Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: o39SRUgZ5ymfvJyOTjVWjM18jfMxd2BTBoNO8KyJxag=
Subject key identifier: 6E:C7:B8:B5:CB:F2:59:86:F4:6F:38:D5:41:E9:88:92:D9:5B:F3:E7
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019A4EF4CA0B1E18EFE22315585DBA0C3F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 0355
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: ZK2-Yf0vyUn-1yqVZSeh59hAASc.roa (hash: dJFWEY6bKtkQB9DqJ5/i3H6PU+2US3ATnt6WwIQ5YmQ=)
2: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: M8ArNO76qHHdG/rnWshsULTywbkdHBPsGvQJ5HQrkXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ca:0b:1e:18:ef:e2:23:15:58:5d:ba:0c:3f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=6ec7b8b5cbf25986f46f38d541e98892d95bf3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:bf:b6:5a:a7:76:1e:c0:f0:48:c5:f1:97:
d5:cf:44:1b:5a:7c:2c:29:67:71:ff:33:dd:ad:3c:
f0:14:50:90:78:32:90:d2:63:8b:08:28:80:45:a4:
66:1b:ce:83:a9:35:cf:6e:e2:56:c1:5c:92:1e:73:
5a:f7:8a:60:54:ff:2f:ef:5c:d2:d8:6b:f2:03:35:
18:6d:8f:6e:ec:ff:e5:58:f4:f7:cd:71:31:99:f6:
01:4c:58:3e:17:ed:c2:d5:7b:df:93:09:68:8d:7a:
0f:a0:dc:d2:bf:04:be:10:4a:82:6c:b1:4a:8b:d1:
4d:77:43:f1:5b:9d:aa:6d:9a:79:e4:ad:29:73:6c:
83:79:75:7b:e0:4e:e7:37:85:b6:62:92:6f:7a:bc:
9f:24:05:fa:e1:97:0c:77:54:45:0f:a3:15:61:30:
2d:04:70:2a:ee:09:00:3a:06:52:ba:37:d3:1f:5b:
4d:9c:e4:cf:7f:bd:49:d2:97:e1:ff:3c:3b:8f:66:
fe:25:a3:df:f8:6a:8b:a3:2a:e9:ed:22:9a:18:fd:
60:f9:d9:4c:ca:57:e6:29:c3:6f:5b:ac:49:bf:6f:
e6:70:c8:7b:37:f1:55:65:40:2b:13:2a:c5:e2:b1:
05:24:70:91:88:32:b0:f3:e8:1b:02:74:47:c4:44:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:B8:B5:CB:F2:59:86:F4:6F:38:D5:41:E9:88:92:D9:5B:F3:E7
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:aa:a4:74:0e:5d:3d:d1:f2:20:70:5a:e2:97:53:82:4f:31:
69:b1:4e:db:47:74:ee:84:30:53:7f:a5:fb:1d:21:40:9d:04:
e2:95:47:ab:c2:64:39:63:cc:66:34:a3:2e:9d:f4:01:38:e7:
44:98:48:6f:6c:45:2d:14:fe:1e:c8:23:62:b3:ff:79:df:9e:
37:64:15:f8:bc:47:13:d5:d1:aa:5b:c1:99:36:78:ca:7a:69:
86:57:08:7e:5b:0f:6f:32:af:08:69:80:0a:5c:89:ea:b7:39:
db:74:57:dc:e5:5b:e4:21:36:83:80:d9:ea:28:e1:44:3a:0d:
43:3d:85:4b:98:94:61:ef:ce:94:e9:81:3d:06:da:13:5c:6a:
86:6e:2e:df:66:77:fa:36:15:3d:e7:fc:84:0e:de:c0:9a:ac:
90:de:f7:74:16:4a:a1:d9:05:51:c7:b1:24:2a:ce:b4:d5:83:
05:44:68:6d:51:6a:1b:fe:8d:41:f9:75:3b:52:58:a6:8a:c2:
84:e7:b4:d2:ed:d4:31:80:38:93:96:ba:43:e6:c8:17:dd:f1:
56:3f:06:5a:bf:59:72:cb:be:33:db:c0:7c:b9:4e:af:6b:c2:
21:f8:70:11:3c:61:a1:a3:e9:8f:ad:c4:97:b0:fe:3a:03:35:
30:39:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:36 2025 by rpki-client