
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: s+2Ou5FDpbgmP4ili28o+WYmWgwG97NY4QtYz+5iQYk=
Subject key identifier: 0A:77:8D:DC:5C:CB:5F:BD:69:0A:1E:4D:CA:FA:5F:B8:C2:A7:EA:AD
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 019922FA2B52255AC82034588C822205F27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 0E68
Signing time: Sun 07 Sep 2025 07:00:44 +0000
Manifest this update: Sun 07 Sep 2025 07:00:44 +0000
Manifest next update: Mon 08 Sep 2025 07:00:44 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: UqGw0YrRkwqELHIYDA90D/cbItEtrKhsjHqFykvAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:2b:52:25:5a:c8:20:34:58:8c:82:22:05:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Sep 7 07:00:44 2025 GMT
Not After : Sep 8 07:00:44 2025 GMT
Subject: CN=0a778ddc5ccb5fbd690a1e4dcafa5fb8c2a7eaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:bc:c9:e4:a1:5b:ba:0d:66:18:63:b3:ee:
0e:2f:53:ff:e9:9d:7f:3a:86:cc:47:fb:f7:be:9c:
ba:10:e8:b6:98:c1:2a:1b:27:75:6a:78:67:9e:99:
fb:ac:5b:91:e5:0d:80:22:40:b3:0a:45:0c:6b:7c:
2b:4c:34:25:a0:2f:44:09:f6:e2:a5:fc:32:b7:f9:
51:81:f3:9a:1f:76:61:0a:21:28:7a:3a:99:9b:61:
9b:83:d7:92:3c:82:df:16:a7:05:d3:1c:5a:a3:82:
93:07:d9:58:d1:72:a1:40:0a:5c:43:6e:75:9a:87:
5a:3f:8c:2e:b3:0b:4e:b7:8e:28:92:ed:e0:94:ec:
6e:93:34:e2:ec:8b:b0:66:20:89:94:a9:33:89:ed:
e7:f2:7b:90:10:0f:42:4a:52:bf:a7:d3:8d:c3:04:
ad:44:fb:da:85:f7:57:65:d7:45:fd:08:51:1b:a8:
d8:d2:94:c3:af:81:c4:17:ce:06:66:ab:65:cd:83:
bd:50:86:96:e9:b4:27:01:ad:89:3a:26:a4:4e:d4:
39:6c:e6:39:97:7f:ff:fc:f4:b9:60:9a:0b:86:12:
5b:47:f4:09:f7:35:df:64:01:f6:e1:7a:03:f6:a4:
23:fb:90:27:9e:25:f2:7a:b9:f7:79:ea:98:b7:d4:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:77:8D:DC:5C:CB:5F:BD:69:0A:1E:4D:CA:FA:5F:B8:C2:A7:EA:AD
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ce:f6:14:e9:b1:c0:20:c5:16:75:07:97:59:5d:f0:7b:20:
e4:4a:d8:82:72:89:ac:2c:af:42:42:03:a8:29:b1:89:df:ee:
0d:7b:cd:e8:2f:7b:4b:d5:40:fb:ad:ee:e8:d2:30:e4:05:a4:
b6:92:72:e2:7c:3e:12:51:63:7e:95:d9:04:0e:b9:7a:30:1b:
cf:b4:42:0a:33:09:d0:68:bf:2d:43:75:c5:7c:05:5a:10:39:
29:b2:28:7d:62:32:7f:c2:a3:a4:a7:5b:e4:2d:13:2d:07:be:
23:c4:3e:1d:ac:2c:e1:31:05:14:ed:4b:48:39:65:43:d0:ba:
fe:b0:a0:2b:38:0c:32:6b:0e:cd:ac:01:c3:5f:39:5d:04:ad:
62:6e:6b:89:a2:82:de:58:e9:81:e1:3d:bb:d1:41:82:dd:0e:
31:15:3e:52:62:5f:86:08:40:88:43:64:d9:d0:1e:77:6c:3c:
fd:c7:92:04:bc:ec:b3:26:9a:ee:35:d2:25:ec:17:6a:b1:ef:
d8:f5:b8:da:42:76:8a:de:60:6f:7c:b6:1f:94:9f:be:05:b9:
ef:71:8e:5e:35:70:14:8d:b5:81:3b:43:94:76:3d:c8:0b:1a:
a8:f7:f3:0f:82:d5:b7:66:3e:e4:d5:93:e7:10:40:8d:75:29:
88:fa:d2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:00 2025 by rpki-client