Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: Ey6gmoL9ADmV5fvYY1SVY0hM5odNxgzzAWhTVrnSHSY=
Subject key identifier: 8C:BD:59:38:AB:6A:28:4B:A3:92:34:87:5C:66:EA:FB:FF:8B:46:CA
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 0198D5F19143E46945DBADAFD8A1D6350A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0BBB
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: pMGPweZkdsMBnMEqOVE1xcTiFY1DDuRuAOGaiBKXfuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:91:43:e4:69:45:db:ad:af:d8:a1:d6:35:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=8cbd5938ab6a284ba39234875c66eafbff8b46ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:12:6b:bf:84:68:c6:91:cd:1f:ca:c4:cf:
73:cd:c6:2f:96:94:0a:b1:de:95:d2:27:f6:fe:a7:
3d:97:78:4a:34:8d:be:59:5a:69:4f:09:03:f6:8d:
03:8a:77:b9:0f:c2:fb:8b:f1:67:9a:ba:1d:a6:37:
a8:89:8c:3c:f5:6e:02:ea:f8:c8:89:75:c4:8e:29:
ad:e0:ab:42:c1:a4:f9:53:ff:d3:b6:1a:72:b2:ed:
61:b2:e5:c9:ae:e9:38:99:91:59:25:42:56:0f:bd:
5c:1a:df:c6:2c:59:31:51:f3:f8:54:3b:8b:bd:34:
7d:d4:71:21:98:53:ba:7f:39:e7:6b:2e:34:bc:0a:
6a:b4:2c:ca:e6:1b:4a:fc:da:05:c4:de:ea:43:ed:
5b:b8:96:69:1c:e3:aa:64:d8:a0:2b:eb:ed:d3:c5:
77:14:27:02:2d:16:fa:c7:f4:c4:8c:76:ab:dc:74:
d0:d3:fc:1e:38:35:d8:48:43:25:ae:6b:8d:41:96:
d6:94:5a:7a:1d:7e:dc:56:e5:76:9f:6b:9b:97:99:
95:8b:97:90:cf:23:db:51:e1:57:a4:41:96:06:63:
78:60:bb:e2:09:48:0b:1f:02:a0:1f:21:15:0a:ee:
c8:70:a1:9d:40:3b:76:84:68:1c:8a:ae:d5:3f:01:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:59:38:AB:6A:28:4B:A3:92:34:87:5C:66:EA:FB:FF:8B:46:CA
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:39:e5:14:ba:f3:4e:35:28:91:3f:e9:d1:58:a9:62:71:b9:
83:55:26:86:4f:84:1f:8a:71:2c:cc:c1:1c:1e:dd:18:f0:ab:
7b:84:5c:85:e7:05:bd:d0:01:b1:10:b0:8a:4a:4c:9c:49:14:
f8:54:0f:a3:67:8d:d7:f2:5b:9a:da:4b:03:9f:5f:c4:ab:05:
c1:80:d8:16:c7:34:7d:76:f3:8d:5a:d9:68:fd:73:b1:df:ca:
b0:66:69:9e:18:92:3b:48:90:7a:21:ff:f4:2e:c0:d9:bc:40:
f3:be:fc:37:86:e3:d6:26:bd:14:45:5f:b5:06:4e:00:a8:a7:
cf:42:5c:1d:d2:10:93:21:27:2d:63:71:8b:ec:de:0f:7f:68:
53:28:2f:0a:03:e3:f5:cf:6b:d1:02:32:b0:7b:c3:e5:c8:eb:
f2:4c:e0:d1:f2:e6:38:1d:0d:94:7a:ff:c3:2b:2a:fa:e1:97:
fe:9e:7c:f0:99:9e:52:71:a2:7f:47:92:d9:cc:c3:75:86:dc:
bb:bc:0d:ad:5f:c3:ee:46:ef:82:c2:23:ea:c8:12:2e:6e:71:
b4:62:c6:6b:79:14:6d:a8:cf:25:f7:b9:b6:cd:bc:8d:6f:5b:
3b:cf:5b:66:63:af:97:3b:f5:2f:ba:94:1d:31:d0:45:a3:86:
94:f8:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:46 2025 by rpki-client