Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: h9/ceqJI5zuyE0+oB+zcA31qQ2+A9zWKsIz14PKADzs=
Subject key identifier: 3F:F5:A8:4E:0E:09:E6:2F:26:02:3E:E1:32:0D:03:FE:64:51:D3:47
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 0197C6EF73271CBCE9356D43BE666BEB365C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 1155
Signing time: Tue 01 Jul 2025 17:01:10 +0000
Manifest this update: Tue 01 Jul 2025 17:01:10 +0000
Manifest next update: Wed 02 Jul 2025 17:01:10 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: tKJEKKhKiwnOQvspL/evlFHuaNgSl5CERXh7QGfjO08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:73:27:1c:bc:e9:35:6d:43:be:66:6b:eb:36:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Jul 1 17:01:10 2025 GMT
Not After : Jul 2 17:01:10 2025 GMT
Subject: CN=3ff5a84e0e09e62f26023ee1320d03fe6451d347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:09:c7:d0:db:49:d5:b5:1d:73:55:6b:57:
6e:7c:a2:0e:82:78:df:01:7b:f5:45:0a:74:42:91:
56:c2:f0:95:5d:55:e5:af:80:e5:c4:62:58:90:f7:
d3:c8:e5:58:aa:2e:4e:6d:5e:6e:bc:bd:67:36:65:
d6:e1:40:a0:72:c4:7b:55:1e:49:da:50:55:7c:07:
1e:ca:35:13:35:91:6f:f1:18:4e:61:fb:53:e2:9c:
f4:7f:50:5e:1c:dd:21:9e:af:e5:43:4e:a1:bb:9f:
f7:85:d7:ff:71:85:f3:7a:53:e3:ce:4a:2e:1b:1b:
5e:6c:e7:1d:7d:79:9c:0b:67:11:f1:3e:44:d3:3f:
1e:23:17:01:22:cd:00:27:df:ab:fb:df:e0:47:c6:
21:80:f3:0c:41:ea:9a:b1:ee:03:ea:92:2d:e3:25:
a2:33:04:98:00:45:7c:47:12:bb:ff:fa:6b:ca:41:
1d:e9:bb:db:69:a1:24:00:5f:95:e4:18:de:13:43:
2d:cc:71:93:4f:fe:8c:c2:37:6c:4e:3b:e6:bc:d4:
39:cf:8d:5b:73:e0:d7:04:46:70:39:68:77:8f:66:
98:dd:b0:8e:3c:b1:51:a9:b2:fe:e7:f6:97:8f:58:
7a:ab:66:1c:ee:fb:7a:d8:99:ca:cd:26:50:41:4d:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:A8:4E:0E:09:E6:2F:26:02:3E:E1:32:0D:03:FE:64:51:D3:47
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fd:c3:94:33:a6:54:27:3c:3d:16:37:6f:06:75:d2:42:ed:
78:87:8a:fa:26:e5:0d:43:69:f6:e2:9e:ac:2b:0c:c1:4c:ff:
7c:d7:f0:67:dd:80:10:40:b5:ff:9f:20:4b:0f:67:c6:77:36:
8c:3b:0d:15:24:db:3a:a2:b1:10:87:37:5f:ba:bd:f6:3e:15:
5f:4d:fb:6f:cf:26:a8:37:7f:6c:7b:a5:f6:e2:b2:81:a4:6c:
89:70:8d:3d:ea:35:04:18:84:85:90:94:4d:ad:69:0d:05:b8:
59:e4:75:cd:6a:b5:b0:3f:e1:fb:40:e6:69:33:f5:a8:62:45:
e9:7f:5c:72:35:2c:b7:23:53:8d:be:03:92:19:79:a2:8f:83:
78:cd:4e:4f:72:9e:12:42:14:3a:6f:b6:ee:b1:f5:5b:e5:95:
3d:14:e5:2b:a6:f8:c8:88:e2:95:12:72:d9:e7:81:91:fb:f1:
f5:82:99:04:74:cf:b5:43:54:b1:c7:25:fe:f8:a0:06:2a:28:
dc:a4:5a:59:e7:44:17:0c:93:5b:23:a5:93:de:39:e3:82:9d:
0c:1d:ac:9c:7b:0d:8a:21:99:b2:72:24:2c:0f:f3:61:1d:20:
bd:fc:e9:26:51:5a:e1:a3:57:fc:e6:bc:d3:fc:5c:e8:fb:0e:
ec:14:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:44:12 2025 by rpki-client