Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: T3E6ZYpfhfQwRCn7pmAwvifGsxHrPvx3QmCy8ZabYmI=
Subject key identifier: 68:D1:E5:9D:7B:A4:0A:C6:6A:14:44:39:1C:02:CF:E1:4D:30:75:D4
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 01977F0D301931CA9448F71CA7334EBD90E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 09E4
Signing time: Tue 17 Jun 2025 18:01:00 +0000
Manifest this update: Tue 17 Jun 2025 18:01:00 +0000
Manifest next update: Wed 18 Jun 2025 18:01:00 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: F7sNFYvcoK1ehw1y+nY3VnDDrR97/cbtkqloRQKYfnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0d:30:19:31:ca:94:48:f7:1c:a7:33:4e:bd:90:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jun 17 18:01:00 2025 GMT
Not After : Jun 18 18:01:00 2025 GMT
Subject: CN=68d1e59d7ba40ac66a1444391c02cfe14d3075d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:0c:e6:5d:a7:a6:51:c3:a5:4c:ca:de:cc:
ac:ad:cb:27:46:4f:12:88:62:84:66:62:12:dc:61:
f8:13:3d:00:11:cc:4e:43:0e:76:76:13:85:00:7b:
1c:91:44:b6:0d:93:db:5f:db:83:dc:82:1c:45:f8:
36:3d:d8:7d:38:86:1b:fe:ee:ac:4e:43:04:a7:65:
77:cc:97:f2:82:95:e4:9d:07:2f:2e:be:1c:f9:b7:
6b:86:32:6d:e3:ce:2e:fa:7f:f5:e4:5b:ca:04:4a:
ac:5c:2a:fc:82:4e:59:4c:d0:b6:5e:d2:23:b0:d6:
22:e7:bb:47:ac:b9:5c:a3:20:ca:0f:4b:f1:56:ee:
91:a4:67:71:0a:bb:cc:b7:01:7d:03:71:51:85:c9:
5f:5c:8d:be:10:84:34:6d:1c:11:cc:32:65:34:af:
6a:5d:54:77:91:86:7b:94:a4:f0:13:96:99:32:22:
76:87:be:f7:99:2a:0f:63:44:eb:cd:1f:de:98:77:
9e:38:8b:13:46:77:0c:55:c7:70:4f:94:01:dd:d9:
c6:6b:a6:94:f6:b6:e8:65:9f:14:32:0e:fb:2b:53:
cf:46:0e:5e:cd:f1:d8:2c:d7:d1:07:ab:c9:51:13:
e3:32:32:50:e9:8b:98:26:29:56:05:fc:b6:2d:93:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:E5:9D:7B:A4:0A:C6:6A:14:44:39:1C:02:CF:E1:4D:30:75:D4
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:69:b4:ad:2c:94:85:09:94:69:04:5b:7a:ac:d7:e1:8a:59:
60:7e:14:7a:53:70:0e:6a:6c:02:3e:89:bc:33:6b:ec:12:01:
82:e7:8f:94:6a:c1:90:87:31:c3:52:e5:1d:e6:67:c8:e6:0d:
d8:49:77:4b:c8:8d:d6:88:01:ba:06:20:69:f6:e9:09:10:d9:
a1:d7:64:f4:cb:02:0f:8b:90:71:39:62:02:08:10:91:06:b9:
5d:c3:be:42:74:de:30:36:c0:49:9c:09:2b:ad:c5:d1:69:46:
72:0e:fa:3e:34:5f:05:c6:c2:83:06:42:f2:7d:e9:c4:a5:cb:
b9:54:49:29:58:6a:76:4a:7f:61:5f:71:fe:e1:2f:e7:a8:75:
b1:2d:ae:37:1f:33:8c:cf:60:97:bb:8c:c8:3f:a4:df:9d:92:
f7:47:21:c6:e6:36:14:6c:4a:0f:86:29:5a:cf:25:f0:c3:de:
a4:90:41:9d:ef:5b:13:f9:8c:6c:bb:43:04:df:23:dd:63:fb:
4c:f7:99:dd:36:38:23:38:88:17:23:72:22:90:42:62:59:b5:
d4:ef:eb:cc:94:69:5a:2a:1f:ba:d2:12:0f:a5:60:f5:6f:71:
aa:2f:28:6b:02:8e:6f:3f:22:11:5d:35:56:36:88:a3:7b:73:
88:1a:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:52:52 2025 by rpki-client