Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: LHjz2cTSv8udrGjqXNhk+q5KhriJboI7LDeTyQcj/VA=
Subject key identifier: 98:80:BA:C8:71:BD:FD:4F:DC:00:35:11:40:98:9C:D3:EB:07:1B:5D
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 0197711A12A75AD63275710CB8BBC8086D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 01:00:23 +0000
Manifest this update: Sun 15 Jun 2025 01:00:23 +0000
Manifest next update: Mon 16 Jun 2025 01:00:23 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: muTT+/nSonj2aqZq/dazeIH22UfS6GvoY+WuHOtQLBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:12:a7:5a:d6:32:75:71:0c:b8:bb:c8:08:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jun 15 01:00:23 2025 GMT
Not After : Jun 16 01:00:23 2025 GMT
Subject: CN=9880bac871bdfd4fdc00351140989cd3eb071b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:b4:d4:ef:14:4f:04:d1:f3:b5:4d:9f:4d:
8c:d9:22:2a:68:b7:89:c5:97:3e:7a:95:6f:70:5f:
d3:c7:cc:f2:3f:db:62:3b:6c:83:a0:52:6e:2c:1c:
c2:75:02:48:f4:24:22:6b:1f:84:8f:e0:82:51:9a:
10:8e:f9:b8:7b:0f:d7:a4:52:1b:ef:53:3d:8d:45:
a4:21:9a:36:c7:4a:82:2c:54:56:52:6d:e2:c7:e0:
d3:eb:cb:d3:7c:58:a1:1b:5d:dd:76:09:b9:f4:c3:
a9:33:74:bd:00:e9:35:b8:4e:f4:09:bd:99:1a:83:
c8:0f:d9:36:87:16:95:bf:b8:77:4b:31:35:ad:d7:
88:e3:55:b9:50:02:b3:1a:3d:0e:0b:63:54:94:59:
3f:57:89:2f:7e:b6:21:8a:53:41:57:3e:e3:4f:50:
58:76:e9:6a:e1:f2:7b:1a:d1:86:58:e6:04:e6:4d:
0b:91:15:2a:5c:a6:d5:a4:5e:6c:3d:ac:43:84:2a:
2a:c6:98:e5:6f:dc:b8:6a:2a:18:ed:d4:2a:a9:00:
a2:f9:d7:42:ed:86:5b:d8:a3:a0:70:ee:ac:74:e9:
f1:6b:39:24:7e:2c:e3:ab:7e:de:99:56:66:8a:f5:
cd:48:42:dd:53:2b:3e:89:90:8c:b2:3c:ae:cb:04:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:80:BA:C8:71:BD:FD:4F:DC:00:35:11:40:98:9C:D3:EB:07:1B:5D
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:71:b8:f1:68:49:a6:e8:d0:58:b5:1e:cd:5a:35:12:9b:
70:0a:2d:93:a9:54:f1:38:62:40:1b:e6:e0:5c:43:02:d4:b4:
03:b5:17:71:b1:10:8c:a2:df:38:6b:93:dc:44:8a:9f:24:51:
3b:b7:3f:f2:c5:26:50:33:04:c2:87:db:7f:bb:e1:7f:0e:a5:
b7:58:e4:b8:d8:84:90:4f:43:55:1f:9b:52:52:53:b0:0f:e9:
db:cd:1d:56:19:5d:8b:7e:49:66:6c:b9:05:73:92:82:47:07:
d8:77:a2:a7:8a:de:c3:9d:f8:e5:93:8b:b8:15:83:0a:b1:ba:
2c:53:38:3f:8d:4d:73:77:70:09:61:8a:16:25:d4:f7:d9:64:
41:e9:7c:1a:21:c7:6e:1c:46:24:ca:11:da:14:95:86:b7:85:
81:2b:62:71:d6:a1:b2:65:b5:70:3a:33:0a:52:08:c1:d5:20:
da:78:64:7f:d4:8b:9c:05:3d:17:6c:4b:bf:ef:9a:29:e4:5c:
df:0f:29:27:49:e6:9a:d6:05:90:08:c3:ed:98:b5:e1:bd:d3:
6d:76:e8:35:33:ad:f8:ca:f7:0b:3d:9c:14:7d:0e:60:a8:ed:
91:92:3f:1a:c0:ca:e3:1e:da:40:53:aa:8c:6d:d9:fb:60:ae:
4b:a8:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:06 2025 by rpki-client