Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: gLik4lwLi0db+sc0xjpL1tkSKKFqkWrUzn0DOT04S9s=
Subject key identifier: 31:73:36:87:CA:37:37:28:99:FB:46:6D:82:40:A0:E1:29:28:CD:EE
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 01974A0C703025A411ADFFDAC06ACAF1E518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0AEE
Signing time: Sat 07 Jun 2025 11:00:18 +0000
Manifest this update: Sat 07 Jun 2025 11:00:18 +0000
Manifest next update: Sun 08 Jun 2025 11:00:18 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: RsyGLTcyMHocRNGUPe9HdG5BT9E2GjhTLPM+jGDxu4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:70:30:25:a4:11:ad:ff:da:c0:6a:ca:f1:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Jun 7 11:00:18 2025 GMT
Not After : Jun 8 11:00:18 2025 GMT
Subject: CN=31733687ca37372899fb466d8240a0e12928cdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:ba:b2:32:ca:b8:d5:70:75:78:f5:be:54:
6b:d1:d4:99:d3:2d:bf:a7:c4:d3:dc:d0:be:1b:85:
bd:e9:73:81:09:f9:b2:04:8a:5b:d5:a4:9b:c9:f6:
e5:41:d5:f3:6c:b8:85:96:2a:5b:5c:12:7a:93:59:
4a:fa:c0:f9:9c:1f:3f:16:2e:e6:96:92:e6:83:3a:
e1:12:2b:4b:0a:97:8f:3d:e0:a3:13:5e:f2:f1:6b:
bd:bf:e0:ba:a3:09:5a:4b:17:59:d2:e0:87:79:c0:
a4:9c:ca:ca:41:ac:6d:0a:75:3f:f3:e7:5d:b0:55:
30:ed:ba:ef:8e:68:3f:91:51:6b:a1:04:cf:6a:fc:
8f:d3:9a:fc:45:ff:cf:9d:8e:95:c7:9c:09:9f:eb:
6a:70:0a:84:0f:8f:06:e8:8c:16:aa:5f:1e:e0:14:
13:6b:e1:5a:01:4b:15:46:18:24:37:58:10:63:e3:
1f:6b:5e:0e:b9:3d:d1:34:9a:e5:44:7f:50:7f:df:
1b:05:bf:d1:19:c7:2e:25:63:90:17:4d:ea:73:3d:
ef:cc:74:dd:0b:f9:5b:b4:be:88:9c:f7:14:4f:d4:
28:83:db:bd:44:db:27:0a:86:3f:96:8b:d1:e3:89:
cd:66:9e:fe:ec:4c:93:c4:c6:57:68:25:58:06:a3:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:73:36:87:CA:37:37:28:99:FB:46:6D:82:40:A0:E1:29:28:CD:EE
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5f:61:53:53:1a:91:67:45:ed:8c:f4:38:52:86:aa:43:c0:
be:2c:7b:85:3a:83:e1:11:bc:e3:01:ee:9a:2a:aa:55:90:1f:
ec:b9:bb:6d:b4:93:6d:0b:a3:04:a3:03:e0:4c:c4:7f:08:c3:
a1:73:49:86:4a:f2:70:ff:47:c8:54:30:bb:c2:55:19:f9:5b:
57:24:65:66:bd:d7:c5:ec:4c:41:84:7f:0c:90:c4:87:20:73:
23:65:52:ee:92:86:ae:a5:94:73:f7:74:ef:ee:74:d0:c6:ec:
08:0c:b6:3b:cf:8c:be:87:42:b2:7a:1e:46:3a:b3:1a:36:03:
51:90:16:03:fe:52:3a:00:69:f6:65:7e:67:1a:b2:07:75:88:
54:40:4d:6d:af:cf:53:ed:a9:cc:4b:a5:23:c6:eb:07:f8:fd:
a4:72:33:32:53:bc:f0:5a:02:8b:ad:7c:42:4a:24:97:50:aa:
69:ff:93:70:c6:7a:f8:6e:de:61:00:d1:e2:73:64:ae:6d:fd:
74:a2:c1:79:56:1b:36:76:e9:b4:62:09:27:cf:a1:5a:f1:62:
27:4e:4a:a1:24:dd:da:46:16:c1:3a:26:45:e3:1e:a4:69:82:
70:5c:d0:4d:70:e9:8f:7c:bd:2e:49:2d:b4:e3:48:c8:c0:58:
13:42:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:36 2025 by rpki-client