
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: aDFE3NaQhmXhRHs0fbKodWo0kMakgmkOe4CKdTlQWtA=
Subject key identifier: 1B:3A:95:81:C9:63:FD:A6:F9:F9:18:24:41:EA:20:34:8B:AF:79:42
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01987F788DD760E43673DAF0E7F5320139F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 13:01:03 +0000
Manifest this update: Wed 06 Aug 2025 13:01:03 +0000
Manifest next update: Thu 07 Aug 2025 13:01:03 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: /8HUtD5+VUoKeQ4IRbnHeRXsSukwq2L1i0ZHMcQlZK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:8d:d7:60:e4:36:73:da:f0:e7:f5:32:01:39:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Aug 6 13:01:03 2025 GMT
Not After : Aug 7 13:01:03 2025 GMT
Subject: CN=1b3a9581c963fda6f9f9182441ea20348baf7942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:5c:c5:41:26:a7:ef:03:c2:fd:f3:f9:ae:
0b:66:01:7d:cd:70:7c:67:2e:68:47:8d:42:e4:5f:
4b:f3:f4:14:4c:9f:dc:47:6d:30:77:49:4f:63:dd:
fe:f0:ed:e3:a8:ec:61:a1:01:51:4d:0a:22:6e:b8:
73:61:5b:f3:32:49:cd:32:ef:77:af:a1:3d:09:a6:
f0:91:5c:06:76:89:72:66:55:f9:79:d3:c1:89:3a:
86:a9:de:a1:5e:6e:09:26:ac:1a:82:21:f1:9e:ad:
4c:6a:8f:4d:e5:94:f9:3e:80:f6:85:85:65:f3:02:
77:c1:97:9b:83:d6:d5:ae:b6:94:ab:09:94:4a:ce:
79:a2:fe:dd:0c:ff:99:7e:85:35:40:07:9b:60:b9:
c1:0d:c5:d9:a7:22:62:ac:ae:63:59:5d:08:0b:d6:
db:4c:a0:50:99:0c:62:ea:32:c3:21:6b:57:1b:9f:
5f:dc:fd:f9:d3:0b:00:c6:06:cd:cb:54:80:f4:22:
c3:a8:a8:25:bc:f6:a1:26:9c:73:70:70:d4:25:31:
2e:a7:fe:b8:00:cc:d8:8a:ed:f8:13:57:b0:eb:ad:
ce:63:c2:e1:d1:71:a6:f3:d3:b7:00:18:f9:a9:c3:
d9:d4:4c:0d:42:59:95:49:6c:ad:cd:70:de:cc:15:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:95:81:C9:63:FD:A6:F9:F9:18:24:41:EA:20:34:8B:AF:79:42
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6c:88:af:1a:ba:9f:48:92:08:e7:8c:67:bf:ab:67:8f:fe:
00:dd:1c:7d:ba:06:bf:4c:2d:ac:07:50:25:55:e6:cb:ec:80:
9c:87:96:ac:61:5a:49:32:35:f5:fa:26:4d:66:7c:22:5f:85:
88:40:fe:b8:a6:61:2d:51:b7:3c:48:51:52:d8:e0:5c:3d:6a:
ae:48:08:e0:08:30:9b:0f:01:fc:fd:5f:11:e9:ab:5e:fd:7e:
4e:ec:fd:e4:00:ee:af:12:32:80:0e:a0:a3:d9:d2:6e:50:5c:
68:0d:04:95:2a:5f:03:55:47:90:d7:55:a5:11:7b:6f:5b:d6:
6d:25:9a:c5:63:c3:81:a2:e8:25:1b:73:86:f8:93:9d:6b:01:
2c:ce:b2:e1:56:35:78:e9:9b:56:e5:c9:25:1f:00:1f:5a:1b:
ef:c7:04:d6:c5:ef:82:b5:7d:bb:87:7d:8f:cc:87:78:cd:29:
fd:fc:a6:da:3d:4a:90:58:0c:d8:1f:62:6f:96:24:6f:d2:8c:
f2:17:c7:78:39:8c:7f:13:b0:3a:43:ba:6e:17:6a:ad:a8:4b:
ba:0d:5d:2a:54:45:4f:22:b7:76:d9:a9:19:f3:8e:28:09:c0:
53:7c:28:39:ad:e0:5a:5c:2f:17:fd:a3:78:8a:ef:ef:d1:ed:
23:89:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:02 2025 by rpki-client