a:cf:f3:38:1f:8b:7d:b8:
41:c3:5a:4f:dd:dc:7b:61:97:3f:9e:14:6c:b0:4b:
7b:52:84:ff:87:8b:ce:36:e9:8a:bd:cc:73:b9:e3:
5e:bc:77:ec:71:11:ca:0d:5f:9f:a0:8c:88:54:4b:
a2:84:64:00:b3:ce:a3:a4:e7:6d:2b:09:10:a4:a2:
63:8e:6f:99:8f:cc:a5:c8:6d:95:69:81:42:1b:14:
2e:f1:9c:e5:24:7d:f6:f2:50:de:cc:52:77:98:88:
57:26:c6:92:b1:90:28:c1:7f:0e:c1:59:9f:19:1e:
48:1a:60:c5:05:45:87:94:ab:d2:b9:56:b1:b3:04:
f6:7b:bf:d9:db:07:69:cf:b5:62:11:09:65:cc:b2:
6b:71:9e:ac:b4:5e:93:da:f1:9f:1b:cc:c5:42:62:
94:f6:1c:2f:32:38:fd:9e:a3:73:d5:bd:17:63:c2:
98:f5:f2:18:41:e0:c7:0e:77:89:e8:43:c9:68:cb:
ad:da:57:00:03:a1:c9:c4:0c:d9:83:a3:da:b2:24:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:6F:CE:01:D7:3B:71:56:69:90:FD:B8:E8:C9:61:6B:3D:B6:50
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:09:0c:f3:23:93:76:c7:3c:d5:bd:97:b1:4b:76:6f:6b:af:
b3:4e:86:67:f0:a7:1e:5c:bc:1d:fd:9d:8e:cf:7b:44:43:d5:
42:c2:78:a5:d2:0a:c2:55:35:4f:93:36:40:0e:a4:a1:fd:d6:
b6:75:5d:74:6d:28:df:d6:8c:9c:5f:f9:4c:e4:50:50:33:59:
6e:d9:f9:18:24:83:04:9d:27:e0:fd:67:f0:c6:c3:d6:4a:d4:
e0:80:1c:1b:9b:20:3a:0a:23:dd:ef:b2:af:d9:46:89:72:0d:
6d:72:d5:c8:c8:7c:96:7d:32:40:70:c7:5c:8f:d1:45:43:4d:
16:18:e0:3b:a7:b2:6d:32:cc:59:3d:6b:fc:44:61:30:62:3f:
84:97:c7:67:25:5e:9c:e7:94:d6:2c:07:d4:6c:7b:dc:0b:36:
78:4c:56:8c:47:cd:d9:c3:a7:67:b0:df:ae:bc:f6:f8:e4:e8:
c8:a3:99:58:62:db:62:00:73:af:d4:cf:12:7a:42:0b:ed:99:
9e:ee:ed:e8:48:20:cb:b5:6b:f2:5a:63:4b:e2:bc:16:57:57:
f8:fd:4b:cd:fb:48:eb:32:b7:2d:86:e1:52:a2:11:0b:b8:3e:
73:1f:d4:7f:a9:be:5c:1c:39:e0:95:dd:2f:ea:e8:7e:dc:cc:
0f:01:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:09 2025 by rpki-client