Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: HQoFkqFcWw+0yb+BXwo23N9bw6o4/up0gpG4ZYaxVmA=
Subject key identifier: 1B:DE:09:5B:21:01:58:26:90:15:75:17:4F:43:00:39:5C:FE:12:9F
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019848F78A08A6CFDE943419A2EF9F4CC962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0B72
Signing time: Sat 26 Jul 2025 23:00:38 +0000
Manifest this update: Sat 26 Jul 2025 23:00:38 +0000
Manifest next update: Sun 27 Jul 2025 23:00:38 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: sIL3Ioc0vKz7wA/g/jMkGEPA4IHxsz4VLMqJCLPIuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:8a:08:a6:cf:de:94:34:19:a2:ef:9f:4c:c9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Jul 26 23:00:38 2025 GMT
Not After : Jul 27 23:00:38 2025 GMT
Subject: CN=1bde095b21015826901575174f4300395cfe129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:da:d2:b1:02:a0:9b:86:78:dc:06:84:95:
81:fe:66:9a:45:b9:9a:c0:9a:b1:2a:6c:06:34:e7:
87:87:ec:84:98:13:8e:ce:e4:7e:0d:b3:0f:1f:52:
d8:16:96:0e:25:17:a0:b4:e3:b9:11:75:49:34:c5:
88:91:c6:65:84:22:a1:03:46:b7:6d:d0:75:82:6c:
c3:3c:1a:e7:4a:1e:40:0c:1f:a2:09:3b:bf:3e:d4:
e0:ca:31:eb:4b:7d:a0:de:80:17:14:6f:50:ec:05:
85:f1:7c:16:c2:be:c2:22:cd:30:6b:67:a4:d1:74:
a3:a7:22:3e:27:ff:03:69:fa:98:04:3c:51:be:d2:
51:19:e6:3c:31:ba:cc:ce:35:d6:e1:18:61:22:a6:
22:c2:13:23:96:96:8c:d2:61:50:01:37:da:58:af:
26:b6:dd:43:c2:0e:b5:6f:30:a9:e4:c7:25:4e:e7:
cd:f0:b5:ce:cd:4f:1c:c6:72:bb:58:44:9a:ce:7a:
5e:d9:4f:a6:8d:17:1d:71:d1:0d:98:17:92:3d:07:
9a:7a:96:1e:6a:c5:a2:dc:56:60:e2:30:59:02:00:
a7:2e:67:73:d4:77:b7:1f:ad:9a:34:83:8c:c2:af:
f2:63:55:fc:ed:e6:74:d5:aa:cb:5c:ed:f7:5e:6f:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DE:09:5B:21:01:58:26:90:15:75:17:4F:43:00:39:5C:FE:12:9F
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:de:cc:0e:cd:25:eb:d1:e3:5a:6b:3b:6e:c9:9d:32:af:
c6:42:50:92:a3:39:46:64:11:32:94:87:ec:2a:1f:4a:64:f0:
b7:0a:8a:73:08:8d:0a:80:9c:52:0c:95:20:5c:21:8b:f1:da:
3e:e6:10:81:ca:d2:b4:20:20:ae:0a:2d:4d:90:38:3e:62:7d:
c7:7f:d0:15:59:15:95:e1:75:6e:4b:06:52:3f:80:9b:7a:1c:
0f:09:9c:da:6a:5f:ee:0a:a2:aa:1f:e5:f0:6a:6e:af:46:9b:
cc:95:da:00:4a:97:79:65:25:07:30:97:c5:ae:a0:cb:2b:95:
10:1f:9e:b6:6d:38:fc:20:5c:c7:40:ad:03:7d:bb:b7:66:ed:
1c:af:63:0e:8f:bd:7d:1a:2b:2e:7c:97:78:94:b8:e5:76:e6:
3d:35:e5:fd:8c:fa:bc:7f:24:50:4f:4c:30:03:af:b8:0e:37:
e2:06:8c:14:a1:0d:55:fa:dd:05:1b:24:2c:33:7e:52:e0:98:
5a:c2:fb:f0:ce:ba:38:9d:af:14:8d:53:b2:5e:9c:9a:ef:b7:
73:b1:fc:ab:ae:af:aa:ee:ad:8c:d8:7d:5c:89:c8:5a:c5:c0:
1b:75:59:30:f1:43:18:7c:18:05:52:ce:4a:16:2e:a7:80:71:
14:e1:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:27 2025 by rpki-client