Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: OKHo6P0naIPa5bBj12KH4aSUXLWXKRzug6Jh+dY8JOk=
Subject key identifier: 0E:85:F7:2F:E8:EF:61:07:0D:5B:6B:66:76:A4:52:CE:0F:18:AE:B9
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019768BC137A55469313719E115C37E9C0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:45 +0000
Manifest this update: Fri 13 Jun 2025 10:00:45 +0000
Manifest next update: Sat 14 Jun 2025 10:00:45 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: N7SZBrhitvJQ+8naKhzx7mY59WxFY/bNhvyhHjyDzNI=)
2: XHu_MLGiiIwtync8aurFr7T_kLw.roa (hash: GNnYK051qhc0CaVwirSGryQmdmLkk49r5lW5NyG95ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:13:7a:55:46:93:13:71:9e:11:5c:37:e9:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Jun 13 10:00:45 2025 GMT
Not After : Jun 14 10:00:45 2025 GMT
Subject: CN=0e85f72fe8ef61070d5b6b6676a452ce0f18aeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:06:ae:fc:40:fe:ef:c4:ba:31:76:99:d4:
19:44:47:38:a6:2b:a0:a7:0e:77:8f:f0:58:78:35:
b3:74:9a:f6:76:8f:18:54:36:86:08:e1:d7:17:e5:
7d:1f:a3:69:c2:aa:2a:e9:04:5c:68:9a:55:a0:83:
d7:af:6e:15:ae:39:5b:9e:fa:bc:2f:d2:fe:f6:7a:
10:c0:91:25:7e:27:f3:28:a2:93:84:82:ee:5c:b2:
8c:db:84:d1:14:b8:f6:cf:33:22:e0:f8:fd:d6:dc:
b3:31:bd:6b:45:93:e9:8a:8e:0d:f0:69:5d:fc:5a:
ce:96:7a:0b:e6:60:df:3d:a6:0b:a6:71:97:0a:7f:
69:ed:68:65:99:29:23:f0:b6:41:c0:15:f0:09:13:
3d:8d:4b:6d:cc:9d:e3:a5:07:87:09:85:96:a1:a5:
4d:87:40:3d:de:e6:4b:3b:e3:e4:47:f0:f7:ab:b7:
3f:e7:88:44:62:97:5c:64:24:79:81:13:bb:3e:68:
b4:46:14:ac:f9:e5:e6:65:2d:82:74:e8:25:a1:be:
f5:13:b6:28:b5:d4:f5:b7:cf:ba:51:63:04:94:6e:
46:59:01:e6:d7:93:f6:40:74:0b:09:aa:10:b1:45:
72:d3:05:28:9e:d4:37:42:1f:9f:9d:a4:4d:2f:60:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:F7:2F:E8:EF:61:07:0D:5B:6B:66:76:A4:52:CE:0F:18:AE:B9
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:37:d2:5f:e5:60:a4:46:90:89:bf:ab:a0:da:de:c6:63:42:
bf:58:c6:8f:55:0f:11:3d:fd:e4:60:ff:1e:56:c7:47:84:14:
44:dd:68:57:bf:52:8a:54:cc:56:52:90:8c:ae:e5:cc:ca:b2:
4e:da:ce:16:e1:dd:91:da:1b:a9:2b:56:03:cc:0b:84:2b:dc:
d5:4f:ad:e8:c2:56:38:43:a0:c2:bf:c2:08:e4:2f:41:91:da:
83:b5:e3:0f:9b:88:6b:18:ea:38:7f:62:5c:b8:3b:44:74:88:
71:9e:2e:78:cb:7c:71:c3:3a:9b:27:b7:35:b2:4d:45:b8:7d:
8c:35:10:5d:d2:fa:40:70:0f:4e:05:1d:9a:b9:93:21:91:fe:
4b:3f:6a:92:18:19:3c:8c:66:dc:97:8a:db:03:bd:cc:99:87:
d8:94:a7:04:b8:51:ff:9e:8a:e5:18:7c:9c:48:88:45:6d:cd:
b0:94:60:e4:15:f0:43:83:6a:f5:cd:5e:8b:cf:a1:b2:b6:65:
e4:f4:db:e2:85:3d:e5:ed:2b:3c:0f:bd:60:6f:9f:a7:1b:f3:
35:58:9b:da:08:12:d6:97:e7:54:1c:db:99:90:c9:dc:d3:8f:
7e:12:c4:41:ba:08:e4:7f:36:64:07:30:83:5a:1e:4e:60:ab:
05:da:72:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovBN6VUaTE3GeEVw36cCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl
NDM3OTMwHhcNMjUwNjEzMTAwMDQ1WhcNMjUwNjE0MTAwMDQ1WjAzMTEwLwYDVQQD
EygwZTg1ZjcyZmU4ZWY2MTA3MGQ1YjZiNjY3NmE0NTJjZTBmMThhZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPsGrvxA/u/EujF2mdQZREc4piug
pw53j/BYeDWzdJr2do8YVDaGCOHXF+V9H6Npwqoq6QRcaJpVoIPXr24Vrjlbnvq8
L9L+9noQwJElfifzKKKThILuXLKM24TRFLj2zzMi4Pj91tyzMb1rRZPpio4N8Gld
/FrOlnoL5mDfPaYLpnGXCn9p7WhlmSkj8LZBwBXwCRM9jUttzJ3jpQeHCYWWoaVN
h0A93uZLO+PkR/D3q7c/54hEYpdcZCR5gRO7Pmi0RhSs+eXmZS2CdOglob71E7Yo
tdT1t8+6UWMElG5GWQHm15P2QHQLCaoQsUVy0wUontQ3Qh+fnaRNL2DrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6F9y/o72EHDVtrZnakUs4PGK65MB8GA1UdIwQY
MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct
MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4
LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzfSX+Vg
pEaQib+roNrexmNCv1jGj1UPET395GD/HlbHR4QURN1oV79SilTMVlKQjK7lzMqy
TtrOFuHdkdobqStWA8wLhCvc1U+t6MJWOEOgwr/CCOQvQZHag7XjD5uIaxjqOH9i
XLg7RHSIcZ4ueMt8ccM6mye3NbJNRbh9jDUQXdL6QHAPTgUdmrmTIZH+Sz9qkhgZ
PIxm3JeK2wO9zJmH2JSnBLhR/56K5Rh8nEiIRW3NsJRg5BXwQ4Nq9c1ei8+hsrZl
5PTb4oU95e0rPA+9YG+fpxvzNVib2ggS1pfnVBzbmZDJ3NOPfhLEQboI5H82ZAcw
g1oeTmCrBdpyaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:26 2025 by rpki-client