Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File: odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier: JIiHb4LWnpJl5scvn6C/5sX2iD4+UPSQddn98O8rsQU=
Subject key identifier: A0:8F:5B:A5:FD:2C:51:AD:CD:DF:B0:23:25:45:93:D7:8F:D6:A1:F2
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0198D54DE6DFD86408D2E4A213F5B0FCD308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: j49xA6/N08o/d4Ljea6Vhc/0Iwl4JBXFaOi3pwTsOV4=)
5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e6:df:d8:64:08:d2:e4:a2:13:f5:b0:fc:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=a08f5ba5fd2c51adcddfb023254593d78fd6a1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:28:7c:ef:89:e9:b3:57:09:f6:06:3e:b3:
0c:2e:c4:fa:0a:93:78:07:9d:d4:c3:c5:05:fc:64:
eb:0d:46:02:f1:e0:c5:63:e6:2d:b7:94:0e:df:b8:
77:d5:4d:32:66:bd:a2:d4:12:36:93:87:99:70:15:
3a:75:36:a3:ca:88:09:ac:d0:64:97:4e:da:47:7d:
71:c8:83:15:fc:af:f9:ce:5a:2c:e1:89:f1:5b:c4:
23:1e:5a:37:7d:ec:db:66:d7:f4:f4:98:57:3a:bf:
7c:b6:9d:ac:5b:97:ff:c6:23:c2:7a:6a:be:9e:80:
74:2a:16:d6:34:42:31:ac:46:64:04:4f:ea:84:7f:
61:57:80:8d:15:eb:9b:28:1e:43:e2:f0:93:b3:76:
bd:af:e0:c9:a2:fe:b7:8f:8b:7a:f5:c7:34:0c:76:
6f:80:68:5c:c4:27:8d:0e:06:96:0f:3f:22:0b:5a:
3d:7f:07:cd:28:41:85:37:d2:dc:29:a9:9e:5a:0b:
b8:c1:2d:1d:c6:1f:89:e2:7a:2b:7b:16:82:3f:62:
16:2c:d2:d5:2b:c9:c8:ef:f1:49:9d:7b:0e:b5:03:
14:75:cc:66:d2:53:7f:1f:7a:a7:a4:3a:ef:29:23:
6d:79:e4:56:26:2d:6e:2b:15:66:79:48:cc:80:a7:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8F:5B:A5:FD:2C:51:AD:CD:DF:B0:23:25:45:93:D7:8F:D6:A1:F2
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:7d:15:a5:05:f4:d7:ef:d6:74:35:db:5b:93:86:ad:6c:
34:07:b0:aa:55:db:12:c1:0e:80:b6:1f:6a:b6:a6:54:3f:1e:
2c:f0:a8:73:7c:b8:1c:91:34:50:63:3b:ba:e0:09:57:7e:dc:
af:a5:1b:9a:9b:da:5d:56:ca:6c:c5:68:35:b8:a1:60:86:4f:
16:cd:9d:68:61:d2:af:76:42:11:9a:49:43:82:fc:db:3a:08:
fb:ce:9c:95:04:d4:ea:36:de:d3:e1:a6:29:30:20:87:d9:3a:
32:a7:8e:f4:96:24:ac:42:04:ae:e5:83:6b:16:e2:ca:58:ab:
18:55:57:96:c4:ae:82:b9:46:e9:0e:80:c2:f1:a6:e2:c7:7b:
f6:4d:12:7f:9a:77:a7:42:74:63:c6:ec:8a:7e:58:f6:9f:11:
fb:1d:4c:4e:13:d7:14:d0:9c:60:76:9d:83:8a:56:3d:50:51:
0c:67:e0:d7:f7:3a:fd:f4:43:c5:b2:f1:41:c3:74:65:85:22:
26:32:a0:34:26:8e:26:a6:38:45:ed:34:a4:d5:6f:aa:05:6e:
45:15:1f:8e:71:d6:6e:e8:01:af:5f:5c:5d:32:78:4b:23:13:
15:99:9c:a7:22:8a:8a:f9:5a:03:6b:57:02:1d:eb:01:dd:6e:
33:ea:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:54 2025 by rpki-client