Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: 6We61T8YxnB2nUn0hijvq6b70IqHLDvpzWoCpafxdSI=
Subject key identifier: CF:1F:46:95:00:73:68:2E:7F:90:67:5B:3B:FE:3B:B5:07:05:00:90
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 01976BBD0A4AD4798461421AE654C99DA3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0E54
Signing time: Sat 14 Jun 2025 00:00:40 +0000
Manifest this update: Sat 14 Jun 2025 00:00:40 +0000
Manifest next update: Sun 15 Jun 2025 00:00:40 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: A2v4b/PSP7iBw0A82VWOU4ssdhBGQ2SlJ4tG71MKY4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:0a:4a:d4:79:84:61:42:1a:e6:54:c9:9d:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Jun 14 00:00:40 2025 GMT
Not After : Jun 15 00:00:40 2025 GMT
Subject: CN=cf1f46950073682e7f90675b3bfe3bb507050090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:25:e5:8b:ee:05:bc:64:66:f5:20:8e:70:
ef:58:d0:1c:bc:32:6a:ce:ba:80:e3:3e:b7:c3:ad:
2f:94:fb:04:f4:29:c9:7e:04:b7:45:15:64:75:14:
c5:ef:15:d4:60:83:7a:f4:16:fc:10:0d:7b:60:33:
7d:f7:5d:3d:e1:ee:26:c8:d2:aa:34:ec:27:bd:46:
42:2c:4c:7e:f1:0e:e0:60:36:66:63:33:b5:fb:28:
b2:27:8b:eb:83:db:60:2f:be:a9:4b:20:48:a7:d8:
92:ff:8b:e3:80:2e:5f:6c:9d:f8:20:3e:3c:27:64:
0e:ba:fa:d1:df:df:d1:18:b2:12:15:f8:c6:97:c4:
bb:6b:d0:c7:17:b9:2b:f7:a3:5d:ff:9f:64:6b:cf:
7e:e3:4f:08:59:13:5a:53:8e:31:ad:8c:ac:df:64:
5a:4c:da:4e:c4:d3:65:2d:fe:8d:fb:b5:46:a1:4b:
00:48:27:2a:83:70:35:db:d0:43:89:6d:56:94:41:
bf:8c:d7:86:c1:2c:63:1a:25:a0:0f:04:7b:3a:84:
af:e4:19:01:62:82:4d:9b:db:f1:46:d0:b6:64:e7:
6a:37:fe:e1:13:c2:f5:01:a3:1e:10:2e:a7:58:76:
9b:ff:0c:c3:7c:93:15:55:b5:16:c9:c1:f6:69:4c:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:46:95:00:73:68:2E:7F:90:67:5B:3B:FE:3B:B5:07:05:00:90
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:ec:12:8f:62:f0:4e:83:a6:e7:6e:66:4c:6b:7a:6c:18:
9e:37:39:0d:36:44:ad:1c:1a:b3:2d:c7:d8:17:b1:66:7d:a9:
37:5d:7e:6b:64:73:fe:cf:15:51:e3:6e:db:e8:f0:e4:c4:92:
2d:68:2c:a8:58:b2:8e:be:60:7d:4d:87:75:fb:8c:31:41:04:
9d:99:72:64:4b:c7:56:16:bc:27:e7:88:4b:0d:aa:e4:9a:83:
6b:77:63:d4:94:2a:e2:5c:76:87:b7:1f:95:a0:33:0f:e4:d4:
74:19:ef:d7:19:1e:e5:4a:6b:0e:55:6a:0d:3a:44:39:c0:f1:
16:a2:eb:d5:8b:ac:1b:45:31:b3:9f:3b:1d:b8:f0:92:dd:ef:
42:d4:39:66:62:58:70:da:e0:00:dc:4f:a3:c4:71:69:7b:30:
f2:23:60:e7:25:0d:2f:66:2c:a9:96:cc:ff:b3:d5:37:34:f7:
51:a9:09:a0:cf:f8:88:1d:6d:f0:78:8d:73:34:a3:ac:67:f3:
7a:64:f6:ce:78:90:9a:bb:04:51:1e:cc:56:aa:45:af:98:de:
70:1e:e1:85:fe:66:a0:62:a8:1f:ec:73:93:62:40:a9:37:42:
4f:e5:c0:d2:5c:c1:d5:67:6b:71:5f:e8:1d:b8:61:a7:5f:4f:
e3:e2:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:35 2025 by rpki-client