Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: ea1l1FitTaL/MVafbHfsnr1SaFrS4BVL2eHjwxJhjWg=
Subject key identifier: 67:D6:1C:CA:B4:2C:D9:29:80:00:81:42:8F:02:AA:80:BA:3A:A7:00
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 0198D705D69359D9A56C2FF32D3BF60DE609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0727
Signing time: Sat 23 Aug 2025 13:02:20 +0000
Manifest this update: Sat 23 Aug 2025 13:02:20 +0000
Manifest next update: Sun 24 Aug 2025 13:02:20 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: 76SOaEpcL1lehCoV604nY0s12siI3z936h55/Nj36y4=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d6:93:59:d9:a5:6c:2f:f3:2d:3b:f6:0d:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Aug 23 13:02:20 2025 GMT
Not After : Aug 24 13:02:20 2025 GMT
Subject: CN=67d61ccab42cd929800081428f02aa80ba3aa700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:bb:d5:2c:d7:3c:18:c3:cc:a8:cb:dc:2a:
f3:8d:39:57:1d:99:3b:83:d4:fb:ff:1f:88:99:30:
66:7e:9d:3b:cf:24:12:4e:dd:c0:00:16:b0:15:d1:
6f:d9:1d:5b:ec:55:9a:aa:5c:aa:81:72:15:c7:10:
06:67:f5:83:9e:75:cd:45:2d:5c:d1:25:ea:70:31:
94:c4:22:d4:b4:00:96:19:40:88:54:4f:56:bd:b4:
f6:81:6a:9b:f1:1d:ae:a5:21:64:a2:a4:94:a3:62:
67:82:d8:2f:9e:93:eb:89:ac:c5:7e:4a:bd:80:ea:
17:12:89:48:a5:ee:5c:23:a1:33:2a:9a:4b:92:cf:
fc:37:bc:67:af:f2:61:c0:4e:bf:e0:0d:59:22:58:
aa:74:3b:c6:f7:b0:f7:b6:26:80:3f:4a:35:e9:21:
d2:b6:0d:eb:e1:19:71:26:60:bc:72:d0:e7:e7:f5:
03:0e:99:f0:1b:d7:17:fb:ed:ca:d9:97:05:01:d1:
2b:09:aa:e2:9c:fc:50:62:0e:03:42:cb:62:b8:f4:
8d:78:80:8a:b9:2c:ee:58:b5:6a:fb:83:ec:64:39:
b4:83:9b:6d:9c:1c:4a:97:6f:77:04:1d:60:3d:05:
b6:13:fd:43:3d:ec:c3:46:8b:ab:4e:b3:6e:10:9f:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:1C:CA:B4:2C:D9:29:80:00:81:42:8F:02:AA:80:BA:3A:A7:00
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:90:86:56:da:6d:a8:b0:ab:da:fa:fb:d2:7a:9d:ab:34:b7:
2d:97:f2:d6:ed:77:4f:e8:bf:3c:4f:db:ef:ae:46:9b:dc:84:
fb:91:04:1d:ae:3f:1c:26:7d:01:35:d1:b9:e7:75:f1:4a:bb:
e8:f4:01:bd:8c:34:92:8f:cd:ad:46:66:30:4d:3d:0c:65:b5:
d4:8a:76:47:76:82:c1:39:6a:9a:4d:a1:a8:d4:7e:f4:82:47:
84:d1:1f:f6:ac:dd:b6:cc:94:e8:d3:3e:b6:ee:a4:33:1b:6b:
60:ae:72:2f:07:8b:03:38:81:90:f5:dd:ec:f0:77:64:ea:6c:
15:34:a3:59:30:7d:ce:45:c1:1f:fa:3e:e5:e2:d5:30:e2:8a:
82:52:bd:a6:19:21:46:2e:e3:23:26:08:13:0d:db:1f:10:0f:
e2:85:69:c7:23:a2:a3:0d:84:cc:41:9a:eb:bc:6a:96:05:1d:
ae:41:98:27:a4:f5:22:93:54:1a:af:a5:d9:71:05:7c:89:a6:
c7:66:f5:65:4d:b2:1c:55:da:18:1d:3a:e2:2c:ba:d9:69:bf:
ce:f9:a5:93:ac:b2:b0:d8:bd:80:e4:05:9d:52:5d:fb:13:44:
c7:1c:a2:a9:62:87:fc:96:b7:fa:cc:b5:80:e1:b7:3f:01:d0:
3b:53:5f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBdaTWdmlbC/zLTv2DeYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4
YWNiZTIwHhcNMjUwODIzMTMwMjIwWhcNMjUwODI0MTMwMjIwWjAzMTEwLwYDVQQD
Eyg2N2Q2MWNjYWI0MmNkOTI5ODAwMDgxNDI4ZjAyYWE4MGJhM2FhNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh+71SzXPBjDzKjL3CrzjTlXHZk7
g9T7/x+ImTBmfp07zyQSTt3AABawFdFv2R1b7FWaqlyqgXIVxxAGZ/WDnnXNRS1c
0SXqcDGUxCLUtACWGUCIVE9WvbT2gWqb8R2upSFkoqSUo2JngtgvnpPriazFfkq9
gOoXEolIpe5cI6EzKppLks/8N7xnr/JhwE6/4A1ZIliqdDvG97D3tiaAP0o16SHS
tg3r4RlxJmC8ctDn5/UDDpnwG9cX++3K2ZcFAdErCarinPxQYg4DQstiuPSNeICK
uSzuWLVq+4PsZDm0g5ttnBxKl293BB1gPQW2E/1DPezDRourTrNuEJ8Y5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfWHMq0LNkpgACBQo8CqoC6OqcAMB8GA1UdIwQY
MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt
OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm
LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpCGVtpt
qLCr2vr70nqdqzS3LZfy1u13T+i/PE/b765Gm9yE+5EEHa4/HCZ9ATXRued18Uq7
6PQBvYw0ko/NrUZmME09DGW11Ip2R3aCwTlqmk2hqNR+9IJHhNEf9qzdtsyU6NM+
tu6kMxtrYK5yLweLAziBkPXd7PB3ZOpsFTSjWTB9zkXBH/o+5eLVMOKKglK9phkh
Ri7jIyYIEw3bHxAP4oVpxyOiow2EzEGa67xqlgUdrkGYJ6T1IpNUGq+l2XEFfImm
x2b1ZU2yHFXaGB064iy62Wm/zvmlk6yysNi9gOQFnVJd+xNExxyiqWKH/Ja3+sy1
gOG3PwHQO1Nfkw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:39 2025 by rpki-client