Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: pqnNROmu0PlECcbt3WPZwxaCc2pA+Zfvf9XDOClX77Q=
Subject key identifier: 56:2A:56:7F:78:D2:7F:C3:81:C9:58:E1:CE:59:22:4E:F2:12:09:45
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019749313AA3418C249A9C8380224B3D8AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0659
Signing time: Sat 07 Jun 2025 07:00:52 +0000
Manifest this update: Sat 07 Jun 2025 07:00:52 +0000
Manifest next update: Sun 08 Jun 2025 07:00:52 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: AJdMfHGejUaJ6TZQ0a5vwHNYXkod9lTdyyAAqAksx/U=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3a:a3:41:8c:24:9a:9c:83:80:22:4b:3d:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Jun 7 07:00:52 2025 GMT
Not After : Jun 8 07:00:52 2025 GMT
Subject: CN=562a567f78d27fc381c958e1ce59224ef2120945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:6b:d7:d8:70:d6:67:fa:4d:ad:b6:b4:9a:
44:82:4b:b2:c0:04:31:8e:8d:76:bf:94:df:40:fd:
50:b5:95:21:21:da:ea:aa:ba:d2:27:e2:50:6f:1a:
cf:a1:cc:b5:4d:e8:9d:39:d7:2a:b8:cb:cd:b3:28:
0f:97:75:72:86:f3:27:84:a5:bf:d8:72:8c:f7:b1:
28:96:68:89:95:52:36:ee:80:df:5c:ef:c7:0d:fc:
ba:36:92:c5:74:ea:8e:a5:2f:67:da:39:08:25:bb:
a0:e8:d2:cd:c8:82:a0:54:3e:75:96:1b:39:2a:68:
37:e2:c9:db:f0:c6:a7:50:26:64:9d:72:e6:74:9b:
bd:97:aa:da:9d:06:61:4d:cb:a2:e9:63:dd:5d:a0:
29:18:1b:a5:d4:b1:d1:19:d0:18:1b:04:99:3b:3d:
dc:b5:a1:b1:da:23:93:cd:36:db:8a:d7:fe:41:56:
5c:c7:76:ed:46:bc:ac:e4:8a:c0:cc:e6:a8:65:1f:
68:60:cb:83:cc:ed:23:6a:45:05:31:32:f9:a5:65:
cf:c6:b1:7c:4d:07:05:6c:82:81:64:f5:55:81:5f:
e9:35:e3:68:8e:f2:63:7e:5a:a5:46:28:1e:78:ca:
5f:36:c3:0a:1d:8b:e9:b1:ad:97:97:17:8a:42:6b:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:56:7F:78:D2:7F:C3:81:C9:58:E1:CE:59:22:4E:F2:12:09:45
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4f:41:47:44:8a:27:e0:47:d1:3d:de:b6:00:b8:8d:6c:96:
1d:00:46:0b:83:f2:52:d0:c9:4c:23:8f:76:44:e4:19:72:9f:
07:f0:36:5e:90:8e:19:9e:a2:1b:f5:6b:37:99:b9:aa:b2:06:
7d:45:75:16:a5:c9:b7:a0:44:9c:e8:73:4f:34:5d:4a:f9:bc:
59:7e:91:d8:ee:54:61:71:7b:12:6d:67:15:e7:22:d0:ad:06:
3e:99:72:39:07:27:9e:8e:ce:e7:aa:b8:72:e7:0b:4e:73:d6:
53:e2:00:25:2b:e5:a5:47:94:01:9b:c4:a8:22:60:29:8f:c2:
d9:46:79:99:24:b7:ce:90:b9:49:b8:50:70:df:00:fa:0e:e2:
7d:b2:a5:f5:31:6a:f9:da:49:6d:1f:eb:ae:36:7d:70:1a:3e:
82:f2:c9:99:b9:94:56:db:8d:f1:df:a8:0d:be:e3:e3:d5:66:
7f:3d:31:3e:94:c1:68:f5:09:f4:87:93:f6:ce:80:b8:ef:b6:
33:d4:68:5c:fd:81:52:10:67:27:70:17:cd:a9:db:25:d7:47:
fd:e6:99:44:4b:e6:e8:c3:35:39:54:97:a0:48:e2:42:f3:3e:
8b:24:12:ad:c4:a8:e7:e6:06:cf:93:3a:8b:e7:82:3e:bd:f8:
c5:3b:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:28 2025 by rpki-client