Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: 8YNaIE8onDDTA1x/cdGG/DAzrAfGnTz6WXK/s4D78uc=
Subject key identifier: E5:49:EA:51:69:05:58:87:A3:60:B8:56:4A:E2:5F:5C:94:89:C4:6E
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 0198D4727F499572119F97A9D184E59BBCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: /5qzU7aIb1O84ulJRGTxl3eUAvxRKdznwWQbO3gPvl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7f:49:95:72:11:9f:97:a9:d1:84:e5:9b:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=e549ea5169055887a360b8564ae25f5c9489c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:04:82:c8:35:da:0d:c9:e6:41:6b:90:e3:
a6:00:9d:f8:8f:be:5e:13:47:7c:04:f0:0c:46:26:
b3:7d:9d:45:86:8d:a1:59:6f:fe:56:eb:19:a7:a9:
40:42:20:4e:fa:82:1a:42:c1:76:a6:a7:95:a9:fd:
0c:4d:0c:39:9d:aa:08:66:9c:e5:ef:3b:bf:ae:ea:
e3:fd:22:a2:bc:36:4d:e8:e2:38:8b:bd:3c:ba:f1:
7a:6d:64:70:8e:78:96:30:65:87:91:bb:53:19:ab:
c1:8f:79:46:d3:5a:19:c4:87:cd:66:33:62:d9:91:
1b:3c:ed:e8:0e:af:68:01:da:d5:88:e2:d7:2e:f4:
b8:2c:a4:3b:86:6e:52:0e:74:46:8e:38:ac:0f:ba:
76:0d:f4:f6:20:e7:0d:97:68:f1:92:3b:a9:e2:ef:
62:6a:e3:d9:f4:f0:7c:7e:76:9b:ed:fe:19:78:6b:
fb:11:15:89:ed:78:1a:fb:d2:66:2c:b8:96:e4:c4:
a4:39:e9:4e:73:60:df:24:17:77:17:db:6a:38:12:
24:b5:f3:8a:d0:ab:84:ad:27:07:79:9a:31:26:c7:
7b:42:e1:20:17:e9:13:bf:02:83:ff:59:a2:98:42:
79:4c:73:0d:fc:6e:59:9e:c8:7d:25:e5:3a:3e:78:
32:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:EA:51:69:05:58:87:A3:60:B8:56:4A:E2:5F:5C:94:89:C4:6E
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:44:1c:b5:b6:1f:f6:2e:61:1f:74:c2:9f:28:86:63:17:
27:71:1e:7c:67:75:a8:c5:22:7b:6c:90:d0:11:64:11:b3:ad:
cc:bf:a6:4b:38:b2:1c:80:03:2f:f7:d8:f7:df:28:ea:a1:0b:
4d:0f:da:7e:07:b0:1c:19:2c:54:61:38:05:c1:cd:9a:be:9b:
5a:a0:3e:6f:af:c2:a2:e8:bb:53:12:86:73:25:d9:2f:63:69:
e6:03:55:b7:00:4a:0c:b6:c9:be:0c:86:c2:19:7a:95:69:f8:
32:8e:65:67:f5:6c:d8:93:41:58:a3:df:bb:7c:bf:ef:0c:bc:
0a:90:b8:1b:30:26:ca:54:52:f2:fb:b4:c9:f6:4c:2e:5a:d8:
37:c8:b1:4c:b3:d7:62:6a:7d:72:db:ef:05:f2:06:ca:58:8d:
b8:6f:0c:ce:0a:fd:5e:21:b3:aa:61:b4:22:20:c4:85:c9:af:
d9:b6:46:b4:a4:f6:67:a5:99:ec:5f:ae:08:b7:3d:4f:e7:a8:
c3:fa:2c:50:8f:40:d1:2d:5f:b0:e9:bc:0a:ba:c1:b1:68:2d:
17:1e:21:8f:e2:ef:79:15:e6:7a:9d:99:db:ab:39:fe:fb:ad:
76:a6:ef:59:fa:23:d7:75:c8:99:28:b1:6c:00:24:e9:7a:08:
92:7b:ed:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcn9JlXIRn5ep0YTlm7z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz
YmVhMWQwHhcNMjUwODIzMDEwMjEwWhcNMjUwODI0MDEwMjEwWjAzMTEwLwYDVQQD
EyhlNTQ5ZWE1MTY5MDU1ODg3YTM2MGI4NTY0YWUyNWY1Yzk0ODljNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6MEgsg12g3J5kFrkOOmAJ34j75e
E0d8BPAMRiazfZ1Fho2hWW/+VusZp6lAQiBO+oIaQsF2pqeVqf0MTQw5naoIZpzl
7zu/rurj/SKivDZN6OI4i708uvF6bWRwjniWMGWHkbtTGavBj3lG01oZxIfNZjNi
2ZEbPO3oDq9oAdrViOLXLvS4LKQ7hm5SDnRGjjisD7p2DfT2IOcNl2jxkjup4u9i
auPZ9PB8fnab7f4ZeGv7ERWJ7Xga+9JmLLiW5MSkOelOc2DfJBd3F9tqOBIktfOK
0KuErScHeZoxJsd7QuEgF+kTvwKD/1mimEJ5THMN/G5Znsh9JeU6PngyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVJ6lFpBViHo2C4VkriX1yUicRuMB8GA1UdIwQY
MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt
N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3
LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPZEHLW2
H/YuYR90wp8ohmMXJ3EefGd1qMUie2yQ0BFkEbOtzL+mSziyHIADL/fY998o6qEL
TQ/afgewHBksVGE4BcHNmr6bWqA+b6/Coui7UxKGcyXZL2Np5gNVtwBKDLbJvgyG
whl6lWn4Mo5lZ/Vs2JNBWKPfu3y/7wy8CpC4GzAmylRS8vu0yfZMLlrYN8ixTLPX
Ymp9ctvvBfIGyliNuG8Mzgr9XiGzqmG0IiDEhcmv2bZGtKT2Z6WZ7F+uCLc9T+eo
w/osUI9A0S1fsOm8CrrBsWgtFx4hj+LveRXmep2Z26s5/vutdqbvWfoj13XImSix
bAAk6XoIknvt2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:02 2025 by rpki-client