Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: oVn+OnDMQxG73Zl620XUsMUUUlxXSCg0i8wOSB2oI6g=
Subject key identifier: 10:D8:2E:B3:42:1C:1B:C3:F8:5A:72:25:1C:24:5C:80:36:74:E2:9D
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 019768F31699954A883FFE5892D1851FBC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 1176
Signing time: Fri 13 Jun 2025 11:00:50 +0000
Manifest this update: Fri 13 Jun 2025 11:00:50 +0000
Manifest next update: Sat 14 Jun 2025 11:00:50 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: 1fzqE0X3vyQVHLkAhRoSZpjU16BYdViRUVtdPLFnGns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:16:99:95:4a:88:3f:fe:58:92:d1:85:1f:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Jun 13 11:00:50 2025 GMT
Not After : Jun 14 11:00:50 2025 GMT
Subject: CN=10d82eb3421c1bc3f85a72251c245c803674e29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:90:bd:10:67:97:0d:31:0e:3a:e2:7f:16:
5d:40:5e:c4:7d:f3:95:09:a3:50:b6:36:d2:1e:54:
8a:62:94:3a:41:15:80:a4:51:c9:4c:fb:c6:3b:22:
66:8c:4c:7c:2a:1a:46:18:e4:50:1c:f5:6b:97:61:
55:b8:f0:14:92:bd:27:ed:c5:9f:a0:7b:95:4e:06:
23:7a:97:28:23:d3:80:61:2d:a9:40:2e:2b:56:10:
25:40:7f:be:31:35:19:5b:44:b0:30:2e:94:b5:ce:
38:9e:f7:9d:7b:a7:b4:74:ca:54:10:21:77:7e:41:
fd:d5:0f:86:1b:9e:2f:ea:36:ad:f1:ea:7e:7f:5f:
f5:f8:1f:63:54:b0:23:61:9f:bd:94:75:84:44:b6:
4a:56:22:74:3f:a9:b1:35:4e:a2:31:42:bc:00:b4:
2c:3f:c5:f6:a0:4b:e7:ec:76:cb:b3:08:54:49:cf:
5a:ad:af:90:36:8d:61:44:63:be:2a:69:63:c5:73:
64:f4:63:de:60:21:37:a0:b8:53:1e:92:ed:40:b6:
d9:32:ea:ed:b0:59:b6:bb:fe:c2:d1:08:67:76:c8:
0c:1e:13:a7:4e:82:f3:d7:5d:8b:b0:ac:2c:da:c8:
78:5f:ee:be:35:4e:eb:06:16:97:57:85:b9:5f:c3:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:2E:B3:42:1C:1B:C3:F8:5A:72:25:1C:24:5C:80:36:74:E2:9D
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1c:c9:75:58:44:53:21:d1:41:cc:cc:9e:a5:f5:ca:ea:29:
ad:24:25:54:97:26:5e:fb:0d:f5:9a:0f:ab:42:b5:02:10:94:
3d:cc:73:e6:a4:d3:6a:8b:dd:2d:a9:89:e2:50:86:a0:3b:a1:
9f:a0:cd:eb:f2:55:c5:d3:12:b4:c5:e1:d4:37:45:7c:1e:77:
31:3f:a3:e0:49:7f:f8:63:60:6e:1f:23:7a:86:17:77:ef:f9:
e2:85:f9:fc:d0:70:3a:eb:e7:9f:01:94:aa:fa:7d:82:71:d5:
5c:5a:77:a7:c7:1b:2c:92:0f:58:c7:c4:9e:cc:69:3e:97:46:
48:a6:c6:7e:e7:75:8e:8e:d4:87:46:6c:64:0e:ba:b5:4e:d5:
44:a7:b0:0b:2a:6a:bf:d1:67:c3:78:fc:6f:fc:88:fe:2e:51:
32:73:eb:dd:ae:53:7c:db:ec:bc:91:b3:00:c1:5d:84:ac:56:
cb:00:60:6d:58:65:6f:df:bd:f0:1d:3a:e0:00:03:40:26:06:
74:86:3f:cf:c3:11:98:47:0e:ac:49:6f:2d:ee:65:a0:dc:fb:
17:e1:1f:8d:ef:32:75:eb:64:3c:bb:c5:97:06:91:fa:4c:07:
9d:ef:74:0e:79:f4:23:06:98:b6:22:f2:aa:00:0b:2f:3d:7d:
6f:37:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:19 2025 by rpki-client