Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: S0f982N/1YiJoky2Wil8duVfN3JSsxxgl262W44p+MI=
Subject key identifier: 2A:D8:57:66:CB:80:9E:7E:AA:90:A8:98:05:4E:53:DE:9A:5A:DF:2D
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 0197B6A190A5F5D26FC777BA18B97B0E6E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: iJlG9gBecoj+yPdD74km7/S+80RzdpfD6A0mRSo6C7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:90:a5:f5:d2:6f:c7:77:ba:18:b9:7b:0e:6e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=2ad85766cb809e7eaa90a898054e53de9a5adf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e3:68:28:74:d9:b1:00:bd:e8:c0:4c:21:ec:
f3:9e:1e:a3:36:1f:e4:8d:67:66:5f:d3:b6:45:75:
7e:73:ef:77:bd:b3:24:45:15:90:00:23:ed:58:15:
86:36:8e:66:22:b4:9f:8f:3e:ef:89:7d:a1:2e:59:
4a:a1:32:d1:d5:90:df:87:3c:72:6c:0b:a3:51:8d:
15:f5:17:1e:81:ec:2d:89:a4:42:e8:63:26:0e:b6:
b4:3f:c5:ac:3e:ed:6b:54:81:69:72:9f:8a:ac:8d:
70:2d:d4:00:aa:cc:83:92:aa:31:d5:96:76:0b:61:
69:ae:cf:da:83:fa:2e:b0:58:10:39:ee:d1:75:58:
11:f7:ee:e3:59:56:b2:30:22:59:3b:fd:2c:38:12:
b8:72:e0:e5:6f:86:3a:64:80:35:6c:11:9a:95:8b:
4c:fa:13:e0:46:29:af:d0:26:57:62:c3:98:e6:7b:
ee:12:76:6e:ce:a7:42:7e:bf:14:3c:92:4e:1f:48:
64:90:1d:00:ba:24:a6:4f:05:55:8c:ae:67:29:42:
96:7b:6e:e5:6c:4c:ea:96:1e:c2:25:a4:82:84:0b:
8b:73:0c:e3:d1:6f:cc:eb:17:15:0b:12:88:83:14:
62:06:c8:e2:d3:cf:39:59:e2:90:0f:21:99:63:3b:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:57:66:CB:80:9E:7E:AA:90:A8:98:05:4E:53:DE:9A:5A:DF:2D
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2c:33:49:81:02:af:5f:66:ff:8b:b3:e3:f4:05:ac:a9:e3:
fc:e6:bd:c5:3a:15:50:fc:d6:3c:a9:f9:10:71:98:03:7a:16:
e6:4e:fe:27:90:65:f2:f5:35:72:b8:71:3f:e6:a6:98:ce:32:
5a:30:9f:d4:90:75:ad:79:73:d2:09:aa:6a:89:27:d8:65:16:
19:14:9e:dc:41:17:c5:1f:c7:4a:23:a6:d1:c0:17:48:74:25:
65:8e:51:f8:14:bd:44:e7:a9:e3:4c:74:4d:27:fa:26:8f:05:
d4:c2:67:02:d4:80:b8:3e:43:7d:30:51:a4:07:3f:5c:7a:96:
d6:eb:de:e1:34:9c:2b:85:23:f6:2f:6f:37:2a:79:13:67:30:
35:c0:7a:94:b0:dc:c6:42:5b:6c:e9:07:23:fb:60:62:72:f2:
c6:e2:e1:16:bb:e9:20:40:4a:f2:f8:3d:e5:f6:57:f2:00:36:
66:f5:ea:9f:53:af:22:1c:74:87:ad:35:25:c5:8a:21:a9:c3:
d5:21:a3:0b:34:5a:85:8d:01:52:c9:57:9a:95:65:19:8a:dc:
8b:d2:8c:6b:be:e2:43:02:3a:27:48:c6:e5:00:e6:63:83:7f:
3d:25:f7:f8:86:c3:65:a8:2b:d5:d1:b6:aa:8f:f4:01:83:e9:
2f:c4:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:41 2025 by rpki-client