Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: 6JKECIoKDm/O/wcAMtGW5qYHmqVTtkw9kYqHUrSzjoE=
Subject key identifier: EB:9C:83:27:AE:D5:28:07:B0:3D:07:A8:2D:22:62:DC:02:AA:1B:A1
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 0198D5161537BCA271A196C8C2E043C60525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 0228
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: U9STpn6c+DDXNm79Qf2WOsLEjVTktsKJEAABgFL1tps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:15:37:bc:a2:71:a1:96:c8:c2:e0:43:c6:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=eb9c8327aed52807b03d07a82d2262dc02aa1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:ae:ce:b6:53:0b:14:31:df:a3:f9:92:0e:
88:aa:8e:09:66:03:0c:47:68:e6:c1:3c:7d:7d:7a:
13:7d:27:ba:df:2b:84:a7:47:29:9b:eb:93:d8:21:
5d:f7:42:2e:a1:36:96:8d:09:1f:71:17:98:9d:cc:
6b:83:ac:a8:e5:79:39:52:39:04:cc:d1:08:03:27:
db:9f:1e:85:48:32:70:8b:b9:88:f0:ef:48:7d:bb:
5e:ab:a0:3a:c5:b7:31:ca:9a:e4:13:4d:5d:2e:8a:
a4:be:96:ae:26:c4:4d:7e:10:67:db:b3:27:b8:2c:
83:ab:04:00:f2:a8:fc:85:d8:5e:c2:f8:17:32:c4:
37:e1:ce:ff:6d:88:99:bf:b0:f4:7f:22:1a:6c:44:
f8:cc:ca:e8:73:5c:af:4e:3f:7d:dd:40:85:9d:a0:
ec:bf:e1:cb:d3:49:ce:4a:e8:2b:48:a5:73:f1:7e:
b3:08:b3:fd:95:81:be:b0:98:ab:43:62:2e:13:8f:
75:2f:00:50:60:33:b7:0e:f2:0a:d7:fb:e1:7d:b4:
34:52:15:81:34:91:54:f5:ef:30:6c:5c:47:97:39:
ed:4b:b0:ee:64:0d:5b:5a:24:93:0f:a7:e5:f9:25:
73:0e:6b:f9:8b:64:66:ae:a4:6c:1f:42:c3:e9:26:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:83:27:AE:D5:28:07:B0:3D:07:A8:2D:22:62:DC:02:AA:1B:A1
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:60:be:f5:ef:d9:18:95:ac:ab:33:55:07:9c:76:57:75:91:
6c:30:2f:53:82:e7:87:38:49:8b:31:fe:42:c9:56:7e:77:e0:
4e:89:1d:c5:bf:c5:6e:d9:82:21:15:8e:1e:83:dd:b2:5d:86:
d9:88:18:bf:88:c4:3c:72:81:06:48:16:99:78:78:3a:d0:13:
8b:7a:49:96:68:35:f0:23:5d:a3:de:f7:3a:70:6b:db:95:fa:
25:6a:ef:98:10:bc:54:b9:02:ec:1b:7f:3e:9f:25:ac:92:29:
28:cb:19:51:38:a8:ac:a9:cf:28:ac:1c:fe:f8:0a:14:ca:91:
3d:90:30:1f:18:71:21:47:78:50:82:f6:5e:3a:98:f4:22:86:
e0:32:a7:e3:08:03:95:04:95:6b:24:e2:a9:8a:e5:fa:e5:9a:
cc:ee:f8:38:72:51:8a:42:21:1e:ba:26:34:c0:20:43:35:77:
a8:76:c3:96:dd:62:ad:24:6d:1a:18:94:23:d1:f8:0b:71:c6:
e9:c1:2e:94:62:7a:ee:50:5d:d1:57:34:2b:87:87:72:78:d7:
44:b2:d6:ec:b3:a9:58:1c:34:44:81:bb:4e:6f:71:c9:61:bd:
77:b8:20:83:8f:d5:65:c9:71:74:4a:45:c5:19:83:ed:8c:26:
c6:e0:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:48 2025 by rpki-client