Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: pyXNwvi6YmcRGH6Qiqr59NElhXUfHENMB+fR7ZLglV8=
Subject key identifier: F7:FF:22:FB:B6:AE:47:3C:34:27:34:C4:3F:73:AE:E5:68:11:61:FA
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 0197B74550290CA79A9585FABBC5DDB2FB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0692
Signing time: Sat 28 Jun 2025 16:01:02 +0000
Manifest this update: Sat 28 Jun 2025 16:01:02 +0000
Manifest next update: Sun 29 Jun 2025 16:01:02 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: CfV3vLEqzLTHoTuRJXsdvzkCIGXx24t5POWmGujpVdQ=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:50:29:0c:a7:9a:95:85:fa:bb:c5:dd:b2:fb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Jun 28 16:01:02 2025 GMT
Not After : Jun 29 16:01:02 2025 GMT
Subject: CN=f7ff22fbb6ae473c342734c43f73aee5681161fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:3c:d4:5b:86:40:77:83:15:5e:2e:5d:a5:
6b:84:68:93:a9:99:58:ba:08:c4:1a:12:61:fb:6c:
cd:02:ad:81:07:e9:ba:58:f5:21:17:54:0e:05:99:
fa:b2:8b:3d:d8:0b:fa:6a:eb:37:3a:5b:f3:9d:12:
59:43:f2:23:bc:ec:88:38:4f:f8:f4:b9:44:ba:1a:
8b:19:33:7d:d6:c5:d8:1f:6e:93:9a:d5:12:d6:b9:
3d:4a:5e:3a:de:3c:08:7d:95:74:e1:c5:9e:e5:33:
be:9c:87:ab:23:56:2f:67:f8:0e:27:a7:7b:6e:a1:
e5:65:94:de:c9:6a:cb:ff:a2:c2:b7:a0:68:27:a0:
3c:8b:e3:34:26:58:c7:09:ce:5c:68:a4:a6:0e:dd:
e6:1b:07:64:23:25:6c:49:5b:9b:9a:62:5f:53:0f:
fb:e8:27:fd:2b:77:93:fe:16:ef:10:a6:be:31:a3:
13:ae:84:be:75:60:8e:28:3b:5a:81:94:9d:4a:79:
39:f5:9e:b4:1e:c6:43:64:9d:af:fc:be:48:dc:c6:
08:82:e4:10:7f:ce:8c:42:8d:ca:08:e6:e8:e3:f3:
90:a3:0a:04:70:93:58:a4:dc:c2:51:04:a2:5c:67:
2b:65:f2:2d:a1:62:0f:9b:fb:60:a1:03:ba:a8:f8:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FF:22:FB:B6:AE:47:3C:34:27:34:C4:3F:73:AE:E5:68:11:61:FA
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dc:a4:f1:29:47:9f:0a:03:fd:a2:ec:53:de:c4:85:c2:d6:
ff:d6:26:9e:93:12:9d:fb:2a:b6:89:cb:81:ed:d6:90:0a:19:
70:47:ce:ce:69:8e:07:99:bf:05:4e:87:89:bf:ae:e2:78:fa:
10:f9:8f:78:64:ea:96:6a:a6:08:d5:87:6c:fa:ac:cf:e5:2a:
c2:44:18:30:9e:10:1a:70:47:07:6e:35:8f:66:36:52:c3:2a:
56:ab:bb:bd:01:76:6e:a4:ba:2c:33:fb:b5:78:ae:7e:8e:87:
24:da:38:e3:1c:70:1e:83:a1:c9:aa:d9:d8:5c:3d:92:cb:c6:
de:f5:87:19:7a:2d:99:5c:f3:d3:d6:eb:0d:5f:6d:4d:20:76:
6f:31:97:5a:a6:03:84:db:2d:e6:f6:51:80:0c:4a:27:10:65:
ce:f8:c8:1b:e0:53:6e:60:4b:32:a4:e9:13:fa:0f:bd:32:7e:
fc:2e:34:23:64:0f:10:de:a4:c4:59:28:3b:b4:35:61:ac:bd:
03:74:1b:0e:87:b2:6f:d7:ed:78:d6:f5:67:af:1b:f3:96:b8:
00:68:ae:44:88:fc:70:09:10:44:60:c8:23:ac:05:f9:b3:d9:
31:44:e6:fc:19:08:b2:e6:83:87:5d:75:7e:71:cf:4e:7f:ed:
3c:a2:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:20 2025 by rpki-client