Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: jKv8+e9JFh13IFtOYiLOIjz8cvnLQcyge9ULGN1JAQ0=
Subject key identifier: 73:1C:81:6C:EC:69:9C:7F:C9:37:74:5D:AD:72:5B:F0:F3:42:F0:70
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019675679F6CCB95B06215DA69F48D8E9215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 0EB0
Signing time: Sun 27 Apr 2025 04:00:47 +0000
Manifest this update: Sun 27 Apr 2025 04:00:47 +0000
Manifest next update: Mon 28 Apr 2025 04:00:47 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: Mlyfr3iE5H4MWYS5EzogWPdp8XU/Wg1OqsFJ4FvFe6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:9f:6c:cb:95:b0:62:15:da:69:f4:8d:8e:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Apr 27 04:00:47 2025 GMT
Not After : Apr 28 04:00:47 2025 GMT
Subject: CN=731c816cec699c7fc937745dad725bf0f342f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9c:98:0d:12:ee:cb:77:cc:1c:c9:76:52:de:
79:2d:23:cd:23:89:52:6f:4e:e0:35:c5:1d:da:9f:
05:9b:f5:0f:50:0f:e5:26:33:12:88:1b:f5:1e:21:
0c:e0:8a:8e:79:d4:92:66:17:8d:bf:5d:5c:5a:4d:
87:6d:f9:b6:1d:e5:6b:11:b8:f3:f0:e6:e0:70:f8:
b3:dc:9d:1c:70:ff:bd:52:94:cc:df:1f:77:12:71:
8e:54:94:2c:9e:d6:b5:95:69:f9:f5:4d:76:02:90:
ab:41:8a:d0:2c:5d:1f:6b:a6:07:de:44:4a:db:68:
36:6c:5a:85:92:c1:a6:b5:10:bc:00:b4:1d:ea:16:
d3:50:d6:98:53:0c:b0:3d:8e:b7:1a:1c:9d:2a:cc:
94:fc:5d:cd:6c:a0:5c:59:ea:16:4c:8d:10:7d:a0:
cc:9d:61:2c:a0:bb:56:ba:e9:ca:a0:a0:00:27:0c:
71:2b:ce:6d:0b:63:5d:c7:5b:70:c2:2b:85:b5:c2:
d2:1c:94:59:60:96:5e:7f:74:48:72:cf:49:31:d7:
5c:5f:02:ad:da:77:9e:0e:9e:95:5a:03:93:6c:f3:
ed:57:be:d1:e1:f0:67:c7:fc:7f:8c:0a:a4:7b:78:
63:77:d3:3d:a8:11:d0:51:e8:5b:96:11:6b:eb:db:
da:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:81:6C:EC:69:9C:7F:C9:37:74:5D:AD:72:5B:F0:F3:42:F0:70
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:02:b1:3a:10:67:2e:91:6d:05:20:e6:f0:49:dc:a0:be:2f:
b7:2a:81:80:c5:4a:39:a6:34:2a:62:bf:cf:37:e4:22:b0:25:
af:a5:03:df:d1:f6:3e:47:6c:78:b2:a3:53:c2:f1:ae:c0:95:
bc:0c:16:67:90:e4:b6:dc:3e:98:ac:2d:91:5d:40:07:1e:0a:
53:d0:4e:b9:d7:60:4a:44:e5:f5:1d:8f:71:9a:52:4c:63:09:
fc:c7:db:d7:0f:94:4e:b4:64:7a:4e:60:05:72:b6:33:c3:19:
df:f0:9c:40:3e:29:55:1b:91:66:06:17:76:bc:9c:1b:5e:7a:
75:95:96:ae:6f:d5:bc:bb:ad:77:4d:59:0a:ea:84:6b:b0:e4:
8c:64:87:f5:d9:9e:ef:35:8c:f0:ee:4c:ba:87:31:ba:e4:a7:
8d:62:92:1b:5f:cb:9f:eb:19:9d:93:98:fa:21:91:c5:5f:63:
45:a1:c4:32:24:d5:0d:c3:be:7b:34:01:1f:85:4a:b9:c3:a5:
2d:da:3c:22:e2:20:64:47:27:dd:10:ae:14:da:3e:43:8b:2a:
39:70:31:ef:9d:8a:c7:f7:11:8b:c6:d8:6a:46:eb:45:46:af:
c9:9a:4a:bc:19:2a:47:ea:f1:c1:55:9a:37:e8:32:98:89:ae:
91:65:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:29 2025 by rpki-client