Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: HNcaBRunJhYl6RNigshmLJMz9Ep1sSNDXMCiFtgS1Aw=
Subject key identifier: EF:FD:02:F4:E6:BC:D5:2E:E2:B4:61:64:79:71:DF:91:C7:17:57:AE
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 01984BC13415E06EBFB2FB5760BF0BBC9E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0A4E
Signing time: Sun 27 Jul 2025 12:00:09 +0000
Manifest this update: Sun 27 Jul 2025 12:00:09 +0000
Manifest next update: Mon 28 Jul 2025 12:00:09 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: KafHw7MOtLtkGArSRmP5TuCjRJMLeI3FHuuG5xuG0GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:34:15:e0:6e:bf:b2:fb:57:60:bf:0b:bc:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jul 27 12:00:09 2025 GMT
Not After : Jul 28 12:00:09 2025 GMT
Subject: CN=effd02f4e6bcd52ee2b461647971df91c71757ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:1d:2c:7e:30:e8:5e:73:81:ff:61:9d:66:
36:fc:47:8c:e7:4c:2c:06:c2:7e:6c:db:5c:a6:b1:
c3:4c:c0:f6:f8:91:21:df:e6:af:2b:16:e9:5d:7b:
36:32:87:a7:3f:90:16:51:3d:b6:91:2a:f6:81:32:
14:b1:e0:97:b0:61:dc:72:95:31:84:e0:b1:2e:9a:
aa:5c:2a:6c:70:d6:2b:9f:ee:ea:93:be:77:d4:0b:
f9:fb:00:49:f9:97:1b:d9:57:eb:9c:f7:a3:79:6c:
91:e2:46:00:9d:2d:8a:8c:65:5d:7c:f3:06:3f:35:
da:a3:3a:cd:41:15:f4:cd:86:66:d9:d3:7e:76:28:
35:f7:a1:ba:81:5b:ee:5a:78:68:de:55:6a:97:44:
b7:20:18:5d:e9:da:2c:c7:0c:82:45:c0:ec:ed:c9:
9d:f0:5c:74:1e:48:1b:82:79:c8:12:0c:24:92:a1:
b3:00:73:f6:3a:3b:1a:0e:8a:3d:16:0e:96:c9:d4:
04:6c:86:4b:c6:5e:ff:0a:dd:8c:76:3b:a7:a0:a9:
b9:4a:e5:b6:78:17:84:74:bd:db:92:f4:c3:80:c5:
c5:33:a0:86:ac:03:45:0d:13:1f:16:ae:b5:53:59:
92:5c:9b:7f:96:5b:20:02:6a:03:90:ae:76:a3:e9:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:02:F4:E6:BC:D5:2E:E2:B4:61:64:79:71:DF:91:C7:17:57:AE
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ca:d5:5d:f0:73:a8:8f:90:fe:98:87:18:24:c8:3d:6d:09:
c3:9f:eb:d6:41:e0:d8:79:4f:61:db:17:b3:bf:ef:79:83:93:
d5:63:a5:56:4a:fc:05:75:ca:92:0b:b4:fd:28:47:fe:b1:83:
27:20:df:9a:fa:80:0e:bd:c9:3b:a8:88:de:c8:c0:25:8c:3c:
cc:90:ca:9d:49:5e:b7:11:df:df:91:e1:84:60:72:7a:24:d4:
65:7d:28:f0:f8:7b:88:e7:5f:cb:4f:5c:3f:eb:f5:a3:bc:54:
3b:95:ce:4a:48:a3:a2:66:97:3d:ef:01:3e:78:e9:cf:0f:f4:
05:52:61:e4:a4:5c:c8:9a:1c:eb:a8:4d:ec:09:db:7c:0b:46:
11:1c:7b:78:fd:1d:12:55:6e:2d:b4:a0:61:30:42:c3:9b:e7:
80:78:08:92:60:39:6e:1a:f2:f9:93:d7:9b:7e:46:61:aa:f8:
3d:79:ab:f9:05:c5:ca:01:f7:03:af:75:43:05:cd:1d:c4:c9:
d2:e1:88:2c:11:c8:5c:6d:0e:eb:b0:77:ab:1c:63:85:90:74:
6e:1a:79:bd:6a:20:79:d9:a7:d4:b4:7f:77:e9:7e:fc:88:4b:
f7:12:45:4b:84:4d:2e:cd:3c:e2:4a:f5:99:f4:2c:2f:51:c0:
27:3a:f8:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwTQV4G6/svtXYL8LvJ6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm
Y2M1ZTIwHhcNMjUwNzI3MTIwMDA5WhcNMjUwNzI4MTIwMDA5WjAzMTEwLwYDVQQD
EyhlZmZkMDJmNGU2YmNkNTJlZTJiNDYxNjQ3OTcxZGY5MWM3MTc1N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrQdLH4w6F5zgf9hnWY2/EeM50ws
BsJ+bNtcprHDTMD2+JEh3+avKxbpXXs2MoenP5AWUT22kSr2gTIUseCXsGHccpUx
hOCxLpqqXCpscNYrn+7qk7531Av5+wBJ+Zcb2VfrnPejeWyR4kYAnS2KjGVdfPMG
PzXaozrNQRX0zYZm2dN+dig196G6gVvuWnho3lVql0S3IBhd6dosxwyCRcDs7cmd
8Fx0HkgbgnnIEgwkkqGzAHP2OjsaDoo9Fg6WydQEbIZLxl7/Ct2MdjunoKm5SuW2
eBeEdL3bkvTDgMXFM6CGrANFDRMfFq61U1mSXJt/llsgAmoDkK52o+m9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/9AvTmvNUu4rRhZHlx35HHF1euMB8GA1UdIwQY
MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt
NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw
LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsrVXfBz
qI+Q/piHGCTIPW0Jw5/r1kHg2HlPYdsXs7/veYOT1WOlVkr8BXXKkgu0/ShH/rGD
JyDfmvqADr3JO6iI3sjAJYw8zJDKnUletxHf35HhhGByeiTUZX0o8Ph7iOdfy09c
P+v1o7xUO5XOSkijomaXPe8BPnjpzw/0BVJh5KRcyJoc66hN7AnbfAtGERx7eP0d
ElVuLbSgYTBCw5vngHgIkmA5bhry+ZPXm35GYar4PXmr+QXFygH3A691QwXNHcTJ
0uGILBHIXG0O67B3qxxjhZB0bhp5vWogedmn1LR/d+l+/IhL9xJFS4RNLs084kr1
mfQsL1HAJzr4cg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:42:26 2025 by rpki-client