Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: Wt0aN1YXhu96SDFlwFd0P3lEP+WrrNqti2i5OeyNqWc=
Subject key identifier: 03:4A:FC:B5:89:BA:41:3B:D6:34:04:0F:EC:56:9B:29:6E:A7:D2:56
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 0198D6601AE6283F925DBD749CDA6FA6A2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: pIn4N2P9uV9tkTnZH/RVwdVMDY+GJl8TZ6UGJer5dGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1a:e6:28:3f:92:5d:bd:74:9c:da:6f:a6:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=034afcb589ba413bd634040fec569b296ea7d256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:f4:a0:f9:7f:dd:76:25:c5:7c:7b:17:c6:
07:79:bf:4c:23:d6:50:94:ac:61:b1:8c:a1:30:fa:
a9:18:ad:c8:b7:e1:65:8c:ea:9d:ee:d4:52:f1:f6:
d6:db:45:7f:08:59:ad:f0:f1:60:1f:88:8d:df:7e:
a1:4e:91:bd:a2:66:46:2b:50:cf:28:63:20:15:17:
e7:81:fa:2c:73:9a:9e:49:0b:ce:bc:8f:db:f6:d2:
5f:bb:d2:3b:cd:37:03:45:b2:24:ae:bf:28:d3:17:
e3:ff:bc:94:88:f8:85:bf:36:bb:13:ce:9e:ed:7f:
7f:55:e2:8c:b4:8e:6b:85:24:a6:19:99:71:51:0a:
74:1d:be:40:49:93:15:1c:8c:d9:bb:f2:14:50:22:
90:a5:ef:ad:ba:d1:91:cb:23:cb:24:ab:da:87:9c:
11:43:18:42:22:32:74:bf:6a:c2:d0:d4:7f:8f:3e:
93:59:61:60:13:b5:ee:71:80:96:4a:29:e0:a9:5c:
32:c4:4e:b1:19:d3:ee:78:f8:f1:d8:72:3d:ef:66:
db:84:06:59:74:08:9b:bb:f0:13:9c:a1:73:33:58:
9f:50:3f:f8:b8:e8:c4:72:38:c4:af:97:49:bc:d1:
50:66:d3:58:85:02:e4:d8:a5:a5:ba:dd:06:70:5f:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:FC:B5:89:BA:41:3B:D6:34:04:0F:EC:56:9B:29:6E:A7:D2:56
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:09:b2:93:ae:7b:90:1d:68:e5:c2:15:a8:fd:05:ad:a1:ea:
69:b2:99:ca:68:96:be:1a:c4:f0:85:69:26:40:5d:18:4a:d0:
54:15:df:cd:6d:a7:94:60:8c:79:d8:e5:ad:8e:38:da:1e:d5:
7b:06:70:40:e2:4c:6c:b5:b9:4a:26:a3:f9:1a:8a:e2:fa:a2:
82:74:71:48:b0:d0:be:4d:e3:ec:72:2c:3e:b8:f9:3b:01:44:
6d:85:60:b0:aa:e5:36:6f:2c:d7:dd:1c:ee:47:7c:f5:a0:78:
aa:a6:1b:de:71:41:7c:0a:95:85:21:12:ff:3d:d8:c9:76:80:
a0:5d:db:b7:a5:a3:c2:d9:ba:1f:b1:2e:a2:e3:26:db:a0:c6:
5d:c3:fb:17:7b:88:5c:1d:11:e9:2b:c1:5a:de:5a:b8:e3:18:
6a:37:1d:63:4e:8b:f0:58:29:5c:ba:d2:26:4c:6a:d1:d0:fd:
a9:72:c2:39:ad:16:5e:54:e1:2a:e6:86:1a:3c:e0:a3:d9:1d:
e1:04:41:f5:9b:9b:12:cf:c3:e8:7a:9a:eb:f0:8a:06:51:62:
1a:1d:60:62:e2:ba:75:02:ad:5f:b7:58:c4:95:f7:81:29:16:
2a:85:5b:01:d8:fd:d3:13:23:db:1e:bd:cc:62:56:39:a4:ad:
7d:cf:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:02 2025 by rpki-client