Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: jvQsvuCUlIPx/f6Yzil5AUhHX6IhJ0/b4V85Z0o0Boo=
Subject key identifier: 95:47:54:FC:CC:0D:BD:37:0E:89:73:2E:CE:44:E2:58:FC:50:74:E2
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 0198737417E37B1706766DF7D9B31FDC8CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0B88
Signing time: Mon 04 Aug 2025 05:00:44 +0000
Manifest this update: Mon 04 Aug 2025 05:00:44 +0000
Manifest next update: Tue 05 Aug 2025 05:00:44 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: YKUSxvBuYgCKagCMp2hzZ/+Ic0yX0FLOcuG6UVm3M1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:17:e3:7b:17:06:76:6d:f7:d9:b3:1f:dc:8c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Aug 4 05:00:44 2025 GMT
Not After : Aug 5 05:00:44 2025 GMT
Subject: CN=954754fccc0dbd370e89732ece44e258fc5074e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:f6:37:6e:72:83:65:48:47:b9:22:48:f5:
a0:09:92:53:ba:3a:b5:fc:e3:fe:cc:b9:a9:75:8e:
d9:ab:ba:aa:dc:dd:8e:6e:b2:5f:96:c5:25:73:cf:
55:96:af:38:2b:6b:ff:24:42:1a:4d:05:d4:27:6a:
33:96:90:e8:e4:33:7e:41:62:62:04:21:89:05:99:
e4:52:b8:a4:c0:79:cd:d9:49:2a:b0:07:01:69:6f:
ca:81:83:ac:19:70:0f:45:2c:31:b3:b3:db:4e:3e:
fd:75:e0:8d:b7:81:e6:b8:63:7b:15:91:72:51:d0:
a2:7c:88:de:f6:ef:33:5e:f7:4d:d9:7a:b4:37:d7:
ee:1e:5d:b9:78:87:91:56:96:78:6d:7d:d9:1d:cc:
57:5e:7d:d6:66:6a:bd:fc:9e:4f:8f:22:e1:ff:c6:
b7:ec:4a:b8:b2:bb:1e:03:39:4d:4b:fd:1f:7c:2a:
f1:9d:ee:90:b0:40:9b:4f:6e:f0:32:d6:53:41:94:
ca:5e:28:d8:82:37:33:a3:c0:85:a8:02:8f:65:8a:
3c:77:a3:df:92:d6:3a:ba:21:11:bf:79:e4:75:00:
79:c3:d7:6f:ad:22:fd:87:5a:ac:1b:02:d6:bd:71:
4e:3b:2e:ee:da:bd:f2:83:5a:e2:4d:94:11:c9:24:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:47:54:FC:CC:0D:BD:37:0E:89:73:2E:CE:44:E2:58:FC:50:74:E2
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cc:89:4d:bd:f8:40:78:18:f3:d3:9b:dd:01:f5:a2:04:27:
d5:1e:2d:16:a1:27:b3:29:80:e7:fa:5e:89:9a:3b:8f:63:ca:
17:4c:c9:c9:9c:7e:14:82:50:f1:a1:e9:8d:d0:55:75:af:65:
f1:ea:c6:cd:36:f5:bd:7f:ad:b6:21:09:17:86:f2:96:e2:ff:
2f:54:09:9f:88:0d:3d:74:46:66:e2:3b:b6:14:e6:48:58:9d:
a5:fe:7c:32:ac:c7:9b:64:99:1b:7f:82:a5:d0:c2:4f:3b:8c:
7a:90:59:b9:7b:99:9e:65:ff:81:36:ab:7c:b4:28:e9:ce:5e:
fa:49:fe:e5:7b:28:a0:7d:21:b6:56:20:89:07:c6:52:63:66:
ca:92:66:76:d3:63:60:a8:65:0f:cd:80:6f:f1:52:5b:43:b9:
e5:27:9b:87:64:20:b1:b1:5f:83:f7:c0:67:13:f3:d7:0e:15:
18:e7:74:b3:61:65:85:71:18:79:b1:f2:ba:e6:80:9e:5f:52:
00:d3:23:c5:3c:d7:f8:a8:b8:91:f9:79:c3:58:8c:0e:fc:9a:
61:7e:d4:af:2e:d3:4a:bf:af:2c:3f:66:02:09:ab:51:96:c0:
e2:bb:6d:2a:4c:8c:b0:25:d9:be:59:27:6f:e2:a4:62:09:dc:
a2:b8:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:37 2025 by rpki-client