Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: jdNaX6+ROb0a4UyEfi5P0yjrF84VLEXqCqcZ8AbwSt0=
Subject key identifier: 1E:B5:93:EE:2E:F2:24:42:6B:0E:5B:78:60:8E:77:EC:7F:70:83:F1
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 0198752C11B0A36FEE7A7FF2C5E846B9FD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 13:01:18 +0000
Manifest this update: Mon 04 Aug 2025 13:01:18 +0000
Manifest next update: Tue 05 Aug 2025 13:01:18 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: L2GcWpyxAfwR0U4yOG7G5nbcaZBQybWzwUc7junCGs0=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:11:b0:a3:6f:ee:7a:7f:f2:c5:e8:46:b9:fd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Aug 4 13:01:18 2025 GMT
Not After : Aug 5 13:01:18 2025 GMT
Subject: CN=1eb593ee2ef224426b0e5b78608e77ec7f7083f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:b3:04:2e:37:9f:2c:96:3c:42:d8:7b:bc:
55:72:11:c0:22:8c:dc:71:af:09:f1:b5:56:97:b3:
d6:60:90:88:03:1d:19:68:8c:4e:4b:5f:35:de:00:
70:8b:fa:59:09:c9:8d:5b:33:3b:01:e3:1d:28:d3:
6f:10:f6:80:66:60:0c:55:fa:60:1c:91:d0:88:ae:
ff:88:d4:31:a3:e3:64:1f:03:82:78:62:44:6c:0f:
88:f0:8a:7d:6f:88:95:75:cf:17:c2:78:93:34:86:
10:64:57:6f:4b:14:2a:c6:3c:8e:91:e6:5d:43:65:
fa:85:c0:d8:73:15:7e:a5:40:47:28:b3:a5:93:a3:
01:f8:16:83:91:c9:61:11:28:e7:bc:f9:50:a2:4b:
25:e9:6f:4f:f6:a7:8a:de:72:04:33:2d:22:57:4e:
7b:b1:3f:46:c1:cf:e8:bf:c1:35:d5:d6:78:32:bc:
09:f9:d9:80:3b:8f:c7:2d:8e:59:ea:63:6d:c9:61:
78:e8:5f:3b:33:f5:67:f5:95:11:b5:18:43:82:ac:
ac:1b:d9:4a:f2:31:75:72:a5:4c:91:95:ad:5e:56:
84:66:0a:80:28:2f:82:d3:65:aa:10:c0:c6:5c:34:
25:11:79:3d:2d:8e:72:4b:c7:02:f2:75:b8:db:c2:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B5:93:EE:2E:F2:24:42:6B:0E:5B:78:60:8E:77:EC:7F:70:83:F1
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:aa:39:e3:3e:f4:2b:01:18:d0:96:4d:fc:fc:b4:cf:30:
51:d4:d0:d1:e7:be:dd:62:2a:96:3d:f3:30:80:c0:5a:1a:aa:
d1:b4:58:fc:34:a0:32:10:eb:56:06:5c:3c:5c:3c:fe:48:b7:
24:5a:33:9a:8a:ae:fc:b0:6e:6a:7f:76:97:86:e8:49:53:4d:
31:8f:00:a3:de:8f:0e:90:22:2f:a6:3d:78:36:a4:11:04:9c:
ba:63:6f:5d:da:31:43:3d:be:27:76:9d:1b:17:73:61:fe:c0:
2e:67:92:91:ed:3c:9e:5e:97:35:3d:c7:80:5c:e9:bf:8c:b9:
89:57:16:98:c6:96:7b:d7:d3:93:e1:ec:a0:19:78:6a:a5:a7:
27:b2:9d:80:a3:09:62:a0:ac:79:4d:b1:e1:71:c1:ea:2b:45:
d0:93:3d:e4:75:96:6f:b9:20:46:b6:ab:fa:0d:7d:19:db:b0:
55:f4:15:e7:64:53:e6:2b:50:37:86:5e:bd:e2:04:80:97:ee:
7d:26:ea:6e:9c:6f:8f:fe:42:a9:e9:83:65:eb:5d:61:2d:54:
2a:e3:57:b8:c7:86:a6:d0:f1:85:ea:50:68:c2:a2:86:f7:71:
77:a1:d1:ba:ca:f5:71:96:dc:92:f6:05:26:62:87:5a:00:65:
cb:74:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:04 2025 by rpki-client