Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: DGIZf95bpJilz1B5Oqe5FS7ueSK4xqUOrZRC/7w2g0I=
Subject key identifier: D9:A0:73:EE:30:E6:2E:03:26:4E:08:96:97:EB:04:C1:43:1F:82:38
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 01987DF822B93EE9C983E614DB911541ACBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 06:01:10 +0000
Manifest this update: Wed 06 Aug 2025 06:01:10 +0000
Manifest next update: Thu 07 Aug 2025 06:01:10 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: LBUFMaQJH2uGkwgBmJb/7dSQbvCGlSICbpc22P45caE=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:22:b9:3e:e9:c9:83:e6:14:db:91:15:41:ac:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Aug 6 06:01:10 2025 GMT
Not After : Aug 7 06:01:10 2025 GMT
Subject: CN=d9a073ee30e62e03264e089697eb04c1431f8238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:5e:63:91:da:57:e7:42:c2:72:2f:14:33:
bf:29:f6:af:a2:f4:6f:0d:ac:07:36:be:c3:81:fe:
63:23:a7:50:39:b2:cd:9e:5c:b5:88:04:9e:c2:78:
cc:94:e3:b3:14:17:dc:03:64:bb:d9:d9:9f:74:e0:
6a:c6:6e:63:d0:1e:51:57:1c:19:ff:18:5f:aa:6c:
77:df:a1:f3:00:20:d8:c2:73:7c:8c:86:bd:9f:d9:
f1:cc:99:81:c2:a5:9d:3f:5f:09:b0:d9:83:02:d9:
bd:b8:72:87:02:38:a6:67:f9:df:3a:ba:37:a7:73:
fc:52:8c:6f:56:5b:a3:a3:00:f3:28:43:a4:c0:39:
3d:bd:1c:53:c4:51:af:93:63:4b:d5:26:64:07:00:
fe:66:66:2f:e1:6e:bc:86:a7:42:18:dd:8e:60:73:
db:bb:fd:3d:4e:8a:68:b8:aa:18:07:57:3b:6a:af:
f4:3b:ce:f1:a4:43:e2:24:08:95:5b:54:07:5f:05:
ab:b9:b7:e2:45:4c:7e:99:da:b8:53:6f:75:99:7d:
60:3a:1d:0d:27:05:39:a0:a1:c3:bd:4b:87:05:b5:
01:e4:34:45:c9:bd:6f:8b:2d:60:7c:ee:f3:cb:fc:
ef:57:d6:fb:7b:96:40:39:50:28:5d:16:4c:7d:e1:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:73:EE:30:E6:2E:03:26:4E:08:96:97:EB:04:C1:43:1F:82:38
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:26:11:63:7d:26:21:3c:de:74:e7:d8:75:9f:be:36:67:87:
32:55:a8:04:02:eb:fb:0a:00:01:85:10:18:75:14:8d:78:ff:
17:08:82:2c:bb:ac:60:27:43:23:21:63:c2:b8:c1:52:c0:44:
9b:2d:ac:7a:43:25:d5:b5:ba:75:d8:7d:e3:da:fd:25:3e:ac:
1a:27:69:1b:46:c1:71:00:be:41:4b:ec:85:2b:f7:e7:e3:8a:
5e:5e:e3:42:94:18:18:44:9f:83:02:05:55:8f:eb:d6:d7:48:
47:a5:51:ae:64:48:4d:7f:f5:90:89:10:6b:84:a4:46:fe:b5:
5e:1d:a4:31:dc:cc:27:c3:ef:c4:88:82:c6:df:91:87:41:fc:
5e:8e:8e:19:3f:2e:d5:4d:0c:f5:a5:4d:b0:c5:5a:66:b2:39:
df:72:1b:d5:8d:bd:43:5f:f8:53:c8:a8:13:9c:04:97:ee:b0:
c7:92:2c:7c:8c:2a:5f:b0:7d:12:9a:7b:b6:fa:9c:4a:d0:6d:
e0:b0:69:e5:2c:41:99:40:f9:cf:79:5c:64:4e:b1:39:02:af:
47:d1:5e:ed:d8:ad:94:9d:4d:14:f3:2b:14:e7:5b:80:b5:5b:
d6:14:20:f7:8a:a0:1e:1c:3c:d9:0a:72:b3:b5:8d:7a:ad:6b:
a1:5f:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:58 2025 by rpki-client