Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: 63FUt3ykfImSk1r9iy3DPav5nMu/GrguUMg0VPhAyMQ=
Subject key identifier: E6:B3:80:1B:5C:A3:AA:2D:A4:6D:8E:B1:23:5D:C9:8D:5C:4B:94:BA
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 0197C2A556DFD1FE523BC3267DD80221E277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0A07
Signing time: Mon 30 Jun 2025 21:01:44 +0000
Manifest this update: Mon 30 Jun 2025 21:01:44 +0000
Manifest next update: Tue 01 Jul 2025 21:01:44 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: d06vMjVxn01dsoPDNhXU48X+GeEd5v7KmSFWBA08plE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a5:56:df:d1:fe:52:3b:c3:26:7d:d8:02:21:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jun 30 21:01:44 2025 GMT
Not After : Jul 1 21:01:44 2025 GMT
Subject: CN=e6b3801b5ca3aa2da46d8eb1235dc98d5c4b94ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:57:02:88:7c:ae:e7:1b:a6:68:c4:72:e3:
ae:31:fa:d0:4a:5d:a4:58:ea:a4:37:96:e0:63:29:
1b:66:61:9f:a9:c1:6d:bd:02:9e:4a:6c:cf:97:a8:
81:41:c8:53:09:fc:b0:ca:bf:86:47:26:3f:49:68:
51:f6:2a:83:90:0e:46:a0:06:ba:df:25:09:6e:47:
f0:6c:9c:e2:b7:b0:20:22:2f:f3:9f:aa:7f:e9:6c:
d1:be:39:98:1f:dc:45:45:c6:d7:6b:b3:0e:fd:be:
b6:f0:0b:20:63:2e:e9:da:c2:8f:06:19:41:c7:53:
a2:df:11:70:a3:61:b4:43:6a:82:86:d3:52:49:6b:
ff:99:ae:bb:db:30:8b:df:5f:6e:71:b7:16:37:f7:
72:97:38:33:b9:72:ae:ca:f0:5f:33:18:d0:83:6a:
8e:62:16:09:28:6d:63:26:24:36:fe:8d:3a:f8:e9:
e9:8d:6f:6a:09:46:b1:71:49:43:75:71:c3:71:9e:
25:95:bc:f5:5b:20:7a:bf:ff:0a:56:de:f6:e1:60:
2d:bd:e6:60:16:ad:4f:7a:ee:53:f2:b1:4d:44:d4:
d0:ea:46:b1:d7:05:3e:1f:6c:79:b2:9d:b7:5b:04:
9f:43:5c:b4:b0:72:82:49:89:e6:43:dd:f5:98:dd:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:80:1B:5C:A3:AA:2D:A4:6D:8E:B1:23:5D:C9:8D:5C:4B:94:BA
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:af:1e:25:6b:38:ee:c9:6a:22:4e:23:f4:ac:70:17:68:
55:46:12:5f:1f:77:5d:92:4d:47:91:96:2f:9b:02:53:6f:42:
32:56:74:8e:54:f7:e3:cf:08:e5:f3:b4:a5:f0:3d:fd:6d:4f:
b4:6d:0b:d6:3d:92:8e:50:8f:fe:98:80:1a:2b:55:21:b8:91:
36:6d:db:b3:9c:01:c5:83:81:35:76:3a:ad:30:1f:a2:a0:b3:
bb:30:c2:ff:68:fa:f6:f2:05:e5:25:fd:6a:11:dd:cb:76:fe:
8d:6b:66:6d:b5:da:10:65:71:57:c3:b9:7e:5f:12:0f:63:27:
c3:b7:1a:b9:bc:7a:e2:18:20:0c:d0:2a:1e:34:ad:b6:ac:f6:
e4:97:de:2d:bb:64:ce:fd:5e:4f:bf:42:99:83:67:3c:df:fa:
df:b9:da:cf:3e:40:26:a6:ae:96:d9:d9:af:19:87:65:61:00:
58:19:be:24:44:15:94:95:98:95:11:76:1f:52:fd:54:64:93:
8a:40:56:21:01:14:bb:9c:4c:81:f8:89:c9:6c:f2:40:fa:73:
b0:1e:2a:ae:94:72:d2:90:ee:6d:fe:bf:ac:f9:f8:6c:91:7d:
4b:54:6c:2d:be:08:4b:93:be:db:08:c1:be:0c:64:cb:2b:7c:
5b:66:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:09:39 2025 by rpki-client