Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: eoxFbzAvbMXT2gnjgrZRkOzj5xPt6GWa0jk2Y9Sp5iU=
Subject key identifier: 9C:0E:C9:EB:C9:2C:70:BB:94:94:78:49:E4:89:9E:4C:55:74:9D:92
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 019A4F98D4CC3586C45094CE7E358B582884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 02EC
Signing time: Tue 04 Nov 2025 16:00:07 +0000
Manifest this update: Tue 04 Nov 2025 16:00:07 +0000
Manifest next update: Wed 05 Nov 2025 16:00:07 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: lo27g7OJO6hfXDyE5eOIs7sXIYsPUEne/4XMhkGCx1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d4:cc:35:86:c4:50:94:ce:7e:35:8b:58:28:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Nov 4 16:00:07 2025 GMT
Not After : Nov 5 16:00:07 2025 GMT
Subject: CN=9c0ec9ebc92c70bb94947849e4899e4c55749d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:71:b7:b8:62:42:9c:d6:e0:20:e8:26:57:
e4:49:85:f7:e7:b9:30:0b:49:ac:f5:7e:b8:26:17:
84:76:5c:c4:ae:2c:e8:6a:85:db:2c:84:c8:d8:a8:
0d:9d:18:ef:c1:9e:ba:f7:74:a4:05:38:cb:5e:8b:
8d:d3:ba:64:60:cd:7f:fa:c3:dc:82:8f:9b:13:c6:
5c:d3:49:e8:fb:ae:bc:d8:29:d7:b5:5a:38:54:b4:
ab:fc:28:8e:89:c8:ef:c0:95:a3:64:87:46:37:d8:
58:1b:03:0f:a9:9f:a0:d5:1b:f3:bd:9a:e2:fa:86:
48:c9:99:34:4d:24:f5:8c:20:8a:16:71:de:c4:7d:
df:ee:36:25:fc:38:58:6c:78:fc:bf:3f:17:e1:9e:
09:55:cd:b6:2e:08:96:85:8b:29:a0:6e:9d:e4:d6:
7f:ad:be:5a:fb:cc:43:ad:91:46:dd:10:f0:5c:03:
2d:93:e1:59:62:d8:38:48:9d:4d:79:0a:6b:5a:bc:
af:8b:cc:6f:f6:93:83:b5:8e:fd:f2:51:fb:85:e1:
43:ce:07:45:4a:7d:5d:f8:02:db:e7:a6:3c:35:69:
24:3c:e1:ef:5d:0d:55:96:ce:6b:ef:7e:94:2f:07:
c8:cc:ff:39:53:3b:db:25:f2:72:60:d6:07:c6:8a:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0E:C9:EB:C9:2C:70:BB:94:94:78:49:E4:89:9E:4C:55:74:9D:92
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:53:38:a3:8a:cb:f0:52:e6:8b:7f:64:e7:6d:48:79:b2:
85:90:b2:e3:96:a9:e0:f1:da:b0:30:b9:f4:51:36:fa:22:89:
e3:d1:91:3c:e0:15:68:5e:03:06:c9:d8:2c:63:bb:9f:e8:eb:
c0:57:7d:38:01:04:d6:65:44:f8:2b:38:cd:b8:81:5c:ce:97:
81:ce:f4:29:8b:7d:c2:11:fb:1c:e6:c6:20:25:86:63:d8:60:
88:e2:d6:05:59:37:77:99:50:8b:ce:26:b3:cc:90:b2:35:20:
ca:b5:3c:07:c7:d8:1b:ae:ae:bc:21:09:9f:ba:d5:ce:b8:f6:
1a:7e:72:c5:06:7b:05:12:f8:f9:b7:74:dd:c0:a9:90:7c:31:
3d:b7:0d:bf:9d:be:70:30:1e:8c:dd:9a:46:ac:66:44:15:bf:
1e:aa:11:ba:37:f6:34:25:21:23:54:04:ea:82:5b:74:36:32:
45:9c:70:f0:22:c6:a0:d4:0e:f3:31:84:ed:99:b2:40:42:45:
55:aa:83:e8:14:6d:67:63:09:31:e4:71:6e:a9:c7:1f:0e:1d:
60:54:b9:dc:f4:ab:d6:63:fd:0e:12:0c:81:22:35:b0:02:bd:
c9:bd:16:ef:0f:b4:72:40:eb:de:95:c9:c6:ce:22:0b:f6:02:
7b:ae:cc:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmNTMNYbEUJTOfjWLWCiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDE1NTI5YTQ1MWM5NWNjZDkzNGFjNTZlYzA5ZDUxODc1
MDY2Y2IwHhcNMjUxMTA0MTYwMDA3WhcNMjUxMTA1MTYwMDA3WjAzMTEwLwYDVQQD
Eyg5YzBlYzllYmM5MmM3MGJiOTQ5NDc4NDllNDg5OWU0YzU1NzQ5ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppRxt7hiQpzW4CDoJlfkSYX357kw
C0ms9X64JheEdlzErizoaoXbLITI2KgNnRjvwZ6693SkBTjLXouN07pkYM1/+sPc
go+bE8Zc00no+6682CnXtVo4VLSr/CiOicjvwJWjZIdGN9hYGwMPqZ+g1RvzvZri
+oZIyZk0TST1jCCKFnHexH3f7jYl/DhYbHj8vz8X4Z4JVc22LgiWhYspoG6d5NZ/
rb5a+8xDrZFG3RDwXAMtk+FZYtg4SJ1NeQprWryvi8xv9pODtY798lH7heFDzgdF
Sn1d+ALb56Y8NWkkPOHvXQ1Vls5r736ULwfIzP85UzvbJfJyYNYHxoqTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwOyevJLHC7lJR4SeSJnkxVdJ2SMB8GA1UdIwQY
MBaAFKHRVSmkUclczZNKxW7AnVGHUGbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjkt
ZDZkZGFjZjZhM2VjLzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjktZDZkZGFjZjZhM2Vj
LzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrZTOKOK
y/BS5ot/ZOdtSHmyhZCy45ap4PHasDC59FE2+iKJ49GRPOAVaF4DBsnYLGO7n+jr
wFd9OAEE1mVE+Cs4zbiBXM6Xgc70KYt9whH7HObGICWGY9hgiOLWBVk3d5lQi84m
s8yQsjUgyrU8B8fYG66uvCEJn7rVzrj2Gn5yxQZ7BRL4+bd03cCpkHwxPbcNv52+
cDAejN2aRqxmRBW/HqoRujf2NCUhI1QE6oJbdDYyRZxw8CLGoNQO8zGE7ZmyQEJF
VaqD6BRtZ2MJMeRxbqnHHw4dYFS53PSr1mP9DhIMgSI1sAK9yb0W7w+0ckDr3pXJ
xs4iC/YCe67M0w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:07 2025 by rpki-client