Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: MWKJ+0Nuhn65uodGRCcCG6ObMU/QygCQDj8NfZYTJMA=
Subject key identifier: 32:51:F9:B3:29:D4:C4:FD:8A:28:B2:44:9C:BD:1E:CD:26:6E:F6:C1
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 01976D3E8C7876F09E4B138EA82BA1C30369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:45 +0000
Manifest this update: Sat 14 Jun 2025 07:01:45 +0000
Manifest next update: Sun 15 Jun 2025 07:01:45 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: TQzvuLcZRD2z2zlVQauKcGlfE/3VMBx5izvAD88Kv8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:8c:78:76:f0:9e:4b:13:8e:a8:2b:a1:c3:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jun 14 07:01:45 2025 GMT
Not After : Jun 15 07:01:45 2025 GMT
Subject: CN=3251f9b329d4c4fd8a28b2449cbd1ecd266ef6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:53:39:af:30:43:6c:d2:5f:37:8f:52:ba:
1d:a5:12:80:91:3e:eb:a6:0e:37:4c:54:c5:b2:9f:
d6:02:4c:e4:0a:59:32:e6:23:6d:ae:07:ef:7d:8d:
08:c5:bb:36:60:1a:f9:93:16:c9:9a:5d:26:82:71:
90:5b:93:df:c4:de:ac:e4:2a:bd:75:48:ee:e7:dd:
75:6c:db:42:40:a2:3f:7b:7b:60:0a:a5:c2:22:a1:
55:b9:f4:9c:f2:d5:6b:7d:b4:53:d7:46:9d:f0:10:
f5:52:80:8e:69:fe:21:3b:55:9b:9d:72:65:51:0f:
61:be:d9:fd:32:e7:b2:a8:0e:89:3d:8d:d4:45:86:
91:f6:e2:a3:e6:e0:2e:4e:8f:58:c6:06:37:a1:57:
1b:9b:b5:10:48:83:81:91:4e:30:23:91:b4:64:32:
9a:6e:fe:88:ae:5e:77:cb:2d:c8:1d:66:44:91:71:
94:7a:84:1a:31:dc:eb:5f:99:bc:bf:5f:82:03:ca:
2c:ee:d6:58:50:b5:86:19:d3:04:ae:65:a1:84:0f:
6e:6e:67:27:65:c7:4c:2e:b2:3d:c7:7c:6d:fa:e7:
55:a7:ca:80:d6:c7:f0:a6:c8:4d:e4:93:8a:1e:34:
47:d2:dc:5e:21:dc:b1:f8:65:a2:a7:df:12:82:4d:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:F9:B3:29:D4:C4:FD:8A:28:B2:44:9C:BD:1E:CD:26:6E:F6:C1
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:5e:73:25:07:ef:eb:9d:74:18:04:c0:bc:fd:7c:f9:f6:
33:7f:d4:1b:87:e7:a8:a3:27:26:63:d6:02:1d:6c:e9:cd:a6:
50:b8:c1:31:25:0b:fa:98:d4:37:ce:6e:58:9c:95:83:63:b9:
c7:ba:7f:7e:19:79:33:da:63:35:44:c4:53:fe:9b:83:75:36:
e4:e0:c5:8c:4f:5e:af:39:76:50:80:0d:16:64:b5:03:4e:e0:
65:b2:61:36:ae:15:07:57:99:e1:76:e3:52:62:d6:f6:8a:f3:
1b:67:ad:b0:5f:71:ba:6d:0d:d3:f7:8b:72:8d:77:f3:a4:ee:
bb:88:c2:8c:49:82:3a:aa:11:a8:8e:e0:ca:b1:33:e7:8c:3e:
41:11:61:85:bb:2f:25:76:9c:18:1b:96:66:fb:08:5c:5c:cf:
4e:b5:c7:6c:da:53:c6:db:e1:fb:ac:1b:96:50:0b:f9:0f:79:
78:34:fc:b7:40:2c:34:5e:b1:d1:81:81:f9:1e:78:80:d3:27:
96:34:ce:cb:33:fa:47:9a:11:33:47:b6:dc:f3:c5:34:fa:9d:
d6:17:d2:c7:b6:8a:7d:61:ac:37:c4:9c:4a:1e:a7:f2:2a:2b:
6e:ad:13:fd:59:0b:e6:14:0a:85:bd:c0:2b:e6:73:ab:07:96:
61:09:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:40 2025 by rpki-client