Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json)
Hash identifier: kwD7+i7yAU/5lgF5bCiY2LVjsYJFArshYd1Zk4UzcVw=
Subject key identifier: 51:55:9D:C0:37:6B:D3:02:0D:99:DA:B4:41:A8:38:D6:5B:A2:30:71
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 0197C914FD37CE20A6ABE9AEDC79CAB2873D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
Manifest number: 0FBA
Signing time: Wed 02 Jul 2025 03:01:25 +0000
Manifest this update: Wed 02 Jul 2025 03:01:25 +0000
Manifest next update: Thu 03 Jul 2025 03:01:25 +0000
Files and hashes: 1: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: XSG04ZAkTY7hlc1s5MfW/VIzRWoBJoQxZR/wfSjv+BA=)
2: vIvVsHJ0xm9KWsOKo8t7mvzJhUY.roa (hash: A8A1HwLzG1pGgLrLpP5xuPgKXEc1TOEplW6JXucAwjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:14:fd:37:ce:20:a6:ab:e9:ae:dc:79:ca:b2:87:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Jul 2 03:01:25 2025 GMT
Not After : Jul 3 03:01:25 2025 GMT
Subject: CN=51559dc0376bd3020d99dab441a838d65ba23071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:65:7c:8c:b0:d6:68:db:8f:6f:b7:02:6b:
e9:08:cf:32:f0:ac:45:23:cd:6a:71:d9:ec:d7:71:
dd:b0:e8:df:68:45:16:8d:90:c8:f4:da:3d:4b:33:
8c:0c:83:47:21:79:b6:6a:db:dd:56:34:c9:76:da:
ff:a2:fe:fa:d4:8f:96:b7:51:11:22:a8:3c:dd:b4:
f4:42:b9:1d:ab:00:ce:7f:ff:7c:bd:52:14:6f:67:
09:e0:a1:20:f2:c1:c9:0d:10:af:91:0a:cc:d9:b5:
64:d9:ef:c3:84:f5:08:19:13:d9:5d:82:a5:39:43:
29:ec:06:a3:8b:8b:50:57:45:f4:c0:40:c8:32:9a:
88:78:33:40:31:47:35:41:c6:59:e8:b8:4a:8b:68:
7c:91:4b:7a:78:6a:15:99:6b:20:15:2a:cd:d4:2c:
d6:e8:2c:98:3d:20:74:bf:20:14:e0:e3:e2:79:98:
08:e8:42:a9:38:2c:5c:a4:cb:e7:5c:52:0b:13:2a:
7e:33:74:e8:c2:f6:86:fc:b2:fd:b4:79:e0:68:4a:
b3:e9:13:53:0f:1b:5c:97:08:47:38:41:58:ac:b7:
67:fb:b1:a8:f2:57:00:0a:3f:88:e0:1c:b9:63:46:
ad:78:ae:50:7a:06:71:c3:ed:96:fb:96:15:b1:14:
85:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:9D:C0:37:6B:D3:02:0D:99:DA:B4:41:A8:38:D6:5B:A2:30:71
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e7:3d:71:8e:81:6d:dc:6d:1a:08:c6:db:d9:67:f4:2a:4c:
03:36:90:b2:09:39:50:d8:d3:34:a2:ec:73:6d:32:00:d0:63:
2f:df:b2:4f:ad:e4:18:c6:c4:ef:8b:58:ba:1b:11:bc:1d:34:
38:66:ab:af:f9:c9:7f:eb:f9:00:4b:80:5b:96:76:a3:1b:a0:
66:22:4c:b8:fa:7a:1f:17:a1:ea:fa:0f:89:0c:34:df:52:78:
2d:d3:83:25:8c:0d:5c:54:bc:7f:f7:1f:22:63:65:bd:79:75:
5a:e2:a0:f1:4a:83:dd:b4:1e:57:92:3d:01:be:9d:08:cf:b1:
25:f4:c6:5f:2a:c1:35:6d:6d:21:41:98:03:3e:6e:cc:12:9f:
2d:d3:5f:f4:63:7e:a0:be:65:2c:2d:3a:64:26:ae:57:b2:65:
33:da:df:8a:e8:5c:3d:b5:96:8a:d3:9b:7a:41:72:1f:da:0b:
3b:0a:cb:07:b9:d5:d3:ed:33:c5:c8:38:1c:ca:e6:99:b7:fa:
89:19:a4:36:40:19:df:0e:1a:66:7a:2f:85:e4:ff:11:e3:38:
8d:75:2e:b4:04:f9:53:07:74:f9:05:d5:20:21:4c:6d:fa:52:
e8:e3:bb:f8:a2:99:d7:ba:7d:df:2f:17:db:09:8b:2c:41:51:
cd:31:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:06:17 2025 by rpki-client