Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: 6sFedhV6lmCjZViRMLhiuyxl7btAHu9d2CjYTxdA26A=
Subject key identifier: 30:2F:E1:D9:90:8B:C4:1E:DF:8B:8D:3D:3A:72:EF:4B:CB:98:15:40
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 01977C4309B591120040450C93CCA51FDE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0B08
Signing time: Tue 17 Jun 2025 05:00:57 +0000
Manifest this update: Tue 17 Jun 2025 05:00:57 +0000
Manifest next update: Wed 18 Jun 2025 05:00:57 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: 4Q95kHZfyfxsv37OH3QhJ0zLVvmBRFlpygcA3+v+mJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:43:09:b5:91:12:00:40:45:0c:93:cc:a5:1f:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Jun 17 05:00:57 2025 GMT
Not After : Jun 18 05:00:57 2025 GMT
Subject: CN=302fe1d9908bc41edf8b8d3d3a72ef4bcb981540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:03:09:43:1f:15:d9:5b:9d:45:fc:f6:d1:
65:49:d6:fc:0b:6b:e1:a9:de:6c:67:a1:39:7f:5e:
2d:44:54:f9:29:6e:9f:68:ab:4e:1d:30:45:28:aa:
65:86:a4:c0:46:14:3d:6f:4f:34:f8:78:87:97:94:
51:84:de:34:f3:bf:79:a4:65:3e:0c:5e:86:8d:81:
8c:e1:62:c5:3f:d9:e5:51:c6:e0:e1:b9:e5:51:b5:
00:98:b3:de:a5:f9:ae:69:28:ef:99:3b:80:18:2f:
cc:4e:42:2a:51:66:0d:e8:d8:ae:ca:65:67:2c:39:
8e:98:f8:54:cc:ce:a3:72:e6:22:22:7e:a5:47:7c:
89:31:27:44:98:b4:45:59:8a:de:fc:a1:aa:ba:91:
93:17:90:ac:40:15:b2:f9:24:71:7e:0f:86:6d:f6:
cc:bf:20:8e:60:cc:3d:92:4c:7c:83:b0:ae:20:d8:
49:35:d5:73:3a:fc:0b:5a:61:38:e6:b2:f6:a3:14:
24:55:5d:71:58:5d:33:0d:10:5f:d9:1b:d9:64:6d:
2b:be:56:23:2e:81:51:a7:b7:a3:de:c5:aa:cb:6c:
30:25:9f:a0:2f:33:a3:91:9e:99:f9:e1:8e:50:55:
3f:11:78:f6:3f:0c:75:45:22:8f:4e:9e:f1:51:09:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:E1:D9:90:8B:C4:1E:DF:8B:8D:3D:3A:72:EF:4B:CB:98:15:40
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:c6:98:4a:37:dc:4c:37:32:7e:7f:2e:de:01:86:a9:02:
8f:2c:a6:df:77:6e:3f:71:01:5d:a0:e1:09:d8:6f:6f:24:e7:
63:bf:fd:1f:e5:64:b3:e1:8f:ef:a8:14:2b:80:54:9d:74:c3:
fd:62:0d:14:ec:11:c8:0a:76:93:b2:9a:6b:dd:07:3c:cc:a2:
98:07:81:a3:70:ea:10:a3:62:37:20:64:8b:8f:37:47:7d:91:
46:e5:73:42:f7:e3:7b:bc:eb:5e:ec:db:8b:7d:18:53:b6:35:
a1:03:65:53:7e:07:11:83:c5:70:46:94:23:05:75:0b:e2:d8:
98:5d:45:58:f4:8c:1e:2a:ea:34:0d:62:7e:da:07:6a:5e:8f:
ae:53:ed:12:ff:bb:18:13:3a:d4:97:0b:c2:c6:e7:fb:3a:ac:
b8:4d:16:78:03:9e:dc:c7:31:2c:cd:eb:3c:87:d4:f1:e2:c3:
73:d9:e9:c3:3e:55:1b:e6:81:61:46:db:34:c6:f6:cf:62:00:
6c:4d:29:13:0c:51:f2:e6:83:9f:f1:27:6f:60:a6:98:b8:7d:
d6:27:9e:c4:7d:d5:75:b9:91:d1:ac:26:19:9e:ad:fc:9b:ae:
fd:e3:1a:1e:19:df:63:ef:79:55:48:03:4f:a9:b0:56:11:a8:
0a:b4:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:14:15 2025 by rpki-client