Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: yNYHeAzsupigcCLOF280fxizv3XR5XEWCEMg2KE0Pmo=
Subject key identifier: EA:96:5B:62:0C:48:23:7E:B7:32:4A:D6:FA:C2:2B:82:05:0B:C3:42
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 0197B6A1C49E22106D9142E5124BCF6E4EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: 6ODBECqjmqOYEcU9Uck7mj462NOes76s2X91dQdwgUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c4:9e:22:10:6d:91:42:e5:12:4b:cf:6e:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=ea965b620c48237eb7324ad6fac22b82050bc342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:88:5d:aa:b6:a2:8d:17:19:59:fa:f5:f2:
df:2f:07:3e:b3:82:6a:2e:9a:a2:3a:8c:92:e7:48:
70:69:57:bc:24:0c:a1:cf:12:f3:2d:c4:a2:db:e2:
3e:58:d1:c2:4b:d1:0b:b8:1c:c3:ea:6d:d6:51:13:
4f:b5:fa:27:91:bb:19:ed:53:a6:33:7d:48:87:dd:
1f:ee:3d:ff:9f:d3:da:39:72:d2:aa:b7:4d:b7:64:
af:8c:6f:de:14:91:3a:69:da:45:9b:3d:f1:26:c1:
86:4c:cf:22:0e:4d:1c:3c:ee:fb:d3:ad:96:04:21:
be:9c:44:65:5c:a4:7e:5f:5a:2d:45:76:fb:04:44:
34:2e:81:fa:6d:19:52:0d:52:ce:88:48:46:e8:2c:
75:33:b3:8c:72:b2:a2:4e:e6:46:fb:65:9d:45:be:
da:e7:46:58:74:a2:43:f0:57:7a:5a:a1:53:5d:1c:
1a:11:03:61:7d:97:fb:93:ca:2c:87:18:f4:2f:72:
e9:d0:1c:80:e3:58:d4:d2:0c:16:d6:07:6c:4e:1b:
16:14:15:5c:9c:01:ae:1f:8e:c8:07:d9:d8:bf:2e:
76:f7:fa:fd:00:d5:25:ce:29:1a:84:1c:2b:26:f3:
43:82:2c:4c:64:22:00:9f:22:a1:87:91:9e:c2:e1:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:96:5B:62:0C:48:23:7E:B7:32:4A:D6:FA:C2:2B:82:05:0B:C3:42
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1f:c9:72:73:80:f4:8e:27:0b:52:f6:af:88:05:25:74:4f:
15:26:d9:38:9d:af:0d:2d:8b:93:94:f0:86:67:fc:65:8b:9c:
e9:48:80:8a:f3:ae:0c:92:f5:14:c6:1b:f4:5c:12:e7:e4:c4:
a0:5a:79:46:a7:96:76:20:de:e7:7a:61:bd:b7:f5:5f:04:d6:
8d:a6:50:f0:3f:a9:4b:00:29:0f:e9:4d:11:52:55:5e:ab:c8:
af:8a:20:93:cd:60:1e:3e:43:3b:58:f6:62:c8:b5:6f:76:52:
7c:f9:95:e7:d5:09:8e:47:c2:24:0b:ef:85:84:43:9b:e9:63:
d3:f9:d6:e0:3e:05:7a:37:56:85:c7:7a:28:07:ee:4e:15:c6:
22:c2:6c:56:93:b6:c2:ae:28:4b:d3:69:64:1b:70:98:29:d3:
ef:7d:cc:a7:d2:bf:c7:7e:65:6c:2d:15:22:12:96:3b:1d:58:
ca:f2:7f:94:cb:6d:d8:ab:6a:44:d5:ca:7a:2d:1f:f0:d8:bf:
35:47:05:79:3e:66:ce:c9:c1:d0:76:7c:2e:29:6f:2a:ff:f2:
11:7a:ce:f3:4b:7e:84:19:58:8d:ca:ab:58:04:6a:e1:c8:e9:
b2:ab:59:7c:bd:7e:f5:5b:28:6f:d1:1e:fb:49:15:8d:d5:7d:
d4:ca:d6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:28 2025 by rpki-client