Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: xxeXVYN5joFGbsVylNnXvSxPeXrceMqd9mLqMpHY8aM=
Subject key identifier: 63:26:0C:2D:81:8F:D1:DD:D7:AC:AA:00:29:54:F9:5F:31:0D:5A:2C
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 019A4D3CFE03C1E3683B8659355069711FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 041B
Signing time: Tue 04 Nov 2025 05:00:34 +0000
Manifest this update: Tue 04 Nov 2025 05:00:34 +0000
Manifest next update: Wed 05 Nov 2025 05:00:34 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: Gjbf42pGmKu7eV+LE2YYwXp9ZYOXivRUYUI3pOLXBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fe:03:c1:e3:68:3b:86:59:35:50:69:71:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Nov 4 05:00:34 2025 GMT
Not After : Nov 5 05:00:34 2025 GMT
Subject: CN=63260c2d818fd1ddd7acaa002954f95f310d5a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:13:3a:1b:a7:ea:f6:aa:d2:af:fd:12:78:
60:74:2b:fc:64:3f:8b:c3:74:d6:22:a1:eb:cd:1a:
b1:e0:8f:35:27:f1:7b:8f:f2:81:08:1c:8d:20:63:
ab:78:f9:b6:ab:67:ba:6e:cb:c2:42:cc:21:83:91:
5d:d6:93:8b:f9:cc:ca:7a:50:c4:05:7a:bd:80:c7:
19:cc:a3:a2:3f:7a:49:d7:71:fc:52:3d:65:61:94:
f2:62:76:7c:21:59:7b:d6:fe:56:3c:9d:89:a8:fc:
67:91:dc:eb:d1:05:83:46:66:e6:fd:cd:d8:37:9b:
86:7e:92:f5:c9:fc:4b:c7:40:f8:3b:9a:58:81:18:
03:92:0b:89:63:64:00:9e:bc:0a:94:65:5a:7b:60:
0b:21:00:80:77:02:72:dc:0e:3d:38:70:e0:7b:81:
21:24:3c:f6:77:d5:ce:37:65:57:0b:37:aa:a9:40:
a7:c4:f9:d6:95:ed:03:fb:64:ea:a3:69:86:66:ee:
cb:be:ef:79:57:96:c3:a0:7e:80:b6:11:ea:fb:14:
a0:5d:e3:3e:2a:96:24:67:95:34:7e:01:60:fb:d6:
c2:97:2b:21:41:44:db:ce:c7:cb:17:cf:9c:80:c3:
87:ad:35:25:01:a3:3e:7a:ba:e3:72:ba:6f:e8:9c:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:0C:2D:81:8F:D1:DD:D7:AC:AA:00:29:54:F9:5F:31:0D:5A:2C
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:a9:26:d3:25:65:d7:1e:67:23:e6:94:30:ff:dc:ee:86:
13:52:c7:dd:46:7d:11:fc:76:4f:8d:92:e2:1d:58:6b:b8:0f:
95:5e:3f:a7:0c:66:9d:48:37:95:52:4f:81:07:a6:28:31:5f:
68:d5:c4:c6:ff:18:e4:1c:eb:e9:e7:6a:ad:69:a8:e3:40:18:
63:a7:74:c4:32:ce:50:c0:13:29:a8:27:b8:5e:05:9b:2c:a7:
a6:75:1c:f1:36:2d:21:d3:52:bf:10:52:54:58:fd:11:9b:6e:
09:a9:54:48:05:a2:50:b0:c1:c3:39:ec:f4:50:72:0d:60:bd:
5d:56:26:bb:cc:56:18:fb:61:bf:88:01:2d:a7:7f:3c:a8:93:
3a:48:81:f6:35:24:51:b5:fe:5b:7c:7f:cc:f0:3f:70:be:8b:
16:cc:0f:bb:96:e5:96:16:64:08:f5:2b:28:78:48:a6:8f:33:
6e:f4:bb:5c:24:41:9b:21:33:db:41:76:f7:5f:83:65:21:4a:
bd:76:e9:13:02:ae:45:7f:d1:3b:39:bf:aa:c9:1c:d3:f6:b4:
e9:e7:3f:88:63:35:40:6b:44:3c:86:b8:25:83:7b:54:62:d1:
00:4f:a5:48:38:b3:23:30:6a:bd:5c:df:f5:f8:f3:27:ef:24:
70:5b:ae:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:24 2025 by rpki-client