Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: 2eUYy7w5h9ZFp6D7jQoKSQEb8hNi5RSv3SdT+du6F18=
Subject key identifier: 4C:C7:E5:87:81:98:34:72:42:AC:89:2A:2F:DD:55:7C:EA:2F:37:CA
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 01967B69BC4F277A5F798A57E37A8FA36F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 060B
Signing time: Mon 28 Apr 2025 08:00:49 +0000
Manifest this update: Mon 28 Apr 2025 08:00:49 +0000
Manifest next update: Tue 29 Apr 2025 08:00:49 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: C+KhVLKPasebF8e0kVRws9w7JZ6y7GEWZuU8nJcn0Co=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:bc:4f:27:7a:5f:79:8a:57:e3:7a:8f:a3:6f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Apr 28 08:00:49 2025 GMT
Not After : Apr 29 08:00:49 2025 GMT
Subject: CN=4cc7e5878198347242ac892a2fdd557cea2f37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:6b:33:72:7e:b7:1f:19:c4:fa:f1:fb:dd:
a3:cc:1d:40:ce:1a:e1:7f:42:2d:76:cf:2d:c7:91:
a5:20:59:b1:24:b5:1f:5f:4e:83:5e:1c:11:97:30:
7f:3b:43:fd:64:20:52:76:61:5d:40:a9:17:c5:75:
7a:61:b3:19:7f:b3:cf:f1:d8:90:e2:e1:33:cf:3e:
1c:c5:f6:44:58:8d:57:1c:b8:64:a9:bf:6c:4b:96:
4d:92:16:91:98:2c:14:3f:8c:93:b3:71:0b:ca:bc:
a0:cd:7d:de:7d:c0:4c:73:ea:92:f9:57:dc:4b:c3:
97:97:a3:d6:bf:3f:38:67:d1:23:6c:a0:b3:14:e2:
d6:09:c8:72:68:b0:eb:83:d3:64:bf:76:3f:e6:b9:
30:b0:57:58:bd:b9:2f:d2:79:48:de:41:a3:73:84:
5c:e2:27:80:8c:22:42:b1:5b:4c:96:df:eb:62:10:
6c:7d:c2:5b:2f:57:e2:86:06:92:73:c3:85:f0:9c:
64:ee:63:2d:82:9c:1e:4e:b8:8d:a6:74:29:d0:f4:
de:d7:c8:07:1f:30:4c:09:5f:3c:db:8e:32:65:9c:
49:45:41:1b:c5:f5:f4:40:85:93:91:2d:af:cb:06:
39:a8:21:53:32:a7:ab:66:96:1d:fd:2a:30:fb:84:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:E5:87:81:98:34:72:42:AC:89:2A:2F:DD:55:7C:EA:2F:37:CA
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ba:0a:5f:67:9b:85:84:c0:68:4b:dd:0b:9d:9d:87:f1:29:
19:ef:96:58:64:21:f3:84:6c:43:9c:53:0d:51:84:b4:7e:92:
e8:dd:dc:7a:da:7d:65:1c:3a:0c:35:b1:dd:aa:3c:6e:c3:4c:
04:c6:92:17:cf:ca:fb:74:34:df:cf:18:2c:83:c5:a4:0d:57:
d8:0b:18:bf:fe:2b:ef:88:9e:e6:99:85:1e:63:17:9d:8d:e9:
c3:ac:26:24:73:b5:5e:bd:f2:fa:44:83:a7:c7:b5:61:46:08:
b1:8b:1e:fe:65:fa:e4:01:bd:36:25:86:50:63:3e:66:af:b2:
5e:2c:07:29:db:df:be:b8:bf:3e:52:c2:2f:36:6b:4e:a9:64:
b4:9f:ae:7f:e8:17:e5:34:a0:bb:85:cd:7c:f9:ac:b6:fe:d4:
a9:f0:99:77:48:1a:7d:fe:6f:05:38:cd:36:57:2f:a1:f4:04:
d0:7e:d4:af:39:5f:67:11:d5:e0:c2:0d:d0:6b:79:95:8a:16:
15:36:f2:b9:1d:28:91:3e:ee:60:a0:19:e2:29:da:c3:a4:5a:
10:5b:ea:63:15:8a:af:4c:93:20:25:6e:d5:f2:bb:fd:a0:f0:
2d:35:91:8b:d0:7c:b1:04:20:f5:35:c1:fa:d9:e2:5f:17:47:
71:05:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:40:11 2025 by rpki-client