Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: SoNdQVkd8rjPcLyscRd5uT9d3EFmxjb2wbKgP54JO9Y=
Subject key identifier: B5:A8:83:C4:88:BA:29:CB:C9:C9:09:F3:06:88:73:B9:24:C3:08:1B
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019875627B26AAC9EBF4A7489426FC4BB3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0711
Signing time: Mon 04 Aug 2025 14:00:44 +0000
Manifest this update: Mon 04 Aug 2025 14:00:44 +0000
Manifest next update: Tue 05 Aug 2025 14:00:44 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: NG3OkwcLSDiagsTIBE5Ku/OYY3Cv40fsKcsdEZsqVE8=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:7b:26:aa:c9:eb:f4:a7:48:94:26:fc:4b:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Aug 4 14:00:44 2025 GMT
Not After : Aug 5 14:00:44 2025 GMT
Subject: CN=b5a883c488ba29cbc9c909f3068873b924c3081b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:3f:b5:02:86:69:b0:29:be:47:8f:2c:df:
ce:f5:06:3e:16:b4:8b:3b:b2:d4:ac:92:ac:74:77:
80:de:0a:16:bb:ec:5e:0c:2d:60:42:40:73:ac:12:
d9:54:c6:f0:15:c9:67:53:81:1c:40:8d:ff:d6:89:
dd:7f:9b:8c:5e:2a:f8:46:fb:46:15:7c:83:b1:62:
cb:d0:af:e9:d9:cc:a7:7e:fa:d4:c4:3f:79:7f:db:
20:bc:1e:e4:63:9b:a8:99:47:ff:11:82:12:e6:5a:
23:14:22:c7:57:5f:85:db:4e:e2:bb:46:76:14:84:
3a:bf:7f:7c:c0:2f:8c:85:49:07:b1:81:a6:e9:0e:
51:87:67:f8:1b:db:a1:bd:a5:72:da:af:42:0e:5c:
0d:07:43:7c:b8:d6:97:92:04:53:bd:23:11:27:c2:
ce:d6:6c:5e:81:79:f4:09:63:4b:72:88:13:a3:ac:
6a:3b:38:90:69:f4:67:e3:8d:b6:0e:9b:65:59:67:
34:c7:d5:c6:bd:cb:9d:53:df:3e:83:6c:e4:b4:08:
c3:cf:8a:e9:22:5a:68:88:ff:cc:89:1e:e7:04:54:
34:4b:f1:f1:77:a2:f7:da:36:c2:37:76:12:8f:fb:
1d:f9:c0:ca:f0:35:af:74:d7:c8:70:4e:81:f9:fc:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:83:C4:88:BA:29:CB:C9:C9:09:F3:06:88:73:B9:24:C3:08:1B
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:55:e6:b8:dc:70:7d:8a:fb:cd:96:83:a2:c8:fd:b1:ed:42:
84:e5:50:0f:1d:f7:d4:9b:69:fc:e2:6f:b6:df:25:b1:19:62:
80:54:5b:c6:8a:fa:d3:f3:63:f7:03:ec:ad:74:74:fc:52:5f:
f3:bd:55:c2:a1:7f:83:e7:18:cf:4f:06:8a:57:c5:95:34:3e:
69:d9:13:38:57:c6:36:23:54:32:49:23:63:3d:52:76:2b:70:
2c:5a:c3:69:54:a0:4d:9f:f9:e1:40:34:4b:8b:3b:90:7e:1f:
02:c9:72:e1:64:f4:57:57:d2:0d:bc:9a:f0:d3:ca:cb:1c:fb:
b2:bf:67:38:7b:a7:d8:c0:97:df:12:54:e8:0a:50:e2:85:c2:
fd:f1:87:cd:f2:58:01:24:1b:b7:a2:32:61:6a:ea:59:60:08:
bb:91:32:ae:81:86:07:54:cb:41:1d:be:b4:bd:be:3d:7e:a4:
82:1d:20:db:43:2a:93:5b:a1:c3:26:97:65:5f:b7:b0:8a:a9:
ca:1f:08:cd:8b:8d:29:0d:2e:c7:b8:37:e4:89:ea:d1:6b:1c:
ea:2a:ab:5a:35:1c:3e:db:6f:1a:6e:94:30:0c:97:b1:67:e2:
81:40:9d:97:06:25:a4:cb:94:36:fc:24:08:27:75:74:b5:ac:
5c:52:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:39 2025 by rpki-client