Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: wvK5yKE54TrSNnFT982xPTxjXXZvBktAINhJCXNViAI=
Subject key identifier: 5C:1B:C1:F2:F9:D2:0D:5C:BB:4F:EC:27:25:E9:AB:C6:8F:A1:BF:C4
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 0197B6A198A6EA368F3068B5AA03147482C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 11A9
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: lX1D+OsqEfgHWvYXTdtJsVsFWxqoPD36kUSwyWUryBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:98:a6:ea:36:8f:30:68:b5:aa:03:14:74:82:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=5c1bc1f2f9d20d5cbb4fec2725e9abc68fa1bfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:b7:e5:77:a6:99:cd:a9:32:75:76:1d:16:
d8:43:b3:f6:a5:7b:86:6a:a8:20:44:d6:de:d3:36:
33:b2:9b:67:11:c2:67:51:eb:23:d9:2e:4d:2f:94:
06:4f:69:1c:ff:e9:b5:88:5b:88:2d:00:e4:bc:55:
da:14:e2:c0:c4:e6:02:21:71:59:19:59:55:90:f8:
d3:7f:7a:5e:f2:f2:84:f8:7a:86:71:df:d7:6b:40:
7f:a5:45:ad:78:9e:8f:fe:b6:fc:08:d6:8a:26:bf:
5a:a1:99:68:88:ac:3a:58:0b:02:24:46:d4:51:60:
74:98:11:9c:07:17:05:07:a8:65:de:ba:83:b6:a4:
7b:cc:96:5e:8a:e5:53:5c:49:9c:50:74:63:7a:71:
11:c9:f0:ab:37:48:38:0c:9e:3e:67:ef:c4:5f:7a:
f4:0f:8f:ad:1b:ae:24:5d:ae:7d:1f:7e:b0:19:59:
0a:f8:82:65:33:30:3b:49:58:83:c9:d4:6a:e4:e4:
0e:4b:24:b1:dd:b0:51:25:93:ac:17:a7:74:33:f4:
d0:54:a0:d4:e6:7c:6c:7c:95:e6:ba:84:cb:fa:da:
67:68:f5:eb:b9:94:55:27:5b:dd:60:f0:2b:a9:ac:
1a:15:b3:62:9d:96:e5:12:82:29:fc:e1:a2:8f:f9:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1B:C1:F2:F9:D2:0D:5C:BB:4F:EC:27:25:E9:AB:C6:8F:A1:BF:C4
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:58:94:24:5c:9b:b0:25:2e:f2:04:fe:9e:db:90:6f:2a:
6e:5a:d1:e4:68:7a:d9:48:05:2f:25:99:36:b1:e5:21:c6:b3:
7c:5a:3b:52:a0:1a:9c:3c:b5:60:94:87:f8:b9:89:35:08:cd:
f5:21:61:f9:4e:77:40:67:c8:00:a4:97:04:d5:bc:99:5d:32:
6a:4f:2b:b3:12:e6:10:47:ba:63:77:66:1d:ea:07:23:93:a7:
ad:6a:db:bd:90:23:00:81:7c:59:b5:6d:63:96:15:d4:fc:7c:
2f:a6:1c:c5:c5:b1:81:c8:7a:08:b2:45:36:ce:f8:e7:db:2e:
8e:67:f2:83:76:28:9b:eb:90:0f:18:c5:bb:4c:bb:fa:91:9b:
6c:17:c0:d6:87:85:35:71:22:1e:f1:07:26:80:82:bf:cd:80:
fd:4b:c0:6a:6c:a6:00:ac:81:aa:75:15:fa:7f:c2:7e:d0:bc:
98:77:6c:2a:57:d1:d3:63:cd:8a:b9:d2:c1:fc:44:ff:2f:53:
57:21:53:69:04:71:63:ec:41:fd:d6:4b:2c:64:94:ad:0f:88:
3b:81:4b:90:31:e0:c0:0e:b2:28:85:64:98:d7:f8:0e:a1:6c:
aa:95:3a:67:ff:d5:0a:3a:c8:b8:5f:a5:0b:8a:3f:d9:2c:02:
1b:3f:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:44 2025 by rpki-client