Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: GdjqPyaVI1bIDeBimf1loQJaucNcACDU52OMNVZMBkI=
Subject key identifier: 32:5C:E5:15:59:21:0C:03:AD:CB:58:D0:6F:78:ED:64:C4:23:03:1E
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 0198D7A97F9CA1DB6391D954D57CCA244CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:01:06 +0000
Manifest this update: Sat 23 Aug 2025 16:01:06 +0000
Manifest next update: Sun 24 Aug 2025 16:01:06 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: WjxG4rVxjLajS1m+7XWL1lcpjMUmphAeEI2Q+KFM/MU=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:7f:9c:a1:db:63:91:d9:54:d5:7c:ca:24:4c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Aug 23 16:01:06 2025 GMT
Not After : Aug 24 16:01:06 2025 GMT
Subject: CN=325ce51559210c03adcb58d06f78ed64c423031e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:9f:63:b8:04:45:3a:bb:39:ca:e6:bf:16:
7b:f0:c2:b5:4e:18:2a:4d:b5:45:52:fc:31:2d:29:
06:87:b4:e1:65:f0:93:e6:5d:8b:5c:23:c1:cc:41:
4b:52:e8:d8:60:bb:9c:7c:12:04:17:9b:ad:52:95:
75:55:24:d4:7d:5e:44:f4:56:1e:ef:04:82:c1:47:
75:32:4e:09:8b:3b:8d:72:ce:31:de:b5:bd:9d:d7:
cd:a9:02:fd:d3:22:c4:c6:de:40:70:5c:a2:74:99:
3c:05:74:78:ae:2f:0f:11:53:2f:11:f3:71:e2:01:
2b:35:26:68:17:26:1d:cc:46:45:31:83:34:24:20:
54:87:42:5f:eb:26:13:4d:00:c8:26:0f:60:09:80:
b7:5a:3d:38:fa:af:de:38:a1:eb:c5:a5:c2:30:fb:
c2:3c:9a:db:92:07:e7:1b:a1:d9:a2:17:34:dd:20:
6e:8a:c5:8a:98:08:bb:0b:3f:c2:b5:32:d1:e2:ae:
f9:55:d5:89:54:b9:72:ec:c1:0b:9f:68:27:71:da:
fa:f4:a9:8c:58:95:c0:0e:ba:3c:54:1d:fb:ca:ef:
91:d6:a0:62:cc:cb:f2:38:49:a9:7d:ab:28:70:a6:
1d:3e:2f:f3:79:3d:a5:9a:1b:c5:d7:67:33:90:5b:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:E5:15:59:21:0C:03:AD:CB:58:D0:6F:78:ED:64:C4:23:03:1E
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c5:68:7c:be:b3:b6:9f:14:cc:27:0f:7a:4a:58:3d:f1:26:
46:e9:fb:ba:57:dc:b5:33:04:e3:0b:e1:8b:b9:b8:67:62:20:
ca:e7:5a:d5:ca:65:7f:af:05:64:fe:ca:d7:ce:72:d8:b8:e2:
11:c9:46:85:be:7c:81:b7:f3:89:c7:0b:82:a9:2c:ee:07:e3:
55:bc:23:b9:bc:24:48:5f:5b:16:a6:a4:95:01:f2:11:84:87:
fa:c4:28:13:cc:0e:c5:97:d0:ad:a4:b3:f8:1e:e0:57:f7:32:
55:26:e7:2e:e3:06:2e:af:8a:8c:d6:a5:aa:75:04:34:76:20:
19:e0:1a:bb:c1:15:e6:63:7a:4f:66:7c:c2:0b:ac:a1:15:71:
81:b7:54:dc:ee:ab:99:ba:18:bb:f0:75:eb:cf:c3:80:17:b5:
e6:c3:4f:8f:5d:f9:64:50:e1:5e:8c:8d:b8:1d:ea:dd:83:d1:
39:73:14:44:6b:ed:87:10:f5:57:ba:bd:19:95:9f:cc:be:8f:
a9:ea:cc:4e:1a:1b:b4:57:c7:4a:58:c2:70:d4:ed:4f:03:dd:
7c:29:96:f8:be:aa:87:28:29:13:d3:28:7e:3b:c3:37:65:93:
43:96:70:07:3e:7d:e4:16:af:d7:b8:c9:6f:a1:22:46:c0:52:
20:a4:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:52 2025 by rpki-client