Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: YZ1OfHvphAOvc93V7OmRYlxG49m8RD5D11mDpdELMNM=
Subject key identifier: 1C:58:F7:AF:11:CA:0D:19:22:C0:D1:7F:B5:7A:E8:A6:5E:67:0D:94
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 0198D47256DF34D662BBDF32BF2AA88E2855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 123D
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: urCyKPRuTNIND1/BMwnTUvTT71S0xIgHo3iwWe5vCeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:56:df:34:d6:62:bb:df:32:bf:2a:a8:8e:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=1c58f7af11ca0d1922c0d17fb57ae8a65e670d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:78:1b:71:15:0e:51:3a:f3:28:7f:70:94:
94:7f:8d:80:34:01:98:c1:80:aa:8d:7c:18:cc:4e:
8c:57:c7:1c:56:ce:79:3b:f1:5c:d8:1c:76:0e:f5:
4a:35:16:c1:a8:74:5f:b7:73:85:0d:d7:12:47:bb:
9e:97:97:0d:4e:b7:76:67:66:f2:57:54:3d:1e:4b:
42:1e:3f:96:13:01:c3:18:cb:7a:e8:cb:89:1f:9b:
b9:84:24:01:60:b2:c0:f1:76:02:a0:f1:67:b3:45:
c1:7a:53:83:77:c0:88:49:97:86:55:f3:d2:95:83:
c2:cf:23:39:47:4c:b2:9c:14:8f:f2:08:64:77:ff:
54:fe:d0:22:ca:54:93:ca:e5:66:33:68:eb:b5:66:
b8:17:a0:b9:cd:67:94:b6:fb:d9:37:bc:54:3f:f8:
d3:79:cc:fe:34:d7:72:97:3a:c5:45:76:39:9b:34:
53:83:d4:d8:0e:66:05:9f:10:ee:92:7a:ee:7c:89:
ac:41:a6:5b:ad:5c:a9:5b:42:96:18:36:a6:05:40:
ca:00:7e:80:4a:5e:8c:2d:86:e0:48:5f:7e:a9:ea:
3f:ca:c7:b8:af:fb:45:1f:5c:7d:06:fb:11:17:2c:
93:f8:68:dd:3d:bd:36:63:32:0d:97:01:05:dc:6d:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:58:F7:AF:11:CA:0D:19:22:C0:D1:7F:B5:7A:E8:A6:5E:67:0D:94
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:52:10:4b:70:b6:a7:ab:eb:1c:65:43:6b:8c:87:4c:e2:8f:
d3:80:ab:56:bb:a7:44:ce:33:38:35:77:c9:ae:51:a3:c3:49:
27:b3:40:59:52:21:6b:61:8c:9f:01:7e:61:d4:9d:74:27:9f:
60:c9:2d:81:40:08:6c:11:a8:e9:74:cb:f0:e6:22:8c:13:d0:
05:bd:dc:24:3e:a3:76:01:c7:cc:19:b6:ee:01:7e:a4:ae:0b:
de:8a:bb:44:66:b3:f3:c8:34:de:86:44:54:e3:ef:48:1b:36:
03:0b:99:94:71:45:5b:db:bf:9f:54:4b:bd:4f:95:a1:fd:91:
14:33:8b:62:01:4f:c4:8f:9e:e8:9f:86:bf:ae:89:4a:2d:88:
49:9e:ee:c1:17:7c:75:0a:e2:f1:78:95:1d:a9:c1:24:33:e7:
f7:c5:11:7f:a1:b5:14:c8:c0:f0:d9:fe:b7:b1:79:a3:be:97:
40:38:3b:47:56:5d:47:6f:ee:24:f5:47:b2:a3:fc:71:c2:47:
93:27:a1:3f:5b:1c:b3:12:1e:42:5c:55:02:15:ed:f3:b1:5c:
89:b3:ce:28:ee:19:a2:b8:e9:a7:bf:ce:a8:9a:ca:cc:76:f5:
17:ce:e8:db:5c:14:43:c5:b3:f4:e4:e6:57:bc:48:ae:45:1a:
fb:1a:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:41 2025 by rpki-client