Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: y8Pv8vezpq7ZzWC2SOMQyPkXNZX0etgb58URT9pNY0k=
Subject key identifier: FC:EF:2E:EA:11:E4:E8:8E:E4:4F:08:DF:73:E3:2C:F1:F7:CE:01:0A
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 01967B69CEA256F41A88B0BBD51C762E906C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 10FB
Signing time: Mon 28 Apr 2025 08:00:53 +0000
Manifest this update: Mon 28 Apr 2025 08:00:53 +0000
Manifest next update: Tue 29 Apr 2025 08:00:53 +0000
Files and hashes: 1: gbYZs5g8-tzRIgFZupm0nJKzwkw.roa (hash: 71Q7AYKf4HSZ+MQCf6bmElagIFGNwEfBKHJD2B+78+4=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: Z832H9EIvvxRebeDMx4uKovM8ZEDt6ModLpkUoO06Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:ce:a2:56:f4:1a:88:b0:bb:d5:1c:76:2e:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Apr 28 08:00:53 2025 GMT
Not After : Apr 29 08:00:53 2025 GMT
Subject: CN=fcef2eea11e4e88ee44f08df73e32cf1f7ce010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:c3:f2:6c:fc:51:2d:c5:d3:50:fa:99:8d:
6a:64:3a:3c:8e:13:34:10:4c:6a:db:90:a8:16:f5:
a3:b4:fd:83:a1:e4:2b:2c:cd:67:1e:31:98:1d:74:
91:bb:ac:01:64:a3:a7:3f:f6:90:17:cf:b4:77:86:
a7:36:69:78:45:fa:ac:a3:a1:a4:f5:46:38:7e:eb:
2b:35:d3:1d:81:8f:96:06:9c:dd:67:79:4c:72:78:
23:06:4b:b3:5d:d7:b4:26:4e:a4:32:65:5e:e4:d2:
06:a6:cd:25:7e:8f:a1:1d:84:b5:a4:20:ab:bf:8b:
8c:14:0e:6a:21:d5:a6:fa:dd:b4:1e:f2:d6:06:3f:
6f:19:83:93:e8:9f:ff:72:74:c5:49:0e:9d:e3:18:
54:aa:7c:bb:49:d6:99:61:4f:c3:ea:ad:2b:db:ac:
f1:3c:6a:45:1a:37:07:a6:5e:e7:0e:a2:73:26:e7:
57:1c:45:69:ea:93:57:08:3c:69:8f:a5:8f:92:a2:
c2:58:d9:ff:8e:67:47:99:e6:22:3a:83:09:89:7f:
55:5f:1d:bb:37:a5:2a:d1:0e:87:08:14:d9:ee:93:
7e:2e:29:ae:33:07:80:26:a1:a8:53:d5:d8:8f:85:
bf:23:a8:5a:fd:ba:9e:6b:2b:78:50:61:37:1b:d4:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:2E:EA:11:E4:E8:8E:E4:4F:08:DF:73:E3:2C:F1:F7:CE:01:0A
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:fc:d6:82:22:96:b4:3a:fb:88:d6:fc:54:a0:93:51:21:
9d:4c:27:54:09:a6:ab:5f:23:34:cd:e0:74:8a:0e:e8:5e:d0:
cd:c7:10:12:4f:e4:ab:7d:31:7c:b4:cf:6c:3f:dc:06:49:54:
6a:08:d7:6e:cf:51:98:b7:81:aa:14:07:d1:97:80:93:1b:aa:
6b:13:03:ca:0f:b3:4d:5c:f8:44:14:6e:1f:01:96:39:44:0e:
9e:f3:da:d6:a0:54:92:2b:99:dd:0b:ad:42:cc:2d:59:87:96:
c6:dd:5d:97:4d:bd:25:b0:ac:46:d4:75:15:d5:1d:4a:8a:3c:
1d:ac:62:c9:b4:d0:f1:19:a6:1d:8c:0f:5c:81:a9:8b:b7:e1:
5d:22:0f:07:fb:86:20:c4:b8:22:4d:3f:4a:a6:82:ca:56:4b:
dd:9f:e4:d4:74:42:0b:14:3d:e9:6f:08:d6:be:fa:c1:70:8e:
c4:cb:d6:af:cc:71:19:b1:62:10:ba:62:ee:0d:1b:8d:a2:42:
4a:9c:be:b5:a7:21:52:18:b9:4f:40:98:99:4f:ac:6f:cf:d9:
a5:9f:90:d2:93:f4:54:b3:81:c8:15:79:fd:e2:d4:ac:eb:20:
3d:73:46:18:5d:dd:17:de:56:12:a0:76:9b:60:ed:aa:02:5c:
ca:bc:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:44 2025 by rpki-client