Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: 5lcSMngFaSqoA3LCdX2D7SWNq+qMwoIvGYVqEZW2IV4=
Subject key identifier: 4D:B2:9E:81:38:23:79:96:1E:DA:EC:9C:3E:F5:C4:86:B3:2E:E6:2F
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 019749315C64D735195E70D321F5961313CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 015B
Signing time: Sat 07 Jun 2025 07:01:01 +0000
Manifest this update: Sat 07 Jun 2025 07:01:01 +0000
Manifest next update: Sun 08 Jun 2025 07:01:01 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: xzWR4Fik2Um0BQ1wCDRziwTUSW+bt6ddsr1vO5c75vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:5c:64:d7:35:19:5e:70:d3:21:f5:96:13:13:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Jun 7 07:01:01 2025 GMT
Not After : Jun 8 07:01:01 2025 GMT
Subject: CN=4db29e81382379961edaec9c3ef5c486b32ee62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:45:78:65:5e:45:60:09:8f:f9:78:9d:1a:
11:ae:06:ab:1c:69:6f:89:ef:d4:9f:c8:e4:d6:9a:
13:b9:ce:45:e0:5c:28:50:db:67:b8:a5:91:90:ff:
41:b9:5b:43:69:8f:7d:51:2e:29:c5:e5:13:40:85:
e2:c7:9e:40:d5:74:87:b4:97:a6:dd:73:ee:45:1f:
49:20:cb:c8:90:32:2e:d8:28:f5:4a:50:39:dd:ba:
dc:1e:a5:a3:69:55:85:85:00:98:16:25:50:ac:c1:
dd:6b:34:aa:22:c9:66:0a:8e:3e:b7:35:84:4d:9d:
85:68:a1:62:aa:c0:2c:81:d0:5e:b7:9d:7d:82:0c:
2a:87:88:f0:86:e1:29:7d:18:af:7a:4d:0c:55:cc:
e5:72:8e:ba:74:e5:43:19:d3:ca:3c:b9:93:55:8d:
ea:95:e1:21:22:42:1d:c5:f9:cb:e4:10:2b:23:73:
a8:b1:ca:ef:cc:b8:f2:20:c2:ae:b6:2d:4a:90:7c:
e1:a4:17:d9:8e:de:c6:a6:0c:35:86:76:02:4a:51:
f0:c9:11:ee:b4:ed:aa:33:13:fb:93:16:c9:01:a3:
94:34:77:56:83:27:01:a3:c1:03:b7:32:a8:fa:0a:
66:ce:22:be:3e:71:7b:08:1d:76:a7:76:46:df:ed:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B2:9E:81:38:23:79:96:1E:DA:EC:9C:3E:F5:C4:86:B3:2E:E6:2F
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:a5:f8:30:2c:20:b7:59:f6:54:d0:61:2a:33:5b:51:0c:
b2:1f:bf:ec:bc:70:dd:f0:d1:24:23:e8:b7:bb:1b:9d:6c:7d:
3e:0f:71:61:e3:f7:44:18:70:61:9d:68:d1:9c:69:a9:8d:14:
8e:38:c1:95:95:64:a4:b9:2a:99:d9:a7:e3:a3:ac:d0:c8:79:
6f:50:93:42:c7:51:4e:e9:2a:8a:9a:24:9b:4a:d0:d3:6c:3c:
0f:97:26:bc:e2:1b:6c:41:bb:55:a4:ec:ec:6f:00:9a:95:34:
48:76:3f:97:db:a0:6d:0c:68:92:a8:42:35:07:fd:32:b7:11:
2a:50:a0:7a:9e:c4:8d:96:6f:1f:c5:8b:5e:f9:af:06:11:6f:
ca:b6:17:a7:82:57:b9:ce:01:48:7c:21:c4:3d:a5:2e:30:a8:
47:5c:80:7f:3c:04:46:0f:a1:e0:d0:65:c9:a4:ff:af:62:c2:
7b:88:c6:b6:16:38:05:7b:0c:47:50:70:74:df:40:f8:06:8e:
09:25:ee:07:34:8f:4f:2e:04:64:18:af:f8:f9:d5:35:bd:0d:
6c:4b:20:d0:2b:9c:ad:42:76:cd:8d:58:13:09:ea:b9:bb:65:
bd:a8:9f:54:d8:31:5b:6a:8f:a1:bf:b6:f0:ce:1d:41:f6:72:
14:59:39:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMVxk1zUZXnDTIfWWExPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDE1NTI5YTQ1MWM5NWNjZDkzNGFjNTZlYzA5ZDUxODc1
MDY2Y2IwHhcNMjUwNjA3MDcwMTAxWhcNMjUwNjA4MDcwMTAxWjAzMTEwLwYDVQQD
Eyg0ZGIyOWU4MTM4MjM3OTk2MWVkYWVjOWMzZWY1YzQ4NmIzMmVlNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ntFeGVeRWAJj/l4nRoRrgarHGlv
ie/Un8jk1poTuc5F4FwoUNtnuKWRkP9BuVtDaY99US4pxeUTQIXix55A1XSHtJem
3XPuRR9JIMvIkDIu2Cj1SlA53brcHqWjaVWFhQCYFiVQrMHdazSqIslmCo4+tzWE
TZ2FaKFiqsAsgdBet519ggwqh4jwhuEpfRivek0MVczlco66dOVDGdPKPLmTVY3q
leEhIkIdxfnL5BArI3OoscrvzLjyIMKuti1KkHzhpBfZjt7Gpgw1hnYCSlHwyRHu
tO2qMxP7kxbJAaOUNHdWgycBo8EDtzKo+gpmziK+PnF7CB12p3ZG3+0BfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2ynoE4I3mWHtrsnD71xIazLuYvMB8GA1UdIwQY
MBaAFKHRVSmkUclczZNKxW7AnVGHUGbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjkt
ZDZkZGFjZjZhM2VjLzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjktZDZkZGFjZjZhM2Vj
LzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb+l+DAs
ILdZ9lTQYSozW1EMsh+/7Lxw3fDRJCPot7sbnWx9Pg9xYeP3RBhwYZ1o0ZxpqY0U
jjjBlZVkpLkqmdmn46Os0Mh5b1CTQsdRTukqipokm0rQ02w8D5cmvOIbbEG7VaTs
7G8AmpU0SHY/l9ugbQxokqhCNQf9MrcRKlCgep7EjZZvH8WLXvmvBhFvyrYXp4JX
uc4BSHwhxD2lLjCoR1yAfzwERg+h4NBlyaT/r2LCe4jGthY4BXsMR1BwdN9A+AaO
CSXuBzSPTy4EZBiv+PnVNb0NbEsg0CucrUJ2zY1YEwnqubtlvaifVNgxW2qPob+2
8M4dQfZyFFk5Vw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:32:43 2025 by rpki-client