
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File: odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier: 24PmgTItHXBUwqrztuU27EaIpOjELjI5VGibQCkivws=
Subject key identifier: 95:9F:B7:D6:BE:19:79:FF:97:74:48:BE:1B:78:B9:38:0A:F0:47:CD
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 019873064C952AF4F101805602882419E0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 03:00:49 +0000
Manifest this update: Mon 04 Aug 2025 03:00:49 +0000
Manifest next update: Tue 05 Aug 2025 03:00:49 +0000
Files and hashes: 1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: xUHiecGeaR8MM/KWqkjfO4LPgaL/iGYesmSfRd9r6tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:4c:95:2a:f4:f1:01:80:56:02:88:24:19:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Aug 4 03:00:49 2025 GMT
Not After : Aug 5 03:00:49 2025 GMT
Subject: CN=959fb7d6be1979ff977448be1b78b9380af047cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:e5:14:e2:35:97:a6:f1:a8:b0:9a:24:28:
b2:76:c1:b7:93:e4:e8:73:be:29:e4:e4:f4:96:f2:
23:95:f5:fa:63:b1:0f:a0:16:07:da:cb:6d:86:b7:
93:96:06:b2:6b:ea:95:91:dd:bd:66:a7:ca:7f:26:
94:48:48:10:d1:62:b0:90:75:76:6a:ab:e2:df:51:
30:3c:54:70:bd:bd:c3:73:1b:35:73:e1:88:2c:e0:
b2:4a:73:03:f9:ea:e7:73:2c:7f:60:57:c6:62:ed:
87:5e:44:f2:14:35:6d:cd:41:14:bd:ac:a6:e0:1c:
72:6a:37:08:66:3f:c8:9a:27:c2:37:a3:6a:ee:72:
ac:e0:7b:59:50:af:07:28:71:ab:de:81:53:3f:ce:
3f:eb:0c:16:71:f9:4e:f9:db:e3:e7:87:04:b1:83:
83:ad:0b:c9:78:67:d9:ca:c9:66:c3:1e:9f:75:78:
5c:b3:5f:33:07:ad:db:26:fb:35:a2:d8:4b:38:01:
96:18:9b:91:9c:cd:9c:35:34:b7:67:fd:61:d1:07:
37:00:47:9e:4d:3c:24:fd:ca:96:f3:91:6e:11:ae:
3d:b4:4a:55:e1:60:12:eb:56:4e:dd:88:3d:50:8d:
99:3e:98:95:2a:ca:72:05:29:3c:64:cd:d4:d5:57:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:B7:D6:BE:19:79:FF:97:74:48:BE:1B:78:B9:38:0A:F0:47:CD
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3e:bf:6e:61:fe:ff:9a:d9:8e:6a:ed:23:50:f3:b3:f2:de:
02:39:f9:94:34:d2:dc:df:90:3f:96:73:b7:af:88:9c:27:2f:
f5:69:cb:16:27:6b:11:dd:08:a8:66:7c:2e:96:0b:25:f6:89:
a4:75:55:b8:08:52:d1:9c:e4:3d:06:9f:d9:a8:9a:5c:9b:7b:
8a:9c:09:e1:f3:1b:b1:9c:84:12:11:95:f4:9f:ec:27:17:ec:
0b:1c:32:0f:1c:25:af:61:5b:1f:95:e0:43:0f:2b:f9:fe:23:
a7:39:63:97:b2:7c:8f:fa:67:47:7f:5a:89:2f:d5:a1:69:59:
44:6b:cd:ea:e8:23:38:70:05:48:3e:f3:f9:49:7b:f1:89:0c:
f9:ec:29:71:e6:5d:ac:0d:74:fb:0c:77:84:08:be:00:18:91:
63:ea:3c:cc:c5:b2:f4:92:c1:74:6a:39:b1:67:2c:83:00:1a:
08:28:64:ad:85:53:4b:e9:80:a9:e7:f9:0e:f2:86:0a:96:ea:
7d:a5:d0:d3:2d:02:d9:1b:ec:5f:14:07:8c:4a:b8:94:7d:3f:
b0:85:46:1f:61:b6:d6:31:ee:4d:8a:be:44:e1:d2:ba:69:a6:
6e:bf:79:89:60:97:a2:0d:70:af:85:62:71:08:0f:e2:65:90:
c0:64:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:56 2025 by rpki-client