Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: 24eK6iNLtIjlVxBbxJtlwpVUx6ILT+ITGImIwQbJ6mA=
Subject key identifier: A3:92:1A:7E:B9:19:CA:44:0C:10:8A:7A:81:98:B5:E2:51:FA:75:8D
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 0198D5BC002C3A97C19D32F49A5ED3CD930F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 0E40
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: UUyrmLyXaPgvggucLxHjrBtDB1vBl9uO79I0KqkJDpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:00:2c:3a:97:c1:9d:32:f4:9a:5e:d3:cd:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=a3921a7eb919ca440c108a7a8198b5e251fa758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9c:50:3f:bf:c9:ee:35:02:5f:43:db:4d:f4:
49:cb:fb:97:9d:9f:6c:be:9e:10:f5:57:29:29:b9:
24:da:00:5a:74:1c:b7:9e:78:d0:c7:ca:13:2a:72:
79:df:01:4f:cd:01:57:d0:8a:29:f2:e9:f7:97:f2:
e3:f2:ce:ae:ab:84:63:75:d2:aa:c0:3a:90:55:24:
5f:f9:77:99:d3:b3:6b:3d:60:ec:72:eb:cd:d5:07:
4f:86:2e:96:7c:14:11:a2:9a:47:49:c8:1b:d5:59:
19:d2:e9:59:ee:da:d1:71:5b:f6:c7:e5:21:88:c6:
97:54:6c:e5:a9:b1:5c:0c:e2:b2:f4:cb:0e:4e:8a:
7b:c7:74:56:10:27:2a:a3:93:4d:97:0d:26:c8:dc:
37:83:26:fd:e4:47:01:9e:38:3d:c0:bc:79:3c:03:
71:b8:f8:ad:ea:97:ea:d9:26:55:b2:4f:6d:d3:78:
57:f1:67:a4:4b:ca:fc:1c:a5:3c:67:2c:77:14:b4:
6c:7c:52:b3:d3:b8:fa:82:87:14:35:39:33:12:b4:
a8:e4:80:33:63:bc:a3:11:82:13:5c:64:39:e0:4a:
6f:13:46:46:ac:81:1c:76:bd:ae:b2:16:9b:1e:23:
85:13:ab:16:6f:12:05:57:29:cb:55:bc:17:f1:dd:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:1A:7E:B9:19:CA:44:0C:10:8A:7A:81:98:B5:E2:51:FA:75:8D
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ef:55:79:a1:30:44:75:b5:27:82:ec:1f:ab:f5:8d:22:ab:
8f:9c:71:6f:70:62:e0:e2:a3:12:57:e7:77:eb:87:28:6e:4f:
b6:51:fd:a0:f4:58:f6:22:a2:ab:d3:85:4d:2e:e1:a6:cc:7f:
a4:f6:bd:40:cd:93:b3:38:a1:36:29:32:39:21:96:5e:7e:60:
1b:96:79:78:cc:39:08:3d:3e:51:dd:ad:44:b7:7d:45:45:fa:
12:52:c0:02:2a:fc:33:7f:3a:0c:a0:53:8d:27:fa:3f:a6:0a:
47:0f:5e:8e:28:b8:2a:0e:90:8e:46:d9:77:31:be:c9:d9:68:
9f:a4:3a:fc:44:49:40:f5:cb:bf:70:a5:6e:a0:9d:40:ab:f7:
8c:68:7a:ac:69:93:77:99:c1:e0:47:46:e1:52:03:9f:56:5b:
24:b5:cc:d9:b9:27:e8:af:d7:54:ff:4f:4e:bc:8e:fc:d9:1d:
f1:8e:e8:c0:a6:39:8e:18:b8:0f:19:2e:a9:e0:6c:44:14:45:
98:1e:6b:36:8f:69:42:6e:1e:8f:2d:51:de:d9:ee:d4:71:2d:
91:62:76:af:b9:3b:1e:c7:e7:10:2c:2f:37:80:a9:7d:b7:2f:
b4:2d:83:15:38:98:ca:2d:5e:23:9f:5d:45:bf:90:60:ad:1a:
20:39:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:35 2025 by rpki-client