Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: 3zq1LVyfjYaU3SByatvnIHDJ/AT6djA0Y+HPTtYHf+0=
Subject key identifier: 9F:8C:4E:4C:C2:AF:F5:2B:38:2B:E7:93:15:DB:26:67:5E:90:27:6F
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 01976F62C6952C1C2C6783F0CB74B95330D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 1272
Signing time: Sat 14 Jun 2025 17:00:33 +0000
Manifest this update: Sat 14 Jun 2025 17:00:33 +0000
Manifest next update: Sun 15 Jun 2025 17:00:33 +0000
Files and hashes: 1: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=)
2: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=)
3: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=)
4: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=)
5: gf5XFlgvC8pERwrlK5LoL2sXlHE.roa (hash: JPyHl8l/41KirDeXfkpcWORF22TQZRLVrNb1aXqrS3E=)
6: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: R+rlronR/CijHLFc2hGXSF4QQkZDCHgWO/sm4o9fpH0=)
7: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:c6:95:2c:1c:2c:67:83:f0:cb:74:b9:53:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jun 14 17:00:33 2025 GMT
Not After : Jun 15 17:00:33 2025 GMT
Subject: CN=9f8c4e4cc2aff52b382be79315db26675e90276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:5f:a5:3f:a7:7b:1e:4f:61:1a:fe:1c:5d:
a2:8c:5b:32:ae:0e:23:ac:47:91:22:5d:40:f8:ca:
7b:f4:69:65:d7:f4:e0:5b:72:3d:7a:17:6b:9d:e9:
a3:13:bb:1e:da:85:03:6d:01:3b:5a:97:93:ec:6f:
47:26:75:ce:64:41:f0:4a:b6:3f:7b:9d:ab:6e:3b:
59:83:b9:42:33:b6:a7:1e:98:5c:39:0d:30:93:68:
e6:8c:cf:36:98:65:f2:b4:0d:72:11:e5:6b:2a:af:
1c:3b:fe:ed:49:2b:e2:0e:5d:a5:aa:00:a8:c2:a4:
1c:27:30:91:80:b7:23:fc:46:85:a6:b6:a0:05:d4:
2c:96:ca:1b:17:e6:9d:24:02:54:98:dc:df:d1:12:
e8:5c:28:6c:45:85:59:f4:91:aa:c8:a4:ba:af:b9:
36:e4:19:7d:f7:7e:ac:34:55:4d:92:42:a9:c0:88:
d7:21:00:ea:de:ca:42:d0:eb:6e:9c:c7:ac:46:42:
89:fd:d7:56:4b:dd:7a:9f:2c:df:c6:49:8f:35:69:
42:6a:ba:a5:f3:a0:ea:f1:74:55:52:18:cd:c1:88:
ab:0c:26:b3:8b:d8:53:28:6d:29:f2:81:dc:ef:8e:
07:1a:89:ee:7f:1e:b5:f5:29:d3:f2:8f:f6:78:88:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:4E:4C:C2:AF:F5:2B:38:2B:E7:93:15:DB:26:67:5E:90:27:6F
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:ca:ef:d2:97:3a:b9:ac:8e:df:c4:97:e6:00:f1:ba:bd:
c5:34:87:48:4c:1a:7a:3c:89:e5:fa:2b:80:e1:55:16:63:de:
83:34:49:6b:35:ce:94:22:50:df:cb:15:8a:50:e5:12:7f:48:
27:a4:fc:a8:e8:4b:11:79:94:fa:4a:89:2d:b2:15:40:ba:14:
74:d6:f5:47:23:17:78:dc:4d:a1:8e:18:c3:32:a2:76:81:b5:
34:c6:c3:b3:fb:ed:42:ba:ff:2a:00:99:61:88:b9:90:d5:2c:
dc:2c:21:9d:a4:3a:6c:c1:91:0a:42:92:d5:84:ba:81:3e:ca:
98:09:85:26:40:35:3f:1b:05:dd:bc:03:7f:dd:8a:07:39:50:
77:0e:70:58:60:ad:81:66:6f:a7:5e:07:ba:18:d9:89:8b:30:
6b:5a:81:c4:b3:24:d8:cf:d8:04:dd:f8:a9:cc:7b:0d:eb:a0:
a1:ca:b0:94:9e:4a:68:c8:c6:55:7a:bf:8c:96:1a:75:c8:b8:
67:9e:71:6c:07:a5:ab:d3:de:61:80:2c:3c:8c:15:2a:5a:1d:
5d:9e:3e:5f:f8:b2:ca:82:1f:1b:d6:1c:4b:0d:36:b8:ec:5f:
56:9e:6b:6a:6c:be:a2:a6:2f:e6:3b:fa:46:87:39:44:9e:c8:
85:65:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:55:17 2025 by rpki-client