Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: AdJQbmXribBu3/0DGgeV2/mp9qPEDHKXYjF2HWQsURI=
Subject key identifier: BD:24:A1:47:E8:19:A4:B2:03:9C:C2:82:6F:AB:F0:0C:C8:12:B7:2D
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019873E2FE20AEC3AD4255E9DBABEBE24742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:01:52 +0000
Manifest this update: Mon 04 Aug 2025 07:01:52 +0000
Manifest next update: Tue 05 Aug 2025 07:01:52 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: itI6be4fM+yofeSO9yonpPYTG+hmsu9HUNy9DuD3l4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:fe:20:ae:c3:ad:42:55:e9:db:ab:eb:e2:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Aug 4 07:01:52 2025 GMT
Not After : Aug 5 07:01:52 2025 GMT
Subject: CN=bd24a147e819a4b2039cc2826fabf00cc812b72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:11:24:76:36:64:87:85:7b:ff:af:bc:50:
b3:27:9f:2f:29:7d:4d:3d:8a:5f:c4:9a:6d:79:58:
c9:3c:61:7f:5e:e8:71:7b:95:10:1a:4e:98:27:36:
c4:61:db:71:db:d5:28:1a:b9:e8:70:a7:d6:6c:74:
3d:05:16:3d:0f:19:27:ec:c1:af:bb:2e:73:a7:14:
e8:cf:f1:da:7a:b4:db:a4:32:2a:e9:12:c0:67:ae:
5c:63:81:d2:f9:04:e7:7c:8d:09:be:eb:c2:89:3f:
0b:80:87:29:f3:dc:3b:8c:21:77:1c:c4:e6:a3:49:
a2:e7:0a:70:d3:ce:3c:63:e8:53:02:a5:50:da:a8:
14:ae:c6:69:8f:cd:95:b6:e8:7a:cb:ef:fe:c8:d0:
62:04:06:4e:13:4b:a7:e9:58:e7:80:7c:3f:ff:8c:
a5:46:b3:71:c3:8a:f7:e8:b4:3a:cd:29:2b:48:ba:
ba:c4:48:3a:63:a9:84:89:b4:a4:c0:11:79:0c:58:
9c:49:ad:66:68:4b:48:26:cd:41:6d:6f:35:72:1a:
c6:ab:cc:0e:72:6a:e5:54:d5:80:83:35:94:fa:38:
4d:23:48:b9:44:a0:c8:5b:12:96:a9:f1:70:33:65:
b5:8d:4d:09:20:e7:78:cf:3c:23:aa:df:3a:f7:e5:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:A1:47:E8:19:A4:B2:03:9C:C2:82:6F:AB:F0:0C:C8:12:B7:2D
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f0:f9:33:f3:20:9d:5c:ab:37:fa:c3:64:be:92:48:89:38:
2d:79:95:43:d1:dd:19:4a:b6:85:aa:4f:ec:c3:05:cb:1f:d6:
cc:71:5e:12:9a:28:4b:4d:eb:b8:b9:90:60:13:f3:36:8a:48:
58:c9:f1:5a:df:ff:40:54:af:bf:3c:8e:fa:91:de:2b:f7:62:
bf:21:1f:50:40:35:63:4a:e2:81:15:c8:65:ce:d1:f1:35:08:
22:15:0b:29:9e:da:c4:2a:b6:c9:47:df:ae:2a:51:3e:89:af:
4c:31:d2:83:a0:7b:0d:97:34:c4:f2:84:87:53:21:f4:d2:8b:
c0:81:af:3c:ab:98:1b:1a:db:d3:d7:a4:9e:a3:2a:3f:40:94:
85:78:dc:64:02:13:02:e6:23:16:dc:76:bb:6e:41:01:15:be:
9c:e5:f4:ab:0e:06:ad:91:07:78:74:46:b3:25:e9:c2:44:c3:
c8:f0:03:87:4e:38:e0:2c:2f:0f:64:dc:84:1b:f0:02:ed:2c:
e7:5b:90:bd:b7:21:0d:b3:44:59:2b:d9:fc:57:2b:b1:94:13:
a6:a5:1d:02:0e:57:48:06:dd:2e:e6:a1:cf:29:a5:32:01:0b:
3a:04:d2:5e:d9:46:22:0b:e3:10:44:30:c6:41:cf:da:07:c2:
fa:92:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:28 2025 by rpki-client