Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: gzhYB92qxd7jkPFIMMJ9xX1UiHeIy/lwRvOoA+aH0dQ=
Subject key identifier: 5B:D4:E7:E4:E0:E2:4F:21:DD:BA:62:6D:20:0D:B4:4A:81:49:B0:AD
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 01992D480F2E50DFA1F667E1B102845AE231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 07:02:01 +0000
Manifest this update: Tue 09 Sep 2025 07:02:01 +0000
Manifest next update: Wed 10 Sep 2025 07:02:01 +0000
Files and hashes: 1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: ulyVbh09GHhNmEg6nIbY/deWNXlHx+kxPWITryz7oAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:48:0f:2e:50:df:a1:f6:67:e1:b1:02:84:5a:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Sep 9 07:02:01 2025 GMT
Not After : Sep 10 07:02:01 2025 GMT
Subject: CN=5bd4e7e4e0e24f21ddba626d200db44a8149b0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:87:d9:af:ab:ed:a9:69:79:bf:41:0a:d4:
5d:b2:4f:9c:b6:13:7a:8b:05:0c:b4:55:98:08:3d:
ac:a4:b4:be:52:95:0a:9e:23:35:cf:35:86:e7:b5:
0a:54:12:16:5d:a4:32:f9:a7:50:fa:35:8f:12:99:
c5:6b:34:bc:7c:33:6d:4b:ff:91:f9:77:1c:e7:e6:
57:a5:34:4b:b6:be:e7:11:75:fa:20:10:3b:9d:38:
d7:36:dc:da:9f:71:d2:20:1d:7b:1f:cd:51:b8:54:
a8:df:eb:66:fd:11:8c:a2:5f:d1:a4:27:76:04:4b:
a5:22:d3:2c:32:82:e1:74:29:ea:fb:15:aa:d9:bf:
89:48:26:a1:3d:7b:73:33:87:d5:dc:fa:5a:72:f0:
15:f8:60:4b:5a:35:ac:02:5d:6c:db:39:da:3d:cb:
b8:27:d0:ed:37:b6:85:69:83:46:b3:ae:8c:02:5c:
b2:79:3b:a4:fc:ce:89:f4:c1:5a:8d:82:f4:ed:af:
f7:59:fd:5e:7c:09:a9:7b:a5:00:d4:cd:88:9a:25:
6b:70:aa:00:5a:76:cc:d5:95:8e:78:45:9b:62:83:
70:fe:e8:05:c6:2a:68:26:d0:ab:69:b4:57:51:84:
32:83:3d:5d:a4:27:cc:55:bb:84:ca:5d:ad:87:e5:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:E7:E4:E0:E2:4F:21:DD:BA:62:6D:20:0D:B4:4A:81:49:B0:AD
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:a7:46:ae:c9:13:14:4b:af:10:52:8b:88:72:55:09:2b:
9a:f7:5b:9b:c1:b5:cd:29:ea:ff:83:ff:24:c2:a4:37:0a:53:
5c:01:e2:18:45:cb:19:d8:ee:02:b2:da:a6:c1:a8:63:9d:22:
f4:e2:06:c0:73:85:1d:10:e9:ba:8c:fd:77:f4:cc:d4:a4:46:
0c:74:58:94:50:19:46:fe:93:35:ac:d6:d8:29:a2:7c:3a:d9:
02:5c:6d:ad:8e:2f:67:11:48:60:22:05:ca:e5:fb:dd:07:f9:
a8:33:df:19:85:21:77:fc:b8:32:45:a8:73:ef:b2:8a:75:f6:
1d:81:ee:28:14:c3:7c:5c:0b:1d:3e:4d:d5:70:12:83:7c:8a:
b4:46:75:42:dc:1e:d2:0a:9d:ba:05:42:02:da:0d:fd:2a:f1:
99:dc:fc:cc:3f:c2:ae:08:26:32:c3:a9:5c:e8:5c:38:91:11:
d7:48:c4:27:ee:96:66:9b:c8:6b:ac:05:72:1e:0c:e1:7f:65:
b4:06:c6:87:b1:0d:1a:f8:4a:c5:95:f7:0a:c0:76:d5:4b:34:
07:1a:89:5b:2f:50:1f:3e:4d:88:84:39:9c:84:1a:7d:60:fb:
05:0a:a2:30:9f:3c:f0:d4:22:90:ee:03:de:e6:dd:52:96:7b:
8a:0f:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:55:05 2025 by rpki-client