Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: vwhZlCKS2tYICA0VqBMizjPZkg0iyLI4lTPfruY1a2A=
Subject key identifier: F5:24:E6:D9:61:5A:67:FA:41:94:0D:C1:46:AF:F6:8A:DB:D9:E0:59
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 0197B6A1966528DCC63DFBACCDF9B18B2B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:12 +0000
Manifest this update: Sat 28 Jun 2025 13:02:12 +0000
Manifest next update: Sun 29 Jun 2025 13:02:12 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: ZGDVM7C+nswYDnkWzyePhbGhsfXHdKzOzYn40qc2bOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:96:65:28:dc:c6:3d:fb:ac:cd:f9:b1:8b:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jun 28 13:02:12 2025 GMT
Not After : Jun 29 13:02:12 2025 GMT
Subject: CN=f524e6d9615a67fa41940dc146aff68adbd9e059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:5a:62:42:05:cc:fd:c0:6c:ea:3d:cd:e1:
ce:78:85:5e:0c:f3:48:d3:61:50:8a:fe:03:1e:34:
8e:15:66:2e:3b:c0:16:d3:d1:fc:5a:a7:cd:83:71:
ae:c0:ba:99:48:c3:4a:f0:84:66:fc:63:bc:80:8e:
80:f3:da:2d:1d:7b:1c:97:1b:66:17:9c:7f:da:50:
2d:3d:af:94:93:14:b6:f4:29:08:69:f3:b4:1e:bd:
9d:91:f3:98:9d:67:36:75:25:4d:1b:c5:d5:2a:bd:
c9:7f:f4:3d:44:e1:ca:03:10:69:9c:e7:bb:f6:94:
7d:79:55:7e:fa:9c:ff:22:9c:46:3f:a6:ee:7e:c8:
3a:49:b2:fe:09:f2:7d:4c:c0:a7:c7:f1:79:ef:5a:
46:e6:83:34:43:8b:95:52:3a:ce:da:e2:3b:e2:a0:
00:d6:d4:f6:f4:a9:cb:09:96:b6:1f:cb:db:ac:d8:
ed:aa:64:4f:7d:54:0f:bc:45:89:06:f5:58:dd:a3:
d2:04:a9:fe:8c:a6:f1:87:97:1c:94:e3:0d:e6:ca:
be:69:b8:73:03:e4:91:66:3e:3f:4a:19:f2:72:58:
46:d4:a0:33:81:67:1f:3c:37:b0:e4:b5:59:0d:d4:
4d:b6:b6:17:c8:60:c1:b6:b0:66:3b:33:0f:77:93:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:E6:D9:61:5A:67:FA:41:94:0D:C1:46:AF:F6:8A:DB:D9:E0:59
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:b6:32:13:89:8a:a5:49:2b:8b:c8:44:92:c6:7d:79:c1:
fb:7b:eb:f4:a4:65:cb:82:8c:83:9a:3b:be:70:cb:72:4c:57:
ee:09:19:4e:37:0b:14:d0:44:51:24:2c:7a:a9:96:19:7e:63:
dc:51:78:3b:5b:99:19:ad:9b:43:dd:3a:45:92:aa:37:db:76:
a4:23:d8:86:ad:e4:70:4f:6f:5d:dd:d0:12:e7:0c:e9:b6:c7:
d2:c4:ee:24:92:87:ee:70:e8:c5:2e:fe:2f:32:25:e6:7b:b9:
e1:e4:de:de:2e:3a:59:a1:c7:10:3f:4d:2d:9e:eb:4e:ad:90:
9a:0b:30:e9:b8:6e:b3:6c:63:c1:d1:3a:34:f0:b9:a0:5f:26:
cd:a8:32:24:a1:ba:7c:ee:6c:20:0c:00:b9:55:9f:a2:3d:18:
c4:f2:68:3d:23:7d:df:aa:60:d8:25:69:9b:2c:3a:91:dd:77:
21:85:ba:52:e9:69:93:b0:40:d9:19:fe:54:7b:f0:2c:c8:17:
7e:7e:9f:02:fb:d8:1f:86:ab:b5:cb:4b:69:4e:87:f7:e4:48:
9d:cb:ab:14:4c:02:c6:e0:6a:10:96:40:ef:3b:db:24:51:7e:
9f:d8:43:da:72:98:cf:e8:e4:b4:71:df:92:9c:0f:7b:30:8d:
ce:43:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:08 2025 by rpki-client