Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: 9sit4ZCr6n5OaSGuyL3yO8d0l3/rg2rCdxAa4y7vtMs=
Subject key identifier: 38:05:F3:0C:21:EF:FC:E7:E1:65:9E:D2:68:A5:38:CA:7E:EE:7D:76
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 01977B307933167EADF3A9E28256ABD53427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0B5F
Signing time: Tue 17 Jun 2025 00:01:03 +0000
Manifest this update: Tue 17 Jun 2025 00:01:03 +0000
Manifest next update: Wed 18 Jun 2025 00:01:03 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: /xWBI8aVE38cNjWXMws6SrmPaLSEuPbf++QyuSF248M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:79:33:16:7e:ad:f3:a9:e2:82:56:ab:d5:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Jun 17 00:01:03 2025 GMT
Not After : Jun 18 00:01:03 2025 GMT
Subject: CN=3805f30c21effce7e1659ed268a538ca7eee7d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:c7:e8:58:b3:6c:70:25:ed:d6:cc:61:c9:
16:53:27:99:b9:d7:0f:ba:0a:45:cb:cf:29:89:0b:
3c:24:75:c5:46:03:96:0a:f4:1d:4e:1a:f3:cb:f9:
d2:fc:84:30:94:83:9a:3d:5c:24:6c:6f:1c:31:b7:
dc:92:60:43:0a:77:f1:4d:0a:37:19:2e:4d:42:e8:
71:c0:e7:05:0e:00:65:55:49:c4:bc:d2:d8:1e:63:
d0:0a:05:6c:e1:a0:34:d9:23:3f:d3:02:4f:4d:50:
ed:00:c8:a9:29:c0:01:f4:32:55:7c:f6:30:d3:35:
47:2d:fd:fc:eb:cf:be:ec:d5:db:db:f6:23:32:f2:
ad:e1:a6:f8:1f:44:69:4d:a7:51:9e:67:19:9f:e4:
10:e2:7a:27:30:6f:b1:6a:9e:5f:f3:3e:1d:e5:09:
a7:ad:fa:4a:48:8c:18:06:e8:f1:7f:64:3a:70:9b:
30:77:db:76:cf:bf:a3:35:3c:67:c5:b6:5c:b0:40:
25:3d:ad:9b:8c:3c:e6:f5:aa:47:27:27:40:d6:a5:
bc:9a:00:a5:cc:3b:ad:2c:13:e6:e5:19:13:5b:23:
8f:14:d2:20:08:5f:3e:5b:a6:e3:33:81:97:66:61:
8b:08:ee:b5:b5:e6:8d:da:80:d4:b5:43:63:14:6f:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:05:F3:0C:21:EF:FC:E7:E1:65:9E:D2:68:A5:38:CA:7E:EE:7D:76
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b0:2b:8e:43:de:31:e3:2e:1c:a7:32:5b:24:7e:29:03:5c:
e6:f3:c7:ec:55:f7:2b:2e:55:9f:3c:2b:70:54:ae:65:87:5b:
64:30:97:22:bc:ba:e9:d9:4e:91:b7:c4:42:53:1e:3f:4e:fb:
78:27:4a:4a:38:e3:f1:01:01:1f:3a:6c:e8:f3:eb:c9:4b:76:
ff:5e:a6:0c:16:00:79:6e:8b:0a:62:ca:ba:52:40:82:f0:88:
da:fb:be:0c:09:d6:08:46:70:e0:4d:c9:8a:3e:d1:d1:2a:be:
c2:6d:e5:9b:35:ca:59:10:b1:db:f4:26:ee:4d:e1:cb:7f:31:
f3:74:06:bc:e0:b0:41:85:2f:0f:e1:02:65:a7:1a:12:3b:55:
d9:af:3c:c4:94:87:41:39:50:43:da:07:d9:34:c6:24:6f:de:
86:5d:e1:8c:0a:19:ab:74:ed:2f:38:ec:5b:0a:d7:76:27:fc:
c8:7c:82:51:bf:ae:6d:e5:df:8d:d0:93:20:1c:64:28:0c:8a:
f6:a4:4e:d1:4c:69:1f:a4:aa:83:84:49:32:8c:fc:73:94:5d:
d6:86:e4:ca:f6:76:08:4b:55:ec:69:9f:c7:13:64:22:80:d2:
0d:4e:0e:f0:b5:31:76:b2:cb:d2:47:b2:32:8b:3b:e4:e7:61:
1d:14:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:43:51 2025 by rpki-client