Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: PkcZw1xp2OKdU0cj+R19XC46thTLMQGaJfzFfPGUTRc=
Subject key identifier: DE:77:C9:83:13:91:7A:AB:45:F2:6F:E3:1B:21:BC:E6:38:48:D1:E9
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 0198D6CDA54F6532B9276B5BDCCE0FDB365F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0A96
Signing time: Sat 23 Aug 2025 12:00:57 +0000
Manifest this update: Sat 23 Aug 2025 12:00:57 +0000
Manifest next update: Sun 24 Aug 2025 12:00:57 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: tGTEjThvETtBKC1iTrmO0CqfoTh2jrxy+1/CS+7Kclo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a5:4f:65:32:b9:27:6b:5b:dc:ce:0f:db:36:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Aug 23 12:00:57 2025 GMT
Not After : Aug 24 12:00:57 2025 GMT
Subject: CN=de77c98313917aab45f26fe31b21bce63848d1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:bd:92:6c:20:79:8b:71:6b:a6:0a:a9:ef:
63:7c:5d:3a:fc:ca:5e:d4:cb:67:cd:58:51:6a:4b:
d8:45:fe:77:ae:bb:b7:6b:25:2f:14:19:82:f9:89:
80:b8:85:31:fa:cf:fa:2b:1e:b4:29:ab:20:12:64:
f6:56:69:3f:bc:a1:b5:45:7c:2c:52:9d:32:a7:27:
ea:b9:32:f3:3a:6a:00:cd:4b:31:bd:9c:f9:30:b2:
31:81:51:68:1c:1e:e8:e5:f3:1b:20:39:4f:1f:f8:
b0:33:56:aa:aa:5e:50:a3:b5:12:94:28:7c:13:9d:
93:a5:c3:5f:74:72:c5:f4:31:f7:37:8a:5f:50:72:
a3:02:77:41:df:f8:c2:71:7f:71:c4:6b:28:12:52:
7d:d4:7e:32:3b:1f:ba:20:a7:bf:6a:3c:fc:7a:bf:
cb:2c:68:6d:d5:87:5f:6c:45:51:33:65:97:08:cb:
77:69:df:35:77:82:4c:84:47:f8:53:b0:2f:74:8c:
5a:d2:ba:e6:4d:30:5b:99:34:0d:28:ce:3d:9f:af:
e2:10:f0:d7:c9:a7:5c:ef:86:73:14:61:fe:77:68:
5d:f1:4a:88:27:1d:2a:0b:c6:29:04:d5:62:b3:29:
d8:95:d5:fc:aa:34:61:e7:38:a2:11:03:51:17:bd:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:C9:83:13:91:7A:AB:45:F2:6F:E3:1B:21:BC:E6:38:48:D1:E9
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:71:ef:92:3e:14:8e:ec:fa:cf:22:bc:f3:14:c7:cf:50:
5d:38:6e:54:15:5f:e7:9b:74:65:b9:25:04:ae:96:02:78:2c:
de:ad:c5:b9:1d:a0:f8:71:75:a1:e4:62:38:a6:c2:63:9d:a9:
98:59:98:4d:3c:54:40:33:43:f8:40:ed:20:4e:58:fe:cb:d0:
11:b2:15:01:c5:c6:b1:9c:86:94:9f:be:ae:41:53:90:23:b0:
47:a7:49:06:ea:bc:40:e9:0a:f9:f8:77:c3:bc:0d:6e:8f:cf:
55:64:24:9b:30:50:89:ae:79:0b:8a:44:f1:40:f1:74:62:e1:
fc:ea:71:78:33:b6:47:b7:3a:99:9d:aa:1c:4c:b6:1e:9b:86:
1f:eb:23:30:ae:70:9f:1f:fa:51:1d:ec:8c:91:01:ff:15:e0:
0f:fc:06:1e:95:8a:1f:9d:01:90:14:04:7d:f9:61:f5:78:0b:
dd:f0:cd:cb:50:60:21:b1:88:5c:c4:b0:72:8e:03:d9:19:d4:
f0:3c:51:51:16:87:08:70:39:b3:b4:86:b4:c7:89:b1:ee:d6:
b0:f3:11:97:53:ff:d2:91:8a:e1:e4:bb:03:c3:f0:73:8b:f5:
e4:65:c0:cf:7d:89:7a:f2:ea:9c:93:c8:20:d5:fc:dd:05:85:
d6:0e:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:31 2025 by rpki-client