Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: ok7PFr7VquC+wIbJwXl47fpZpe1YK1TONyDsMNI6C1E=
Subject key identifier: AF:C7:E6:A0:4B:73:0E:21:EE:40:55:3D:58:CD:B6:78:C6:CC:92:94
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 0198879FD4EAC0119CF0253677F3300F8E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0EE7
Signing time: Fri 08 Aug 2025 03:00:55 +0000
Manifest this update: Fri 08 Aug 2025 03:00:55 +0000
Manifest next update: Sat 09 Aug 2025 03:00:55 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: g3aYWKMcyuI361NiF4Ov9Fquk0qK6oMViFWyrAFoeDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:d4:ea:c0:11:9c:f0:25:36:77:f3:30:0f:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Aug 8 03:00:55 2025 GMT
Not After : Aug 9 03:00:55 2025 GMT
Subject: CN=afc7e6a04b730e21ee40553d58cdb678c6cc9294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:46:93:a7:0d:12:b2:74:f8:82:f0:b2:72:
c8:04:a9:33:be:ed:49:92:97:09:1c:82:3a:fa:46:
06:11:6c:b9:3f:ab:6c:d3:68:4e:e1:78:ec:cb:19:
97:40:9d:53:07:70:ef:62:23:44:f6:34:bb:18:54:
36:f2:58:cd:2f:ac:13:32:d5:04:da:dc:25:34:b7:
d5:a9:7b:55:41:0b:d2:9e:ef:45:53:85:bf:ff:94:
fd:af:9e:15:de:d5:bc:0c:da:d1:ea:5c:15:dd:6f:
9a:e1:84:b6:59:c9:a3:14:53:c5:6b:f2:f3:ee:51:
7d:87:52:e1:9a:a6:0c:10:d5:e9:a2:19:c8:07:bc:
cd:a5:38:a7:f7:79:f5:54:e0:c4:16:12:34:85:71:
8e:90:75:99:11:2f:03:43:d3:17:5f:2e:71:86:32:
44:ae:d6:9a:70:31:c0:cb:11:6c:09:b4:30:2c:9d:
88:65:38:20:10:ba:2c:64:15:6c:d3:ca:1b:75:a8:
41:29:1c:e0:5e:96:5f:4c:57:53:c2:33:01:c9:41:
0d:82:f5:fe:7c:4d:f2:8b:f0:9f:3b:84:8b:38:a2:
aa:76:85:8f:f9:51:64:62:fb:7e:1b:06:21:1f:be:
b8:46:28:73:a3:18:d2:a9:07:72:30:53:54:33:0a:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:E6:A0:4B:73:0E:21:EE:40:55:3D:58:CD:B6:78:C6:CC:92:94
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:ec:75:a1:23:49:14:d5:72:b7:d6:c2:d4:cd:c6:52:79:
fe:1f:2c:ad:9c:7d:a4:ce:be:f0:39:7e:4f:ad:a5:d6:89:7b:
6e:cc:c4:d3:b3:f7:87:dc:9a:0c:63:99:66:81:86:28:82:69:
f1:a9:c4:29:7a:16:02:d0:ed:4f:8a:95:9c:27:2b:47:fd:22:
4e:0e:22:2b:71:97:8b:3b:98:63:a3:6e:6f:18:7d:c8:77:f5:
64:71:27:39:e5:9a:e4:3c:0e:49:f7:c0:3c:ea:8b:c4:c6:ec:
6e:ef:ae:04:03:6c:25:a6:0f:1d:b3:d0:ad:dd:4b:bc:44:9f:
32:bf:5d:3b:b7:d5:bf:16:0d:26:4f:57:64:c1:a1:f2:50:83:
60:31:d8:ee:53:dc:8a:ef:b4:69:82:83:9e:25:78:69:53:3f:
e8:59:7b:5c:65:58:24:6b:8b:36:26:fe:3d:bd:78:1c:ef:e1:
16:61:d9:1b:40:8f:07:06:2e:3d:78:ae:82:d4:1b:2c:b8:94:
8e:1b:ef:11:50:7e:ed:08:3a:b0:a7:c8:4a:95:37:5c:42:36:
4f:cc:95:12:ff:bb:40:91:f7:db:e9:1b:4a:54:da:11:b5:18:
57:b7:b2:7e:5a:d5:33:ba:39:0f:85:1e:6a:20:be:e4:af:e6:
c1:dd:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:35 2025 by rpki-client