Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: P8Y+rh/6BIQYyf1SFsculNXW3crryXyZBWRiCkeO/CQ=
Subject key identifier: B9:8E:ED:BB:6A:98:DB:74:4D:D7:5F:9A:F7:CC:DC:6E:0F:B3:DE:32
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 01974A7B4D5CA096ACA58D0FC8ACF09D4D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:24 +0000
Manifest this update: Sat 07 Jun 2025 13:01:24 +0000
Manifest next update: Sun 08 Jun 2025 13:01:24 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: +orsFcZH5zCjc6Lv2lIWZkE6Y4nyrcedIRqyhWMCXuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:4d:5c:a0:96:ac:a5:8d:0f:c8:ac:f0:9d:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Jun 7 13:01:24 2025 GMT
Not After : Jun 8 13:01:24 2025 GMT
Subject: CN=b98eedbb6a98db744dd75f9af7ccdc6e0fb3de32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:ab:76:9d:17:dd:fb:34:70:30:f0:c5:33:
a4:30:01:6d:0c:2a:a0:ee:d4:8a:49:06:f8:84:29:
07:bd:54:dc:e0:c1:31:70:ce:4d:75:75:6c:c6:d5:
93:31:52:7b:1d:1b:15:7e:32:17:81:4e:72:79:ab:
df:8c:02:7e:bb:5f:34:50:a2:10:14:f3:06:3b:69:
05:25:f4:c0:d0:25:7b:1c:d9:04:26:10:34:71:53:
0a:4e:9d:12:fc:2a:cb:9d:d7:35:f8:22:fb:d5:24:
57:02:df:2b:e4:f2:0b:62:b4:15:92:de:5c:5b:b7:
85:21:03:9f:22:85:10:58:08:b9:61:38:b9:90:2f:
37:8f:5c:01:e9:d1:e5:9d:a4:86:75:f0:9a:2e:7d:
13:01:f0:1f:55:9c:24:fc:98:7f:a3:d9:3c:6e:a7:
aa:70:55:3e:8a:ff:ce:b3:b3:ae:1a:57:ad:93:fb:
5b:40:fa:de:59:09:cd:81:89:1f:a0:15:dd:4d:53:
17:8d:4e:0b:cc:4a:7b:f9:a0:15:43:58:cc:50:e5:
34:34:80:9b:7c:fe:bf:55:1d:c2:08:2f:56:0d:e1:
3f:89:e1:82:ee:a1:1b:b4:92:d5:5b:bb:1d:d9:e5:
86:bd:4a:ca:5f:e0:b1:00:10:18:f4:61:90:f3:5a:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:ED:BB:6A:98:DB:74:4D:D7:5F:9A:F7:CC:DC:6E:0F:B3:DE:32
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:eb:fb:b1:ab:bb:b1:23:47:46:c7:5a:f3:98:d2:e7:da:ff:
88:97:dc:24:b0:be:de:c4:c3:d1:fc:12:36:8d:e6:ac:62:51:
4b:06:71:61:88:e0:ed:d5:a2:84:ac:3d:85:08:67:41:25:1d:
dd:62:5c:9d:e3:f6:ff:16:e6:b4:25:fd:e6:bb:27:12:c8:c2:
e6:60:b8:c8:97:fb:40:66:8a:af:3b:28:63:98:ac:3e:36:71:
2c:cc:cd:db:f8:25:ca:12:09:26:80:ea:e5:5d:97:a0:41:5b:
b3:78:cb:0f:e7:7f:8f:5c:30:67:5c:f9:78:b5:86:57:2b:34:
57:46:ba:47:43:da:72:c9:b2:a3:08:c4:3b:a1:23:04:c8:be:
72:c9:63:9c:a7:39:53:bf:ea:33:ab:ae:b9:60:1a:41:91:c6:
bd:c7:14:f7:96:9a:d0:dd:1e:17:77:27:6b:76:27:3b:1f:8b:
83:38:c7:ba:05:46:53:ef:e8:6d:91:40:f7:ab:f7:4c:0f:b5:
15:bc:05:bd:35:46:a7:7e:fa:9b:53:06:44:01:0e:a5:3b:ea:
89:8a:d2:37:1c:b4:29:a2:db:e1:02:7b:06:27:9d:b8:c1:5f:
bb:b8:88:1d:8c:9a:f8:89:fc:d1:c4:86:e8:79:53:50:72:4c:
51:e8:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:29:08 2025 by rpki-client