Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: LrlBByiWZXmcmIz8rkqzzH1AfR/M59huF6VcLeN+u6Q=
Subject key identifier: F0:C3:1C:D3:27:15:00:EC:26:6C:22:49:DE:6F:70:37:93:2B:89:CC
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 0198496628FA7AD771B9B3E1573244D7CB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 11F5
Signing time: Sun 27 Jul 2025 01:01:28 +0000
Manifest this update: Sun 27 Jul 2025 01:01:28 +0000
Manifest next update: Mon 28 Jul 2025 01:01:28 +0000
Files and hashes: 1: 1-2PnzzFVpt1dGXWeYqhIzX1nVe0.roa (hash: hI/InHmZs9EbHw0E5EzTrrWOPonm9OzaUn8fi0xcF4M=)
2: ODB5K147usnzcNTK56uipc26ego.crl (hash: ydXpBVXxgmsiqqqUGKHIswCaum4CZuAJQsKKE1wNSo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:28:fa:7a:d7:71:b9:b3:e1:57:32:44:d7:cb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Jul 27 01:01:28 2025 GMT
Not After : Jul 28 01:01:28 2025 GMT
Subject: CN=f0c31cd3271500ec266c2249de6f7037932b89cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:e7:d4:f1:5b:55:d7:e4:92:fe:87:32:09:
ac:23:48:99:80:94:a9:ad:7f:8b:91:bb:2a:3e:d3:
7e:3b:b5:13:de:85:44:4f:a2:fc:40:44:23:a9:da:
4e:a6:5c:04:fc:df:31:fc:fc:d5:8e:fe:a8:d8:46:
a0:c8:84:c9:b2:6b:6d:ec:8a:b3:d3:22:42:8b:3f:
6b:14:13:f3:21:74:c7:bc:7a:18:e1:0b:26:6c:3d:
ba:09:d2:db:bc:64:a0:7d:02:9b:07:c2:7a:0b:8a:
ee:1d:93:b3:5e:a2:08:c2:c0:60:8e:03:11:cc:56:
2c:33:30:91:bd:8c:d6:9c:66:1d:b2:f8:71:87:b5:
8f:cf:1c:13:7c:2c:93:f4:73:db:de:3c:0a:bc:f5:
67:62:89:3d:90:40:8d:9d:1d:b1:08:84:9a:8a:0b:
f5:45:8a:0a:63:14:90:e0:f5:80:34:7d:eb:a9:a0:
50:0a:94:17:86:d4:2c:e6:55:63:e9:b9:c5:5f:79:
c1:1e:fc:a3:e8:36:b0:a9:bc:9a:17:0c:65:01:b7:
a8:90:32:b7:0e:1e:34:7d:9e:e3:89:60:21:fa:fd:
6a:e4:ad:8c:a7:82:af:a7:47:93:30:bb:0a:8e:93:
9d:6e:1c:e8:98:83:d8:57:a4:ce:96:84:31:c4:2d:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:1C:D3:27:15:00:EC:26:6C:22:49:DE:6F:70:37:93:2B:89:CC
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cf:5d:0d:59:33:dc:95:8b:53:66:c3:67:81:8f:73:94:8e:
29:05:13:fb:e2:7c:68:27:a5:7f:ce:2b:03:89:0f:6e:e1:42:
76:8d:85:38:93:81:ee:0c:20:90:61:75:40:1b:8e:74:c3:d5:
b1:a4:2c:6b:84:40:15:ac:99:92:e1:c1:76:6b:8f:98:ab:37:
34:0d:1f:27:20:71:53:a4:e8:c1:83:7c:56:91:ac:33:c1:9f:
a3:5d:c8:c2:f9:9d:42:e4:52:00:95:af:2d:69:c0:3b:97:22:
6a:c8:0a:fa:31:3c:ae:8a:a2:fc:95:33:f5:51:66:0f:e3:0d:
f6:b0:17:8a:54:6c:ec:c1:47:c4:86:6e:1d:79:29:6c:f5:0d:
20:e2:c3:5b:ab:c6:77:1d:32:ee:28:01:c0:bb:21:15:51:32:
d2:c7:c4:86:a7:c8:92:f1:ce:bb:9f:1d:d5:a7:f4:ef:94:dc:
29:09:9f:fe:bf:19:30:0d:b7:ce:15:24:50:2b:5e:8d:2d:3c:
04:fe:b4:17:57:f7:76:6f:ef:b9:5f:8a:82:ff:4a:3f:9f:9a:
21:18:fc:03:f6:47:ea:d8:93:b0:2a:7b:ef:cd:c7:e1:b8:e2:
a5:a2:03:22:11:9c:ce:94:8d:a5:aa:24:be:1b:4e:08:a3:37:
c1:05:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:48 2025 by rpki-client