Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: Lvt2pT6h5lO2Qeqa6pNk0wR0UlSuMs12OIkk//HnLv4=
Subject key identifier: 47:06:71:AF:87:E0:F5:40:34:B8:66:CF:9B:6A:43:72:5E:40:AC:89
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019768BC54B89408AB377F1103B302D2D5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 0F2E
Signing time: Fri 13 Jun 2025 10:01:02 +0000
Manifest this update: Fri 13 Jun 2025 10:01:02 +0000
Manifest next update: Sat 14 Jun 2025 10:01:02 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: 1amsL0UbkzEhqzljQVooGpJL0jhj0wft/NbJH7weaSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:54:b8:94:08:ab:37:7f:11:03:b3:02:d2:d5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Jun 13 10:01:02 2025 GMT
Not After : Jun 14 10:01:02 2025 GMT
Subject: CN=470671af87e0f54034b866cf9b6a43725e40ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:55:f3:b2:48:17:9b:f8:66:90:4e:50:7a:
3e:98:ab:14:60:07:04:77:eb:cd:0b:d5:5c:d2:54:
5c:05:1e:e2:87:a6:51:b9:2e:11:96:03:df:c2:b1:
e5:08:75:47:5d:f7:d5:2b:73:68:00:c7:02:80:3c:
a9:4c:ad:2d:dc:77:4b:91:e3:cb:26:96:23:93:bf:
89:3a:b8:a0:39:95:96:7f:6c:0d:03:f8:4d:de:8b:
78:1b:2a:e7:99:09:a2:9d:f9:3f:09:bb:fe:43:c2:
bc:b1:7e:9d:e6:7c:cc:b1:25:b2:b8:62:3f:62:40:
61:13:f9:12:b3:0d:ff:33:e7:e8:dd:5e:b4:0c:26:
ec:d4:c9:40:d0:f8:6e:c9:7e:fd:d9:de:28:6d:b7:
0c:8e:f8:bb:c8:74:cf:d6:bc:89:94:90:eb:04:57:
73:f4:29:b0:15:1f:51:67:0f:88:b7:7a:cf:af:25:
74:21:fa:3c:12:8b:f0:6c:26:eb:c7:bb:15:5f:77:
23:bb:4d:3c:36:41:13:45:33:ae:c6:c3:f9:2a:e9:
d3:b2:02:38:76:32:32:c1:b1:12:50:81:ff:86:8d:
66:78:69:83:74:87:71:fb:ed:6e:2a:5e:c0:40:47:
0c:1d:47:c7:f5:24:f9:6b:6a:9e:98:1c:31:f1:10:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:71:AF:87:E0:F5:40:34:B8:66:CF:9B:6A:43:72:5E:40:AC:89
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:df:39:83:79:ae:ef:19:0e:b0:5a:8b:4f:0d:2e:2e:ed:
fd:22:db:56:4e:cc:5d:70:4c:27:1b:01:35:0d:28:51:6d:c6:
16:a7:e1:10:e2:7f:cd:26:f4:d2:86:34:b1:91:af:82:7b:79:
b2:80:d0:d4:b0:e1:2d:f5:2a:a9:24:a0:6d:b9:24:74:77:d5:
94:8e:54:c1:83:9b:b6:27:dc:73:66:08:61:f2:72:19:f2:db:
8b:03:b7:8c:6e:a6:0a:72:66:c8:eb:19:fd:89:4f:a4:86:1c:
68:a4:d5:bb:0c:ca:f8:69:6f:1c:c3:d7:19:5c:16:77:1c:29:
57:2c:4e:ac:23:5b:40:07:18:bf:87:48:0f:f4:30:3b:15:15:
33:ef:29:34:45:11:93:23:17:a2:9c:79:dd:77:6b:6b:09:31:
45:16:4d:5a:81:be:30:56:24:a4:9d:db:d0:42:aa:0e:85:81:
a9:28:92:55:35:6a:7f:21:60:4d:3b:3c:a6:ed:bf:6e:07:97:
1d:88:45:fe:bc:62:15:7d:8f:95:f7:d9:50:69:01:af:fb:e4:
77:7e:c5:a5:23:1b:d8:67:5e:7d:5a:f6:b4:7a:d8:f2:54:d3:
de:fc:f5:3e:3e:61:cf:ac:2a:55:8e:f9:cf:1b:c5:24:7e:ca:
65:29:dd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:38 2025 by rpki-client