Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: 0Cd4qV69bVqbhYa1gzaFnmrhF07rVp9DIpeV2btXc4g=
Subject key identifier: 63:73:B3:DB:80:D5:13:D0:EF:43:F3:AA:5C:53:BA:2A:78:13:69:6D
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 0197684E2006D0F119CE43C8A0D8EDC7D4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 04D4
Signing time: Fri 13 Jun 2025 08:00:39 +0000
Manifest this update: Fri 13 Jun 2025 08:00:39 +0000
Manifest next update: Sat 14 Jun 2025 08:00:39 +0000
Files and hashes: 1: eAUsqio3gBfmNb6-utIzUr7aZng.roa (hash: uitRV+QEa1rnNZo9/bqmtkICrxnt46Ad8T68cujpvFM=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: GAJhMmH95bW681MsZCQsF0huuEtwPAcOWsSi4fkpjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:20:06:d0:f1:19:ce:43:c8:a0:d8:ed:c7:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Jun 13 08:00:39 2025 GMT
Not After : Jun 14 08:00:39 2025 GMT
Subject: CN=6373b3db80d513d0ef43f3aa5c53ba2a7813696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:84:c0:1a:8d:19:fa:52:b0:ec:94:0f:1d:
2f:43:15:e5:82:c1:17:20:10:99:12:f9:13:dd:16:
e5:0d:64:6f:ae:7d:10:0d:20:e3:b4:f1:2e:c2:08:
89:b7:0a:b1:e8:e9:9f:e3:e6:61:af:06:a2:97:e7:
24:36:8a:e2:44:88:6b:60:83:26:51:d2:83:d5:63:
ff:85:7e:8a:97:45:4a:b4:7a:c1:5b:78:de:3d:c7:
ca:4d:79:f7:22:e9:82:85:09:58:03:4e:0b:c2:e9:
55:fe:a7:61:79:c1:ad:66:b7:d9:99:cd:b8:71:df:
08:98:41:9b:90:2d:d6:bb:f6:ca:dd:70:a6:3e:ee:
d2:13:d6:b8:fc:bf:42:1d:76:56:2f:d2:de:30:bd:
f2:b3:d7:6c:01:f7:1a:fb:68:d9:8a:7d:e2:41:d1:
88:96:16:e5:ec:58:cc:41:e9:9f:4a:d7:c6:73:f2:
7e:ef:4b:54:19:0b:ee:55:b5:c8:a8:ee:06:ad:f7:
3d:ca:f9:0c:54:6a:8c:6d:7c:eb:fa:cb:51:f0:13:
cb:a3:25:41:ff:5a:ab:b0:93:9a:46:ee:c7:d6:32:
15:81:c7:9b:50:7d:f2:a8:83:50:2b:4c:6d:fa:aa:
02:bc:5b:bb:67:1e:8b:87:00:bd:b2:c6:ae:7f:e1:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:73:B3:DB:80:D5:13:D0:EF:43:F3:AA:5C:53:BA:2A:78:13:69:6D
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:30:12:71:b6:ef:9d:86:83:81:f2:98:80:4c:83:a3:b4:
9b:32:95:cb:40:4f:09:8b:e8:b2:62:62:b4:18:26:7d:98:3c:
5e:51:f8:bb:ea:a6:bc:c2:94:e3:53:3f:8e:2f:16:70:78:6e:
45:c4:dc:b9:fe:f8:fe:e3:f5:9e:b4:26:34:58:d7:a7:7b:01:
31:0d:f4:21:75:b3:8e:df:75:7d:df:fc:f0:f9:6d:96:9c:0a:
22:d7:7c:60:f5:5f:84:b3:6c:be:0e:d6:59:89:a7:56:64:e5:
0b:d0:71:e6:99:62:91:73:9c:2d:90:f2:3e:13:5d:29:92:59:
3c:38:4d:f4:18:93:0b:89:33:94:38:a9:69:e2:02:cb:98:e8:
11:04:f0:e9:5f:a8:c3:9a:31:cc:34:44:9c:ec:8d:8f:58:16:
55:1f:43:db:25:02:00:ec:80:37:ac:86:8f:0b:71:8b:4a:81:
8e:d5:5b:e7:7e:e6:14:bb:34:ce:fe:3f:38:1e:af:1e:59:b0:
55:bf:70:0c:07:77:fa:ea:8f:f9:16:7f:49:0a:54:2a:fa:19:
a6:70:27:cc:e0:0b:a1:ea:5e:20:6f:55:08:0d:f6:a3:53:50:
b6:e5:35:9c:ca:d4:52:17:6c:82:fa:2f:c3:f0:ee:14:93:1c:
f0:e8:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:38 2025 by rpki-client