
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: K/dA46uvO/lqNzFOsX6djFZaFfFq1396gL6j7ScstgM=
Subject key identifier: DE:56:27:00:68:8B:A4:49:6A:49:E5:63:00:27:CE:30:85:6D:71:CC
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 0198D66066A6F28CE14BE7F70A3F0D75101E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:38 +0000
Manifest this update: Sat 23 Aug 2025 10:01:38 +0000
Manifest next update: Sun 24 Aug 2025 10:01:38 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: X7cJ+S1UqdUnxoIVdnLcJHuupXopAjPyGF6e0j01xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:66:a6:f2:8c:e1:4b:e7:f7:0a:3f:0d:75:10:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Aug 23 10:01:38 2025 GMT
Not After : Aug 24 10:01:38 2025 GMT
Subject: CN=de562700688ba4496a49e5630027ce30856d71cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:98:2a:75:e4:28:36:bd:69:a1:06:44:f5:
23:a9:9b:39:a0:92:2a:bd:ba:93:f4:40:3c:fb:5e:
60:04:fd:8b:06:b9:90:75:6c:cf:b3:5b:3f:0b:b5:
a0:f9:42:3b:f0:3c:1e:a4:8b:b9:2a:32:95:88:33:
70:7a:8e:5f:e8:b3:b3:6f:ae:d7:2f:47:1d:3e:0a:
b9:94:96:72:52:9e:17:ed:2f:15:e1:2d:64:5e:f3:
4f:cc:1f:d2:eb:75:fa:1e:49:97:b0:d8:c5:2d:2a:
ba:5e:63:99:97:dc:64:dc:c4:97:6f:ab:2b:23:f7:
3f:d4:45:12:c0:c8:65:e4:f4:b9:1c:f1:1b:20:03:
3b:6d:4e:f9:e5:a7:ed:55:cb:4d:a0:01:41:a2:c6:
9e:9b:d4:2f:12:dd:5f:73:14:f9:34:4f:ee:e7:ee:
26:d3:bc:d4:d5:38:6b:dc:31:08:35:d0:b1:36:0d:
1e:4d:0e:25:ac:6d:aa:b1:f3:74:d7:ae:e6:30:7e:
4d:a5:a3:75:dd:84:3f:b9:b5:43:f0:5d:99:2a:27:
aa:67:13:bc:7f:ee:46:a2:5a:43:30:c3:93:6f:13:
e3:34:4d:80:2e:a7:30:77:ab:5e:ef:40:a6:42:c1:
f5:38:98:8a:db:9e:9b:69:6c:03:81:98:99:5b:df:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:27:00:68:8B:A4:49:6A:49:E5:63:00:27:CE:30:85:6D:71:CC
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:69:4d:66:3b:57:5b:0a:61:c8:50:6d:21:81:91:55:ec:5d:
c3:7d:ad:d0:ab:bb:8d:92:f0:51:d0:59:5a:ee:e5:e3:e3:bf:
eb:f2:9d:b0:64:62:b7:14:b9:aa:c5:0f:c1:35:d2:85:e2:da:
2f:5b:63:d9:65:9f:29:47:60:42:c0:18:f7:7d:d8:03:90:a4:
ac:9f:b0:56:93:90:0b:12:65:28:ce:15:74:59:aa:3e:f7:68:
07:20:1b:76:a0:5d:7c:ff:f0:f5:ed:09:e8:eb:39:4d:53:6b:
c5:48:96:09:ce:71:60:56:d3:35:12:8e:63:4c:09:ee:21:1a:
fd:47:64:68:44:f8:50:b0:30:8a:ee:4f:e4:5a:68:a7:36:47:
76:bd:e4:fc:3e:04:b3:a7:9e:94:8f:38:fe:cd:7c:57:5c:86:
20:77:af:05:79:8a:b1:16:7e:3e:a4:cb:53:91:17:a8:72:eb:
60:95:55:77:20:30:45:35:3a:4d:f0:c7:d0:25:7f:73:33:0f:
04:53:d4:87:23:ea:38:43:85:9e:1d:77:04:07:d9:12:bb:4a:
41:32:4b:f9:36:cd:dd:b0:7c:bc:5c:a7:38:43:b0:a0:0c:9e:
f9:c8:5d:f1:56:6c:a3:88:f3:2f:7a:5d:c7:a8:f4:bc:a4:4f:
b6:35:ea:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:55 2025 by rpki-client