Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: EuoH0Mo652X4wSK/tXLgtc4QCG9y5gjOgqgiKaACcJA=
Subject key identifier: F1:0A:94:11:78:68:83:1F:A9:A8:0E:7F:B6:E1:A2:A0:62:20:9B:9F
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0198499C1363420C8C7F1875D7475F7D04B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:21 +0000
Manifest this update: Sun 27 Jul 2025 02:00:21 +0000
Manifest next update: Mon 28 Jul 2025 02:00:21 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: WjLBGVvR23Z0h7TS38DKbDX6x4DOavMx6xO0B/qkBXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:13:63:42:0c:8c:7f:18:75:d7:47:5f:7d:04:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Jul 27 02:00:21 2025 GMT
Not After : Jul 28 02:00:21 2025 GMT
Subject: CN=f10a94117868831fa9a80e7fb6e1a2a062209b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:63:ca:13:f3:7b:98:1d:21:4e:b0:d2:74:
4c:b2:2b:68:49:33:cb:5d:08:63:12:de:1d:36:30:
78:5b:8f:91:e7:30:e7:28:41:f4:9e:19:d9:7a:11:
e1:f9:79:93:65:ea:c8:7b:4f:07:fd:d8:1b:6e:c1:
dd:8e:99:c0:a9:5b:36:e3:0d:b2:99:28:8c:9b:b0:
1a:3e:04:a4:90:fb:90:af:72:46:7d:c3:39:08:f0:
31:cd:80:d5:82:93:d4:88:c2:76:87:2d:39:94:83:
3d:1c:cf:b3:92:6e:f7:2c:5b:29:2b:6b:5b:9c:4c:
a6:83:af:04:3d:b2:13:42:2c:e2:4e:14:6e:68:5c:
84:8f:ed:3d:5d:df:0f:e6:af:b5:0b:00:2f:9a:45:
9e:7e:5a:c0:c0:25:5f:ea:b5:66:4c:de:7f:f9:8e:
18:44:5e:c7:60:f0:66:9a:7b:2d:54:e8:f5:bf:0f:
ba:0c:f8:de:1b:18:35:b8:dc:e9:68:b7:8b:ef:2c:
83:07:6a:19:71:25:c9:6c:34:de:ca:b4:73:5d:7b:
12:06:11:a4:95:e2:ec:6e:cb:e6:7b:07:65:60:6b:
bb:38:95:80:d8:aa:fc:ca:42:6b:5e:87:16:f9:ce:
2f:02:47:2e:86:0c:49:df:1c:b9:43:93:98:14:03:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0A:94:11:78:68:83:1F:A9:A8:0E:7F:B6:E1:A2:A0:62:20:9B:9F
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fb:d7:ec:44:93:01:5c:ae:0d:0c:13:af:be:11:77:e2:48:
d7:7c:5f:2b:38:cf:8c:7f:ee:f1:c0:aa:b3:c6:6a:a5:9c:1e:
ef:1e:85:35:34:cc:e0:f2:f6:a4:01:0f:26:2c:6b:04:b3:b7:
08:48:71:c0:93:54:02:be:60:7f:03:42:ba:d7:48:43:55:f6:
7a:15:60:0c:b9:f3:96:2b:79:eb:f4:29:b7:1b:e9:52:4f:92:
a6:d0:b5:68:71:b9:81:ff:9b:a9:8b:43:bd:ac:64:b7:3c:cb:
10:aa:38:5f:6c:c8:1f:73:4f:81:29:07:b8:e7:d5:1a:f4:e4:
92:90:b5:ba:65:ac:1c:84:85:b6:70:64:66:8a:34:84:d8:f5:
2e:58:cb:f6:69:7e:8f:00:9c:5c:5f:c1:27:55:94:37:8d:c2:
b5:24:0c:52:f8:3a:bf:f9:31:b6:d8:e9:2d:bc:fb:ca:33:b3:
9b:37:c2:f7:1c:32:2d:76:fc:56:23:ea:e9:ed:f8:2e:6f:2d:
d4:2d:ba:63:83:68:e3:7b:57:61:42:27:55:b3:a7:b0:59:4f:
d8:08:10:60:e2:b3:e6:8f:47:ce:42:d5:20:5f:9c:0e:b7:26:
3c:c2:ed:af:0c:05:34:d2:31:c8:fb:1c:0b:ff:63:79:3d:eb:
68:d1:35:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:15:57 2025 by rpki-client