Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: 7QG/DzMwtswg2vLMbtqDBNZ9vfoRK2Mybc92Kt1koHs=
Subject key identifier: 11:63:5A:2D:C9:F3:92:88:3D:C4:9D:9A:03:D8:F7:EA:35:F6:87:24
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019833824BBC7292EF2D8BE5A43BB10750F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 12D9
Signing time: Tue 22 Jul 2025 19:00:33 +0000
Manifest this update: Tue 22 Jul 2025 19:00:33 +0000
Manifest next update: Wed 23 Jul 2025 19:00:33 +0000
Files and hashes: 1: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=)
2: XJPUj_synwIHQp7bRuj9018K67k.roa (hash: nLvY6PY+U32R2cW/5HWGZNjEV3iPA1E/ctSR2ZD+DlI=)
3: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=)
4: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=)
5: bRrBdVXDfDlmQ55hIkpnpFvL7Aw.roa (hash: oZaZC9lyTB9y6jZROEHfFBusKOrfqQ6zAsKgcXoVbwA=)
6: luxlDaP5S8ObPuSdfGG5jYy9i5M.roa (hash: 77j6FmpQDyTfoFeeOD1e16nzr03VwpDOQuhMjxPM3Tg=)
7: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: j6yY5wrSFPT7DFVmdMCcbWKyBPXxLwS0p7/BeHvxqy8=)
8: v4n00KmIPMAeaXO1e4oehEUWYOs.roa (hash: 7qEK4cAhcKMrkHzInLLOjuudGbx99FNXFdW89sFY/Us=)
9: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:82:4b:bc:72:92:ef:2d:8b:e5:a4:3b:b1:07:50:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 22 19:00:33 2025 GMT
Not After : Jul 23 19:00:33 2025 GMT
Subject: CN=11635a2dc9f392883dc49d9a03d8f7ea35f68724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:f7:ec:ac:7a:90:4d:f8:c1:9b:e2:fb:ef:
d0:43:85:6a:2c:12:1b:5a:64:a4:3c:d4:ef:51:38:
c7:24:0c:5c:cb:e8:48:ea:8d:7f:e5:e3:d7:ba:c5:
d3:71:ec:d1:72:49:01:a2:32:ce:70:d9:ba:7d:10:
53:fe:6c:05:76:10:77:0b:26:43:bc:25:81:1a:97:
ae:ff:ae:0e:40:6e:e9:2a:3a:8c:c2:af:5f:f3:9f:
a9:b6:e0:c0:3f:ca:23:79:ae:52:cf:5d:a9:65:5a:
40:82:64:69:50:ac:12:8a:01:20:c0:74:7f:da:cf:
7b:28:6f:a0:9b:13:bf:4c:9d:81:45:76:b2:e7:a3:
25:42:1f:b2:10:88:f8:1c:a5:9d:fb:e9:c4:12:bf:
2f:26:01:c3:9b:23:f9:19:a2:f3:d5:53:5d:27:78:
f0:a5:68:1d:75:cf:12:bb:9a:50:46:d4:33:63:73:
c9:58:aa:70:07:06:d0:4f:c0:39:a9:52:d0:e5:9f:
a9:0f:f4:db:bb:78:72:dd:61:b5:84:a5:ad:8e:d5:
8f:e9:7b:a9:7d:22:f4:41:1f:ad:9a:54:87:0f:6e:
f6:ee:1a:30:3c:fa:52:ce:99:b9:59:58:8d:cc:58:
61:a5:c5:71:ad:93:ec:c6:ae:42:10:66:27:12:52:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:5A:2D:C9:F3:92:88:3D:C4:9D:9A:03:D8:F7:EA:35:F6:87:24
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a9:3e:c7:a9:63:c5:82:46:03:77:11:6e:1f:1c:68:60:55:
ed:4c:59:d9:2f:10:78:b0:4e:6a:7d:34:e0:a4:0a:b2:ec:a1:
7a:26:9b:05:ad:79:fc:35:21:7b:23:e8:31:bd:80:b1:a0:8b:
e5:38:d3:6d:c6:ff:f8:81:89:ab:4d:0a:0c:ad:8d:df:82:1e:
0c:bb:66:a0:fc:ff:71:95:71:02:fa:64:f7:98:ee:b8:03:ab:
7f:cf:31:1b:c5:35:48:e6:fd:64:5b:57:05:36:f4:8e:11:f9:
92:48:39:24:50:4d:7e:65:42:3b:73:6b:0b:cb:83:0b:9e:ae:
88:cf:ef:2e:51:eb:44:f6:9c:68:25:57:65:41:1f:05:ae:aa:
61:8f:77:a8:8d:3e:bb:51:82:3d:73:33:d3:57:ae:0f:a1:e5:
c5:76:ef:68:38:ee:db:6c:16:7f:b8:9b:38:8f:3f:3a:84:ac:
db:a3:ea:02:62:25:a5:88:37:cc:27:2a:fd:44:a3:79:0f:6a:
c7:ea:b6:96:56:99:28:36:1b:93:34:51:fe:17:57:d6:09:b9:
17:cb:7a:88:68:61:23:24:cb:e0:63:14:51:46:42:f1:fa:e4:
cc:d2:0a:42:55:3d:19:aa:d4:66:46:27:6b:35:bb:be:85:e2:
ef:cf:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:46:11 2025 by rpki-client