Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: yS13DRlXH29j4fnmnITVr6djrlnVysSr+87g+2FZ7SQ=
Subject key identifier: BE:0D:A2:29:2B:ED:13:6D:41:2C:29:76:F1:4C:BB:B1:EE:85:03:D1
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 0197B7EAC887208FBA18F6E4BCDB9C5396AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: 9mO+FEcnVKgUbk/1/v91JahDB119+pFlIfeNRe/Ocv4=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c8:87:20:8f:ba:18:f6:e4:bc:db:9c:53:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=be0da2292bed136d412c2976f14cbbb1ee8503d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:c6:85:1e:49:1d:25:25:4e:8a:c8:68:a8:
1d:01:38:c8:8d:8f:fb:ab:f9:6e:af:14:8d:36:7d:
c0:8e:0f:47:27:36:a8:70:c2:c5:3f:0c:f1:17:b2:
35:17:86:3a:7f:2d:45:4a:b7:51:ed:c3:31:f2:56:
63:62:04:9b:eb:fb:3e:f6:40:68:66:61:2f:e3:71:
dc:d4:c2:7b:5c:c8:73:b4:81:98:2d:9f:06:ba:cb:
76:87:b4:34:68:13:44:cf:97:5f:a2:22:4e:a7:2c:
78:3b:40:cb:5f:cb:51:9d:ac:03:03:31:da:47:7b:
1b:ff:6f:74:a9:44:cf:0d:66:f3:b9:0e:33:8b:6f:
7d:3d:f3:92:4d:cb:c9:75:6b:d0:07:bb:27:19:2d:
a8:72:0d:74:a4:3f:0d:37:02:5b:3b:e7:56:4b:f2:
8e:5b:9c:fa:39:14:51:c9:74:a1:65:00:c6:b6:72:
66:be:de:95:ce:f4:62:b9:4b:b8:22:5d:fe:10:d5:
6c:5d:1a:97:36:e1:a5:f0:8c:ea:82:24:67:bf:79:
62:80:56:ac:18:50:76:50:c6:b9:a2:2a:4a:03:38:
72:82:a9:70:c1:dc:93:82:14:03:40:32:d6:7c:21:
4a:1d:02:f3:42:98:5c:e2:dc:28:f8:0c:34:e0:c9:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0D:A2:29:2B:ED:13:6D:41:2C:29:76:F1:4C:BB:B1:EE:85:03:D1
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:30:15:4b:7c:69:32:83:29:b6:d1:08:93:6e:c1:dc:e7:ae:
af:a6:ec:08:46:14:88:7a:42:ad:27:33:d8:69:8e:86:e9:dc:
3f:cb:8e:28:77:c9:39:26:39:53:c7:a7:5a:be:59:a0:9a:30:
e1:87:1d:44:ce:d1:b1:b4:ae:b7:eb:94:f1:59:38:46:2e:06:
bb:f0:93:7a:f6:9d:54:93:b6:cb:1e:59:35:d7:8a:aa:e6:db:
33:b0:40:87:32:c8:38:36:6c:88:63:b7:01:fe:cc:29:e0:77:
45:6e:76:63:80:e4:02:f5:53:ad:29:ae:cb:1c:fc:b8:09:fb:
5b:1a:08:2d:2d:e4:54:11:b2:64:dd:7e:24:11:f5:ac:b8:14:
5e:82:0f:4b:2a:bf:0f:da:73:36:7d:f5:42:c1:17:84:24:39:
39:6b:84:f3:0a:f5:3f:b7:a6:a4:a6:8f:a4:e6:87:09:f7:04:
00:22:17:7c:ab:86:0d:9c:e8:bf:84:eb:96:ea:0e:9b:ce:bd:
a5:f8:e8:d3:81:e2:a9:7c:7c:4a:7a:19:ee:9f:21:bb:c3:d0:
b7:77:92:05:94:ba:0b:2c:d8:8e:e1:ba:e6:92:29:24:e6:35:
21:4e:49:6c:51:94:cf:c8:1b:c6:29:4c:63:3a:b8:b9:93:35:
90:a0:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:10 2025 by rpki-client