Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: 2cAzUwOTnQgieCyT9yZj5CYtOU4JAqMPwfKG1GQzQg0=
Subject key identifier: 28:F9:06:9B:71:CC:E4:F9:BE:91:BB:37:94:63:44:6C:F1:0E:0E:9A
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 0197B7EAB9633948FE370817A993E640D8F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 0DAC
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: aMvRIE0JUtlyslnH7mRSCnyXJrlICQDupk5wbeqhCSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b9:63:39:48:fe:37:08:17:a9:93:e6:40:d8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=28f9069b71cce4f9be91bb379463446cf10e0e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:17:aa:fc:b2:6a:5b:1c:be:2e:ce:37:0b:
e6:a9:0e:d0:85:db:64:71:47:57:99:6e:8f:53:9d:
5f:0b:d3:fb:af:e3:41:46:28:b9:22:2a:c7:77:5d:
46:85:7b:e2:73:5a:1e:87:47:70:94:d3:02:e5:eb:
6b:91:db:19:26:29:45:86:89:40:66:1b:3b:fa:f9:
10:b2:8e:08:ee:2a:63:78:d2:ac:f9:cf:2a:b7:59:
33:90:cf:5f:d5:d8:2b:ac:17:64:83:ff:d3:28:53:
bb:13:fe:21:d5:79:97:4d:f3:30:bf:0e:b0:e5:d5:
dd:92:d8:5a:92:33:3d:0d:35:27:c3:e2:57:96:5d:
7d:88:ea:c1:cb:a2:0d:67:ac:26:99:92:30:50:b6:
5c:9d:84:4e:72:b2:b7:7c:f1:8a:c1:09:35:93:db:
34:d3:95:f9:d1:26:be:74:c7:d8:75:c4:71:f1:5a:
53:35:b8:3c:7f:c8:af:e3:da:63:d0:bf:ec:10:e9:
91:fb:95:fc:e5:dc:25:d8:f5:84:29:b2:c3:55:44:
4a:34:c6:a2:73:79:b0:7a:ad:e5:94:0e:99:15:eb:
f7:2c:01:dd:66:e5:26:94:6d:4f:34:6e:14:be:90:
5f:94:e8:11:16:52:c3:1b:42:6a:6b:31:8d:f2:74:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:06:9B:71:CC:E4:F9:BE:91:BB:37:94:63:44:6C:F1:0E:0E:9A
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f6:35:50:73:b3:24:d9:2e:8a:3d:aa:74:c4:03:6c:9b:cf:
18:97:a2:1b:1c:d6:7b:94:85:67:c4:ed:a5:37:d5:ef:a5:59:
45:05:6c:dc:4d:e6:92:d0:ac:c8:28:bd:a7:0c:9d:a7:a7:65:
5d:ce:92:6a:9b:be:50:9f:db:d1:11:dc:67:49:e4:46:ef:6d:
2a:a7:63:9a:7b:a5:f9:e0:28:bd:14:05:dd:24:9b:b5:f5:1a:
d1:8e:94:08:b1:5e:2e:2d:fa:8d:4e:ba:c5:e5:c6:d9:62:e8:
3c:3e:b4:47:42:b8:33:99:bd:1f:8a:6b:7c:e8:da:7b:1b:c9:
df:6b:d3:2f:b9:96:5c:6a:f1:9e:1e:28:d0:7a:f7:39:5c:79:
38:6f:c3:cc:c9:23:12:ac:ee:31:17:07:e2:3d:ca:aa:0b:e5:
90:b3:99:cc:00:f2:6d:a3:64:18:3a:13:3a:a4:14:87:e7:a5:
da:0f:e1:f9:22:ac:87:c4:9a:f6:33:cf:f3:54:a4:c6:3d:38:
49:ea:37:8d:5c:e2:95:87:1d:92:d2:ee:5f:94:3d:26:d6:94:
bd:09:5e:18:6b:71:75:e4:85:e2:d7:bf:8b:04:11:2c:ab:cb:
27:c6:66:a1:44:ec:df:c6:fa:56:e4:37:a1:3d:56:67:6b:67:
c7:53:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:19 2025 by rpki-client