Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: rmI6ONi/LpWY4GeMQzihdhPf5EWTX6iBezIXmLePlWg=
Subject key identifier: 31:EF:2C:38:E7:27:C8:5C:CA:23:29:F4:2B:93:D1:49:6A:54:62:1A
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 01976D3E1B74B8B1B6BFE8FF4B77E0279697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:16 +0000
Manifest this update: Sat 14 Jun 2025 07:01:16 +0000
Manifest next update: Sun 15 Jun 2025 07:01:16 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: ZIIFISRumLpY6RYl4rU9JWsvLoOtcDVPXMackFUEok0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:1b:74:b8:b1:b6:bf:e8:ff:4b:77:e0:27:96:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Jun 14 07:01:16 2025 GMT
Not After : Jun 15 07:01:16 2025 GMT
Subject: CN=31ef2c38e727c85cca2329f42b93d1496a54621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:68:d3:bd:a3:38:44:c9:9f:c5:61:f1:b1:
76:a4:ba:5b:cb:09:84:70:e3:dd:a6:bc:76:12:b3:
e8:be:25:6d:b4:94:68:8e:2f:6b:8a:ab:ca:8c:d3:
66:02:95:1a:92:4d:f5:af:61:ad:8c:72:26:f7:eb:
af:a2:40:bb:e9:e6:11:6f:55:d1:bd:55:0f:02:dc:
46:3f:6b:d7:94:7d:77:8e:01:cb:52:1b:d2:09:79:
34:bf:cf:18:53:a8:ba:68:1c:1a:50:20:87:19:fa:
9f:a5:da:cb:c6:bb:1b:12:ff:c3:b8:07:65:61:a0:
c1:51:3a:2b:00:31:80:c3:f1:51:86:bf:8d:4a:e7:
94:7a:9f:c8:d2:09:25:73:04:f7:c5:9d:a6:4b:31:
88:59:31:41:63:1c:5d:e5:ae:57:1f:8f:cd:8f:be:
00:3b:1a:df:d8:f3:7c:e5:dd:00:af:ff:c4:5e:a3:
a1:46:03:7d:49:02:be:09:64:a9:70:09:ec:87:ed:
3f:10:0a:18:d8:6b:e2:94:69:3b:ec:34:23:54:c6:
c8:56:71:1c:fb:1c:4b:9c:01:b3:1d:e7:ce:a6:06:
00:e3:b1:85:08:0f:c8:37:54:de:52:e5:29:e1:62:
e4:86:0c:d0:bf:50:16:14:51:16:0d:ba:91:5c:cf:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:2C:38:E7:27:C8:5C:CA:23:29:F4:2B:93:D1:49:6A:54:62:1A
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:32:d4:ff:33:f2:e4:31:3f:34:39:7e:9f:d7:40:13:df:f1:
84:41:eb:a1:f4:fb:01:a1:78:08:45:be:51:12:e6:a7:33:db:
e5:45:9c:7c:b4:4d:d0:00:41:18:86:5a:01:84:9f:f2:cf:ae:
37:53:ed:3f:33:ed:36:d9:d2:ce:9f:36:a4:3b:9b:5b:d8:6d:
6e:c4:87:ff:e5:11:d0:7e:90:c0:b5:87:6d:b3:94:55:53:b3:
b0:53:ab:b3:18:e0:7b:40:8f:01:71:2f:86:c6:84:18:4d:3d:
08:ac:b6:bb:62:bf:ab:46:97:a4:de:0f:f4:44:e7:91:f3:5d:
f4:91:37:7e:61:5c:fe:76:51:a5:a7:54:bd:b0:53:70:fa:5c:
ea:49:f1:de:a4:12:e4:0d:78:ed:d0:92:1b:c0:d9:f4:21:34:
14:42:fa:8a:e6:39:e9:1a:13:2e:88:02:72:a6:0a:a8:12:91:
df:ed:95:dd:de:22:bc:2d:fb:bc:5c:98:03:e8:03:8a:cc:e7:
d3:69:3f:a8:43:33:b1:13:9f:ce:65:08:b4:92:97:63:aa:64:
73:c2:71:98:49:fd:71:bd:fa:3e:28:20:7e:1d:b8:cb:b0:db:
3b:e9:06:58:b2:d1:f2:e8:9f:80:26:3a:d9:f7:b6:7b:bc:52:
cd:95:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:32 2025 by rpki-client