Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File: odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier: j1QboUuQtuencgmKGjGO1iyRkdhphRQIRzkPunIG99Q=
Subject key identifier: 44:0A:D7:B9:8E:A7:AE:61:2C:69:AC:73:3A:C5:2B:57:43:72:A0:E5
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 0197B7B3767E6D47C0012AB5ABE8E4A66E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:21 +0000
Manifest this update: Sat 28 Jun 2025 18:01:21 +0000
Manifest next update: Sun 29 Jun 2025 18:01:21 +0000
Files and hashes: 1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: OUTbmNLv0YID7pqF3+8/qiXXHUuQWAjTgR7hOcmrEEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:76:7e:6d:47:c0:01:2a:b5:ab:e8:e4:a6:6e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Jun 28 18:01:21 2025 GMT
Not After : Jun 29 18:01:21 2025 GMT
Subject: CN=440ad7b98ea7ae612c69ac733ac52b574372a0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:dc:1a:de:87:63:ee:f7:41:05:4c:22:d9:
ff:c8:91:b7:37:75:ed:71:36:42:24:d4:da:be:79:
29:4e:68:df:e2:98:7d:b7:57:41:3b:a4:3b:2b:c9:
c4:c6:89:e1:04:7d:b9:29:bd:d2:3f:53:14:55:c1:
6b:bc:74:c9:2f:ea:a4:ae:d4:dc:a2:21:54:b1:f1:
a6:78:29:3a:a9:85:a7:7f:55:bc:58:2f:ba:fb:0f:
60:7b:a6:3d:fa:d8:f4:f2:87:45:c0:79:ed:d4:00:
5b:a2:9b:c6:db:ab:12:38:b3:68:94:83:ab:cd:66:
a8:3d:50:11:5f:48:c2:f5:4d:9d:df:67:ce:65:4e:
05:c2:b7:c5:0d:03:a2:05:70:00:f7:4c:5c:8d:0b:
34:e4:54:d7:aa:98:87:ec:99:03:d2:da:cd:2f:c0:
9a:c0:0d:75:93:5e:ee:f5:b6:cf:a2:b2:64:f8:fa:
fb:28:dd:0e:2a:e4:c3:79:ad:57:40:df:03:c2:a4:
1e:4f:c0:6c:28:52:ba:20:6c:7c:c0:e6:7a:db:75:
6b:f3:57:1b:96:d1:2f:27:57:c5:c9:7b:6a:57:6e:
32:c2:fe:01:0b:35:b8:18:b6:9e:6a:c0:69:d8:a2:
90:2f:fd:a0:51:49:c9:44:36:5a:be:8f:68:85:56:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:D7:B9:8E:A7:AE:61:2C:69:AC:73:3A:C5:2B:57:43:72:A0:E5
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:4a:15:96:ef:33:db:b5:e5:08:30:3a:e3:9b:e3:5f:56:0e:
90:92:df:aa:d8:af:cb:29:4e:d5:56:53:9a:a5:f4:77:b2:0b:
64:1a:18:78:0f:0b:1c:b5:3d:57:f5:34:38:21:52:56:a5:a4:
57:2c:9d:a3:1c:f0:a6:dd:df:ab:2f:90:d2:8f:d0:08:f0:ac:
03:bd:2c:88:aa:d3:b3:ac:b6:85:0d:77:c0:e6:5d:fb:31:a9:
f3:00:98:7a:d0:1e:e2:09:b3:b1:96:36:d3:b5:08:7f:75:55:
a3:d7:ae:45:2f:14:e4:31:7a:17:a0:c5:f7:c7:28:39:81:4e:
c5:cc:b7:64:bf:24:50:65:f9:b0:bd:d2:c9:cd:c1:e4:6a:db:
08:7c:51:d6:46:e7:b8:34:69:75:ee:0c:8e:50:ec:90:08:76:
0e:8d:04:7a:ff:c5:cd:87:1a:d1:55:f3:74:3f:87:04:f8:47:
a5:ff:41:cd:ad:c0:fd:b2:48:23:1f:19:ae:ab:00:91:44:2a:
b7:bc:79:49:f3:ba:58:2d:28:57:32:ab:f7:e4:89:e3:6d:32:
18:6d:b4:b8:60:38:e6:b1:5b:02:d7:04:b6:7b:73:f7:2d:22:
21:32:14:8d:a0:18:9d:af:ad:1f:46:76:3e:f8:82:f1:f7:f1:
d3:a2:6e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3Z+bUfAASq1q+jkpm5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDliMzViYzNlOWYyNDkzYzY0ZDA2ZjViMmQ0YTk5YzVm
MjUxZTkwHhcNMjUwNjI4MTgwMTIxWhcNMjUwNjI5MTgwMTIxWjAzMTEwLwYDVQQD
Eyg0NDBhZDdiOThlYTdhZTYxMmM2OWFjNzMzYWM1MmI1NzQzNzJhMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSDcGt6HY+73QQVMItn/yJG3N3Xt
cTZCJNTavnkpTmjf4ph9t1dBO6Q7K8nExonhBH25Kb3SP1MUVcFrvHTJL+qkrtTc
oiFUsfGmeCk6qYWnf1W8WC+6+w9ge6Y9+tj08odFwHnt1ABbopvG26sSOLNolIOr
zWaoPVARX0jC9U2d32fOZU4FwrfFDQOiBXAA90xcjQs05FTXqpiH7JkD0trNL8Ca
wA11k17u9bbPorJk+Pr7KN0OKuTDea1XQN8DwqQeT8BsKFK6IGx8wOZ623Vr81cb
ltEvJ1fFyXtqV24ywv4BCzW4GLaeasBp2KKQL/2gUUnJRDZavo9ohVZUIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQK17mOp65hLGmsczrFK1dDcqDlMB8GA1UdIwQY
MBaAFKHZs1vD6fJJPGTQb1stSpnF8lHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2Rtelc4UHA4a2s4Wk5Cdld5MUttY1h5VWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NjU2ZjctMDA1NC00OGQ0LTk2MWEt
NmRiZGVjNTExNjhkLzEvb2Rtelc4UHA4a2s4Wk5Cdld5MUttY1h5VWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NjU2ZjctMDA1NC00OGQ0LTk2MWEtNmRiZGVjNTExNjhk
LzEvb2Rtelc4UHA4a2s4Wk5Cdld5MUttY1h5VWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4koVlu8z
27XlCDA645vjX1YOkJLfqtivyylO1VZTmqX0d7ILZBoYeA8LHLU9V/U0OCFSVqWk
Vyydoxzwpt3fqy+Q0o/QCPCsA70siKrTs6y2hQ13wOZd+zGp8wCYetAe4gmzsZY2
07UIf3VVo9euRS8U5DF6F6DF98coOYFOxcy3ZL8kUGX5sL3Syc3B5GrbCHxR1kbn
uDRpde4MjlDskAh2Do0Eev/FzYca0VXzdD+HBPhHpf9Bza3A/bJIIx8ZrqsAkUQq
t7x5SfO6WC0oVzKr9+SJ420yGG20uGA45rFbAtcEtntz9y0iITIUjaAYna+tH0Z2
PviC8ffx06JuEw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:52 2025 by rpki-client