Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: T1cVdSssiGnBPyaTFyuWXYuUmzCIvW8yEpJQKhKVTfY=
Subject key identifier: F6:73:05:82:AE:EA:34:19:A6:8E:B7:9B:6C:3E:A8:15:FE:E0:0F:E6
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 0199225566A5D7A390BCF3596C1334E14DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 074E
Signing time: Sun 07 Sep 2025 04:00:45 +0000
Manifest this update: Sun 07 Sep 2025 04:00:45 +0000
Manifest next update: Mon 08 Sep 2025 04:00:45 +0000
Files and hashes: 1: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: U+uRDKjuH/wsWtmYmsoTuGgdHDkIYnt2hbg2E+vN44M=)
2: oCkWTl_gPJJmyTDbvX7hvylBBmI.roa (hash: 5mrOTSshYKPJ6XnmVELEhWbaEJFvS2kzzHxI1jeDb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:66:a5:d7:a3:90:bc:f3:59:6c:13:34:e1:4d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Sep 7 04:00:45 2025 GMT
Not After : Sep 8 04:00:45 2025 GMT
Subject: CN=f6730582aeea3419a68eb79b6c3ea815fee00fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:b1:88:7f:c4:ac:24:14:59:67:df:71:06:
5b:d3:6d:61:5c:12:15:8a:19:df:95:de:99:59:47:
80:d2:b1:36:a1:99:25:4d:8d:ce:b2:96:44:0f:ae:
65:ae:18:e4:8c:74:bd:fd:31:61:4b:da:4f:12:17:
d2:e2:34:01:a9:47:be:37:e5:71:52:7f:48:b5:ef:
71:78:06:85:df:12:d4:0f:b4:86:de:44:a1:b0:e6:
41:e1:b6:48:4e:18:20:07:19:6d:55:b9:eb:ad:0d:
5f:98:89:de:4a:bd:b1:c8:88:18:1d:ca:12:ba:0c:
86:58:78:3f:1c:da:3a:29:7e:c8:31:b8:76:d5:39:
37:e5:75:0c:f7:0c:1d:6e:1d:3c:0c:66:4c:a2:a0:
1f:22:da:46:98:35:9a:ed:78:56:fc:34:ca:e8:f4:
bd:10:db:30:62:0d:9f:c6:e7:93:71:51:01:0a:22:
94:a2:cf:de:cc:ab:06:c8:68:d7:53:67:0d:b9:32:
88:91:37:fb:74:bd:b0:30:d4:6f:e4:01:ff:0d:8d:
19:fb:19:f7:84:01:de:e5:bd:22:c7:18:6a:b3:e2:
68:66:fd:07:06:18:a1:6d:09:47:91:f3:70:89:b5:
92:94:e0:e9:65:e9:94:4c:e8:cd:2b:c2:c1:73:dc:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:05:82:AE:EA:34:19:A6:8E:B7:9B:6C:3E:A8:15:FE:E0:0F:E6
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:43:25:51:c8:11:cd:91:60:00:9d:a5:ee:f0:30:11:89:f8:
c1:97:6d:6b:c1:6c:fb:eb:b5:c8:c1:8c:bb:6d:7f:6a:16:28:
a4:62:4c:ad:42:be:13:10:82:9c:52:ff:a2:01:43:df:cc:69:
0f:81:d7:bf:87:5c:e7:bb:0a:5f:6b:e9:a4:49:4d:0c:4b:18:
64:9c:61:7f:36:d0:af:8b:aa:e7:93:94:2c:b4:1d:6f:61:c4:
6b:cc:45:a9:0b:4c:41:16:c4:55:66:4e:fb:86:4b:c3:1b:38:
4e:17:22:44:a0:df:f5:aa:ad:c4:10:08:93:28:81:d6:d9:73:
6b:3a:c6:8b:9c:aa:05:e3:5f:cc:6c:fa:a2:7e:b9:23:41:fa:
c6:8f:40:bf:ad:ae:da:88:6a:e9:fc:51:3a:19:59:cf:64:05:
97:d1:8d:89:36:16:46:04:60:bb:a0:c3:66:28:cf:57:9d:eb:
8e:af:af:a6:f4:1a:5d:1f:c1:91:85:67:ee:3d:d1:c1:c4:fd:
a2:59:81:89:fa:18:ba:f2:b2:5a:ce:7b:41:7d:88:50:2f:4f:
cc:d1:78:ce:83:e8:25:91:03:a4:26:1b:49:39:45:9f:a5:e5:
97:bc:c0:ed:a3:d9:a7:ec:47:fc:f9:26:e9:e4:96:06:14:0d:
27:06:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:45 2025 by rpki-client