Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: LKc+utMZO7t4mQ9KYlZmT5Ozy7qK6eH9xgNSKQBfFM0=
Subject key identifier: 0F:E1:79:74:3B:19:03:14:48:1B:82:61:57:4A:7B:1D:73:BD:3F:9D
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 01988431093F2234C0DB80CE4771D1185160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 0567
Signing time: Thu 07 Aug 2025 11:01:02 +0000
Manifest this update: Thu 07 Aug 2025 11:01:02 +0000
Manifest next update: Fri 08 Aug 2025 11:01:02 +0000
Files and hashes: 1: eAUsqio3gBfmNb6-utIzUr7aZng.roa (hash: uitRV+QEa1rnNZo9/bqmtkICrxnt46Ad8T68cujpvFM=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: bDYWLe1uXv/+CTulyF26SKYTSRMiVGcmnpU+y1QtaSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:09:3f:22:34:c0:db:80:ce:47:71:d1:18:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Aug 7 11:01:02 2025 GMT
Not After : Aug 8 11:01:02 2025 GMT
Subject: CN=0fe179743b190314481b8261574a7b1d73bd3f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:7c:bc:74:ad:83:d8:44:66:48:1e:cd:37:
d5:9a:d5:72:8e:76:b4:ed:a0:f9:fb:d0:bd:2a:12:
69:2d:b3:83:50:32:0a:52:3a:fe:44:95:c5:16:41:
5d:e4:33:b5:14:9c:90:f9:ad:a0:6d:22:b7:58:51:
0c:9e:f2:29:25:63:39:e6:ee:60:04:b5:c4:fc:33:
6c:d8:d7:84:b1:9d:9a:d8:6d:24:35:9d:2d:b2:bb:
06:25:86:8a:b3:1a:70:ab:95:4d:f6:a1:8c:e0:94:
e6:e4:3d:65:35:8b:ce:8a:0e:2d:30:ec:bd:8a:7c:
b5:96:fe:41:e0:c5:3b:bd:15:62:7d:59:f3:04:b6:
37:01:72:85:2a:32:62:bf:e6:af:8e:5e:88:eb:f4:
29:cc:6b:41:67:48:4f:fe:4f:a1:e1:b6:5d:f2:b9:
22:8c:47:9a:5d:f6:a3:d9:c8:d3:98:3e:dc:86:05:
0f:67:85:1d:ca:fc:3a:6c:1d:51:71:f4:70:e2:63:
a3:6d:64:07:90:c7:a0:f4:1f:28:28:c2:a3:9f:ab:
a3:80:f4:3b:5d:92:21:d0:b6:1d:e7:f4:ca:0b:e6:
a8:0f:1a:a0:e1:bf:e9:6a:d1:e3:68:ea:b4:33:ad:
70:d7:28:7e:9b:17:11:ac:fa:e6:78:ca:51:1b:6f:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:79:74:3B:19:03:14:48:1B:82:61:57:4A:7B:1D:73:BD:3F:9D
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:23:6b:3a:47:52:8f:7f:cc:1b:eb:5e:b7:89:e9:70:6a:
98:e6:b0:87:58:83:a1:86:a0:36:78:9f:4b:19:5d:c3:3d:94:
16:ef:d9:63:ed:b3:87:f6:51:c9:b8:a7:90:54:f7:67:af:ab:
78:38:85:62:28:6e:07:dc:41:f9:be:68:06:5b:9f:8b:34:ce:
59:fe:14:a4:3c:18:83:c3:d5:fe:6c:dc:26:3e:ee:11:df:a3:
41:8a:98:32:98:87:ef:81:55:22:e5:a6:62:ef:fa:e9:38:9c:
6a:65:0f:8b:63:79:7a:f8:70:4a:d6:2c:a5:8d:89:a5:b6:77:
6f:17:4d:ae:e4:bd:64:b7:3e:7a:97:d8:dc:06:64:19:df:0a:
01:4e:da:d3:01:c9:a5:0a:9e:df:09:a3:5b:81:bb:2f:20:c5:
da:58:ad:a8:7f:82:0f:5e:c9:46:81:1f:35:c0:33:58:41:b0:
4e:3b:57:c7:3b:2c:06:39:b0:5a:fe:b4:a8:9b:b5:90:1e:9f:
ad:0f:65:26:29:a5:0b:56:f9:09:0a:81:0a:46:b5:30:64:33:
b4:5f:3c:41:9a:fd:fe:a9:6e:38:a5:bc:50:cc:e9:4f:5f:41:
92:5c:0a:b1:f0:0a:e2:31:31:02:af:cd:bf:15:98:60:6e:ff:
0f:a2:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:00:18 2025 by rpki-client