
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: dPHKvXf0uScsLsqQLyZ8h4FKwzIizJ3ZWr6Lq57nHAY=
Subject key identifier: B5:6B:04:4C:CB:77:0D:60:3A:FF:60:B1:32:B3:6D:02:9A:B9:E3:E2
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 019916BF02DB4C5ECABA72A25D8F439C6464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 024A
Signing time: Thu 04 Sep 2025 22:00:40 +0000
Manifest this update: Thu 04 Sep 2025 22:00:40 +0000
Manifest next update: Fri 05 Sep 2025 22:00:40 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: QhwbNgoa2xrZbRnUhdV7zXxvwqCsaDtKSaqQTVCe/t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:02:db:4c:5e:ca:ba:72:a2:5d:8f:43:9c:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Sep 4 22:00:40 2025 GMT
Not After : Sep 5 22:00:40 2025 GMT
Subject: CN=b56b044ccb770d603aff60b132b36d029ab9e3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:17:9a:fd:c5:a0:a0:e4:59:e8:9b:13:8b:
ca:48:32:3a:f9:51:52:6c:f6:04:e4:e5:a2:2d:1d:
2d:6f:f6:90:77:62:73:3d:bf:b2:2d:11:70:0f:e2:
7d:d8:a4:bf:32:fd:03:86:fa:2e:e8:d4:fb:27:a5:
55:b7:f2:82:1b:d4:da:13:c0:09:fd:1a:a8:50:f3:
8f:09:ba:fe:b0:6b:b7:8f:a9:6a:72:a8:71:2b:8e:
53:a3:63:37:a4:4f:28:c8:dd:3f:54:3a:b5:2d:cc:
6f:1f:94:4c:d7:37:89:44:94:84:eb:37:56:dd:af:
fb:52:8f:76:1a:27:43:62:26:ec:0e:be:ad:25:63:
a6:a1:61:2f:c8:c5:f0:b9:ca:c1:ce:5b:08:ea:44:
af:cd:89:65:b6:75:20:67:cd:3b:2d:ec:ab:22:ea:
65:6b:44:ca:59:8f:fa:c1:84:d5:92:05:09:2a:f4:
ef:1e:f4:e8:26:71:da:50:5e:26:30:b5:73:1c:cf:
fd:23:7c:ef:a1:60:01:6a:af:54:03:07:e0:82:63:
2b:54:49:ee:5c:87:12:4b:a2:70:1c:54:ef:e4:4e:
f0:2c:4f:70:84:60:62:1a:98:4b:ec:fe:63:f0:b5:
8a:a2:14:d4:ab:27:12:c7:09:b1:b2:56:04:7c:eb:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:04:4C:CB:77:0D:60:3A:FF:60:B1:32:B3:6D:02:9A:B9:E3:E2
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:08:43:ab:c7:af:47:67:98:16:44:a3:e5:2e:b4:ec:71:
ea:5c:e0:14:4b:96:64:48:eb:2a:3d:c6:1a:16:c2:35:9d:e4:
bd:cd:c0:ea:ce:76:a8:98:5e:b5:47:78:70:c9:6b:b3:aa:71:
fb:74:e7:a1:35:00:bc:c9:70:fd:78:da:71:9b:bd:c1:b0:d7:
41:cd:8e:37:99:d8:6f:8c:59:f0:a1:12:71:e7:07:4b:50:32:
47:ef:c2:a0:ef:66:9c:ae:d5:7a:15:b2:97:fc:4f:5b:fa:ba:
49:e3:b7:2f:5b:74:67:39:9d:26:7a:b9:20:9d:82:c8:2c:0b:
73:c9:ef:7e:f6:d6:97:40:ee:a7:57:71:49:33:a1:e7:29:b5:
5f:98:90:6e:d4:c5:1b:52:1b:c3:14:f4:f9:f3:e1:73:70:b7:
bd:68:03:f3:38:a9:a8:8a:b6:ad:9e:42:03:de:ff:e7:1b:7e:
a3:2b:20:a3:d0:03:a7:1b:2b:fb:70:1a:31:6b:06:7a:00:07:
a1:81:52:f1:27:d4:26:d3:d1:bd:7b:33:f7:eb:73:97:ce:ad:
4b:c0:0e:95:bb:8b:e5:06:81:cb:a0:6a:2e:61:e7:eb:cd:2b:
6d:77:8a:df:53:1e:55:de:54:0b:46:92:56:6f:f9:ea:fa:4d:
be:12:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:15 2025 by rpki-client