Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: CwAevT1bQUAkTnMZrXBRtN965V0d7cZkXX78ciO6SBk=
Subject key identifier: 0E:D4:CA:E0:6B:50:36:C9:C4:E6:3C:72:02:79:F7:B9:EC:BB:BE:E2
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 0197469E43A1CFC8C8737BF8354CA67AA8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0920
Signing time: Fri 06 Jun 2025 19:01:06 +0000
Manifest this update: Fri 06 Jun 2025 19:01:06 +0000
Manifest next update: Sat 07 Jun 2025 19:01:06 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: XyXdJO1MEqstYMWEe32Pkrj2A3EZPc+IZvq4rBQ5BC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:43:a1:cf:c8:c8:73:7b:f8:35:4c:a6:7a:a8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Jun 6 19:01:06 2025 GMT
Not After : Jun 7 19:01:06 2025 GMT
Subject: CN=0ed4cae06b5036c9c4e63c720279f7b9ecbbbee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:8a:5a:35:9c:2f:76:23:b4:d5:4d:8e:b8:
88:73:70:ad:86:aa:b7:8b:02:f9:51:b1:a2:7d:5d:
ac:02:fb:e1:bf:7c:8f:8e:e6:72:06:a9:00:c3:45:
b5:a4:24:a1:9e:73:d5:f4:38:80:ab:0a:a8:e3:e8:
f1:52:90:88:c8:ce:cf:85:50:47:b3:bf:e9:21:58:
80:5c:09:3e:55:74:10:65:1e:e6:02:d3:7b:f3:e8:
7e:8d:97:bc:c5:d7:35:2a:f8:67:57:4e:0a:5e:9d:
a3:e7:b7:2d:1d:4f:34:52:04:46:89:86:09:dc:08:
f6:ac:6c:0c:ba:2e:84:3b:a5:14:d2:2b:33:c5:a6:
91:4d:22:84:02:f4:52:45:48:17:92:93:47:a9:09:
8f:b3:31:a7:18:f1:c7:10:e7:91:90:88:5a:da:cb:
3c:61:f2:7d:5d:29:d3:23:10:dc:21:4e:54:fd:d2:
57:0d:d9:32:69:78:17:62:ce:06:60:b7:84:b8:00:
99:24:07:19:13:ec:ae:90:3d:e8:80:e7:a0:68:78:
ab:a7:5a:2d:86:bf:5d:6b:84:18:7a:1f:a6:ac:c9:
77:d0:a1:1d:5d:3e:51:a7:cf:24:98:80:23:b6:8e:
50:98:37:04:55:cf:f1:df:54:ee:64:58:80:e0:b1:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:CA:E0:6B:50:36:C9:C4:E6:3C:72:02:79:F7:B9:EC:BB:BE:E2
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4e:f3:0d:f8:37:bb:ba:6b:89:17:bb:77:2c:5b:7a:11:27:
92:7d:c8:ae:ba:9b:39:88:92:e9:42:f2:ca:40:df:ad:e2:fa:
b8:0d:2a:6e:6a:23:b7:25:1b:68:b9:3b:ef:49:54:3b:e7:8e:
0e:cf:76:fd:45:e2:af:ff:b0:27:a0:8b:09:92:6f:e9:22:43:
91:c6:9f:af:3e:91:84:ec:31:c6:87:fa:1a:84:c7:4c:3a:a0:
7b:11:34:1f:b9:ee:06:31:46:38:5b:fc:13:b6:f2:5a:38:9a:
ce:91:4c:d5:a9:97:af:8c:e1:45:34:2a:c2:70:78:5f:6e:15:
70:e6:ca:9a:cf:c4:89:2b:df:47:a5:b6:55:49:5e:b7:d9:43:
30:96:52:55:ec:ba:c0:b2:98:1d:2a:7e:c3:cd:a7:1a:76:b8:
87:89:44:82:13:8c:e8:5c:c0:b4:9b:ad:2d:63:89:2c:b1:00:
54:15:17:71:f3:cc:a1:ea:f8:60:05:39:39:d9:da:1f:0c:33:
cb:7f:68:0c:7e:43:3c:1e:6f:21:44:a9:dc:c9:cc:81:c2:09:
b5:b5:c5:40:41:7e:4b:1c:ba:15:45:2c:13:47:7e:84:2e:9a:
55:19:3d:45:ed:e7:69:ca:7b:0b:c4:d7:80:67:43:73:ac:6d:
d3:05:78:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnkOhz8jIc3v4NUymeqihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzQwZmY2NjlhM2FkYzlkNjY5NjEzNWM4ZDcxZjZkZjVl
YWMyN2IwHhcNMjUwNjA2MTkwMTA2WhcNMjUwNjA3MTkwMTA2WjAzMTEwLwYDVQQD
EygwZWQ0Y2FlMDZiNTAzNmM5YzRlNjNjNzIwMjc5ZjdiOWVjYmJiZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTOKWjWcL3YjtNVNjriIc3Cthqq3
iwL5UbGifV2sAvvhv3yPjuZyBqkAw0W1pCShnnPV9DiAqwqo4+jxUpCIyM7PhVBH
s7/pIViAXAk+VXQQZR7mAtN78+h+jZe8xdc1KvhnV04KXp2j57ctHU80UgRGiYYJ
3Aj2rGwMui6EO6UU0iszxaaRTSKEAvRSRUgXkpNHqQmPszGnGPHHEOeRkIha2ss8
YfJ9XSnTIxDcIU5U/dJXDdkyaXgXYs4GYLeEuACZJAcZE+yukD3ogOegaHirp1ot
hr9da4QYeh+mrMl30KEdXT5Rp88kmIAjto5QmDcEVc/x31TuZFiA4LHeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7UyuBrUDbJxOY8cgJ597nsu77iMB8GA1UdIwQY
MBaAFDg0D/Zpo63J1mlhNcjXH2316sJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2Mt
Mjg0NmVhYWRkZTY3LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2MtMjg0NmVhYWRkZTY3
LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE7zDfg3
u7priRe7dyxbehEnkn3IrrqbOYiS6ULyykDfreL6uA0qbmojtyUbaLk770lUO+eO
Ds92/UXir/+wJ6CLCZJv6SJDkcafrz6RhOwxxof6GoTHTDqgexE0H7nuBjFGOFv8
E7byWjiazpFM1amXr4zhRTQqwnB4X24VcObKms/EiSvfR6W2VUlet9lDMJZSVey6
wLKYHSp+w82nGna4h4lEghOM6FzAtJutLWOJLLEAVBUXcfPMoer4YAU5OdnaHwwz
y39oDH5DPB5vIUSp3MnMgcIJtbXFQEF+Sxy6FUUsE0d+hC6aVRk9Re3nacp7C8TX
gGdDc6xt0wV4kA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:17 2025 by rpki-client