Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: skJhQvTtGp76dGL+HtyEcssWxV27efvPxaKlwutWAsk=
Subject key identifier: 18:D9:CD:40:F5:E8:91:D2:F4:EE:DF:2F:C6:70:1A:AF:A5:06:62:47
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019770AC9793D0E1CFF0D72F2AB9B02BB7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 068A
Signing time: Sat 14 Jun 2025 23:00:48 +0000
Manifest this update: Sat 14 Jun 2025 23:00:48 +0000
Manifest next update: Sun 15 Jun 2025 23:00:48 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: qNyZyLva1sYzPRgzIQe4Y8TcsowfWvV9TTEUKo7NBp4=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:97:93:d0:e1:cf:f0:d7:2f:2a:b9:b0:2b:b7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Jun 14 23:00:48 2025 GMT
Not After : Jun 15 23:00:48 2025 GMT
Subject: CN=18d9cd40f5e891d2f4eedf2fc6701aafa5066247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:68:f8:da:28:95:a5:e4:9c:eb:5f:1a:e8:
20:13:3e:ef:d2:8e:ba:09:7d:74:23:ba:7b:04:00:
dc:a9:16:08:6d:30:47:94:5d:cc:37:96:97:a3:e9:
b1:aa:d0:47:44:c6:70:11:ec:13:83:35:29:d0:51:
92:94:42:d2:61:4b:80:b9:39:9a:1c:6c:fa:5b:f9:
8b:88:94:e2:04:ad:0b:1d:8d:41:ea:f0:6e:84:09:
df:25:5e:da:ea:d8:4f:f6:be:c0:fc:d2:46:ea:f7:
dd:15:c6:2f:06:85:4d:12:b7:bd:37:ef:7e:02:ab:
bc:2f:b3:46:0f:34:21:0c:c4:62:40:00:d8:30:b9:
da:7e:59:b4:ee:6e:9b:c4:2d:1a:c7:bf:91:b2:17:
7d:e0:3d:f3:30:be:ca:47:e9:be:ef:7a:5b:e5:4f:
92:b5:da:bc:dc:d2:b6:71:af:0c:54:f2:35:98:ef:
cd:37:d4:98:87:ce:fa:46:f9:76:c6:12:6d:06:76:
4b:b3:b5:a7:fc:78:9f:62:22:04:15:92:2d:23:e0:
f7:02:fa:a1:69:68:bd:4b:35:79:7c:55:b6:04:00:
54:bf:a1:05:32:08:b5:78:ba:51:1c:4a:60:27:ea:
13:fd:85:32:8f:ef:17:47:06:ee:80:d2:e9:12:14:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D9:CD:40:F5:E8:91:D2:F4:EE:DF:2F:C6:70:1A:AF:A5:06:62:47
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:f7:ee:f2:a2:f2:05:72:d4:4a:9a:47:8c:8a:0c:3f:8f:
35:c5:3a:8c:5f:0d:5d:c8:92:bc:12:e8:06:35:24:56:39:6d:
68:b7:62:f4:c0:99:c5:b1:91:6b:62:ef:84:d1:b6:a1:d9:4e:
b6:03:dd:42:cf:ac:b9:bf:6a:0c:36:70:2c:c9:1c:aa:b6:cb:
30:1d:a4:bb:46:c7:2a:1b:6d:b3:20:da:24:da:7e:e9:86:22:
5f:3b:80:9b:98:27:89:03:78:d1:96:63:b6:9e:2d:7b:ed:b8:
b8:cd:d5:10:04:62:36:7d:11:46:5f:e0:e4:18:e8:27:2a:98:
27:fa:fd:cf:c2:4e:81:55:ba:3a:92:52:08:82:fc:d5:c2:5e:
34:95:38:2c:8c:48:f4:72:18:b7:d6:38:46:98:97:9a:2f:3f:
6a:3d:7e:81:60:00:9a:6b:2a:7a:5d:59:97:82:a5:70:89:31:
96:01:a9:53:5d:ae:a6:9b:3b:f5:25:b2:31:4e:37:55:80:76:
de:06:16:9c:96:4f:c6:d0:ba:fd:85:c2:60:fb:50:e7:04:b3:
7e:3b:ca:5a:d0:63:1c:fe:01:89:a7:95:0f:eb:dc:aa:69:6c:
74:51:11:63:45:08:0b:78:50:1f:c6:8b:31:a5:bf:db:1b:24:
55:da:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:31 2025 by rpki-client