Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: mIkMT+pArj4oUWkvnGS6K+7Uz/IokvuPAKtSy17PGRs=
Subject key identifier: 46:AA:C4:83:CC:DD:9F:9D:4F:83:EB:AB:4D:1E:8B:64:8B:6F:CA:B8
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 01984664056D6BD09CF1995CEFD24140AC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 0547
Signing time: Sat 26 Jul 2025 11:00:16 +0000
Manifest this update: Sat 26 Jul 2025 11:00:16 +0000
Manifest next update: Sun 27 Jul 2025 11:00:16 +0000
Files and hashes: 1: eAUsqio3gBfmNb6-utIzUr7aZng.roa (hash: uitRV+QEa1rnNZo9/bqmtkICrxnt46Ad8T68cujpvFM=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: gKcDb0L0ido1jl5K8rfP7YSz3IfqUU7qy0nSSdVcKkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:05:6d:6b:d0:9c:f1:99:5c:ef:d2:41:40:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Jul 26 11:00:16 2025 GMT
Not After : Jul 27 11:00:16 2025 GMT
Subject: CN=46aac483ccdd9f9d4f83ebab4d1e8b648b6fcab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:31:4e:e4:70:14:6e:b3:3f:d3:b4:65:e5:
ff:89:cb:48:84:76:b2:ce:d9:64:7d:c6:9c:67:8f:
c0:eb:f5:90:24:66:86:31:b7:fa:69:db:94:13:a0:
07:29:32:b9:17:29:9e:81:5c:2f:82:d2:12:6c:eb:
28:ad:9f:01:37:ba:d2:c1:f7:98:da:96:0e:c6:92:
e7:81:a0:54:a6:f9:3c:fc:1b:6f:e2:4f:88:3f:59:
50:35:8b:38:ca:bd:3f:e4:07:40:d8:8b:42:a1:78:
49:94:f6:e9:c7:f1:d2:03:8a:3c:97:f2:85:fe:1c:
f7:b6:2d:55:1c:b8:0d:fd:61:e4:0f:54:6c:37:d5:
e8:65:c8:62:93:2c:0d:8b:f2:a2:e3:4e:b0:c2:c1:
f0:e2:01:4a:8f:6c:e7:50:f5:c9:4c:d5:26:6e:5c:
3d:51:e8:a6:dc:c3:9f:7e:b7:f5:a9:cc:76:4c:a2:
0c:55:7b:de:a8:a9:4a:a1:fd:61:97:f0:b8:69:a7:
e4:9f:0d:5d:f2:6b:97:44:07:23:d0:a0:52:ac:38:
58:61:2d:51:2b:f1:03:66:ad:8b:b4:9c:e2:ae:c8:
6d:6f:92:11:66:fb:ba:b5:b5:37:80:85:1d:54:e0:
52:b9:cb:af:64:41:dd:cb:95:38:08:a5:cc:8a:38:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:C4:83:CC:DD:9F:9D:4F:83:EB:AB:4D:1E:8B:64:8B:6F:CA:B8
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3f:21:a8:28:bd:a9:2d:0c:5f:9d:79:a3:9d:4b:8a:3f:1f:
de:c4:93:02:22:39:33:97:54:ef:6f:f7:20:b1:99:7d:93:a8:
54:90:52:51:db:a5:6e:0f:ed:1d:e9:98:d5:89:a2:18:81:fc:
fe:76:bf:e7:01:41:f5:1b:94:d0:a1:e6:b8:4b:10:f6:82:06:
b5:4a:bc:47:4a:92:ca:56:dd:38:2f:5b:82:ee:9d:29:c1:45:
f5:00:9c:81:cd:52:db:70:c6:ce:66:6a:d6:eb:bd:3c:3f:fd:
dc:70:5e:5d:5f:4c:1e:5e:7e:8f:1c:f3:93:21:4f:26:74:8c:
c3:6c:d7:e4:c8:85:22:45:5a:96:a9:b3:52:1a:6c:bf:31:85:
95:b0:71:0d:8e:92:a4:2c:8f:66:24:82:9b:28:25:83:18:41:
a6:03:81:e9:2f:4e:f7:bf:da:2c:12:7d:e5:77:31:e3:d2:c1:
b8:4a:6d:1e:cb:e5:f3:f5:74:5c:f5:71:26:1f:8c:8a:76:27:
7a:68:e4:23:e4:42:d4:4d:22:38:c4:8a:b7:05:10:ce:56:1c:
47:43:5c:40:e0:dc:c7:16:e3:e5:b0:fa:17:d0:fd:b3:99:5a:
08:2c:66:af:40:f7:7e:58:f9:16:13:eb:8a:a3:13:5b:ba:1a:
92:bd:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:52 2025 by rpki-client