Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: tdwWKsqU2/r/CJxnOrpw0Onje4k6DDC7F/EW58DM0CE=
Subject key identifier: 8C:40:ED:02:50:CF:77:CD:82:45:F3:68:11:E2:3D:CC:57:97:BA:13
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019849D31DF862098EF8C24B81162122971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: hk7pXhGtSWDhg5ELhXlMEPVJA+mX1yCQoH1v7ayYcM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1d:f8:62:09:8e:f8:c2:4b:81:16:21:22:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=8c40ed0250cf77cd8245f36811e23dcc5797ba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:ba:ad:26:08:44:43:d4:68:35:08:1e:af:
d2:39:9c:44:b1:31:5c:ce:57:34:b9:8c:c0:f4:d9:
64:5e:a5:98:1e:ac:8e:d1:a7:e4:c4:68:7f:89:42:
cf:4c:3e:1d:8a:63:93:d3:29:78:f0:33:f7:78:a9:
6e:dc:02:ac:6e:73:71:66:4b:bf:8d:17:c6:f4:d5:
0d:e1:a3:d7:37:78:19:70:51:74:c8:75:94:41:e2:
a3:9d:09:64:32:b0:20:fd:b1:76:2b:b7:32:04:fa:
fc:20:48:7c:a1:ab:d3:92:ea:6d:8b:aa:c9:b8:3e:
ed:e6:a1:d2:46:71:3b:df:3d:65:54:41:02:f4:ef:
0b:f4:e7:f6:68:ad:12:0b:5c:13:ea:82:e1:a0:56:
89:90:1c:f2:64:5f:db:95:c4:f3:ae:da:ed:f3:93:
ed:ff:ec:6c:36:ec:0a:4b:64:c6:58:00:7a:06:aa:
49:ab:db:98:a8:3a:c7:00:61:b0:de:97:05:33:73:
23:c8:f9:9c:70:a3:e4:3e:cb:2b:f9:fa:90:78:30:
27:4e:45:2c:45:33:04:4d:cd:94:ab:c3:f9:bc:da:
ee:52:85:3a:5c:cb:17:4a:cf:ac:19:5f:c8:22:84:
97:84:54:f3:1a:dc:e0:d4:b6:a3:60:46:91:f1:9e:
81:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:ED:02:50:CF:77:CD:82:45:F3:68:11:E2:3D:CC:57:97:BA:13
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f7:5e:f4:0d:5f:32:4f:0f:5e:c0:f2:bd:86:f7:f7:fc:b1:
da:ff:07:78:09:c7:04:c9:9b:10:f5:48:57:eb:b1:08:d3:94:
8b:49:18:0b:c4:c2:42:1d:7b:2b:4e:8d:de:51:f4:37:28:b2:
4f:b0:95:85:b0:7e:29:4b:a7:68:21:55:d9:51:34:6e:c0:9c:
12:02:be:95:b5:48:5c:ac:d7:e7:06:ad:3b:ff:aa:f8:bd:e5:
91:60:58:b5:6d:92:8a:de:f6:b3:55:7e:32:0d:52:17:47:76:
4c:b4:c0:b4:77:95:5b:37:9d:e0:ef:04:f9:65:1c:89:88:6e:
7e:05:64:fc:1d:06:eb:ef:76:40:81:eb:c0:3a:a3:19:a4:c9:
ed:e5:35:0e:bd:14:27:a8:94:92:a6:6f:c0:8e:7f:b2:92:bc:
67:25:37:92:0f:a7:57:94:7a:84:40:0c:e0:dd:7b:fa:c4:af:
cd:41:41:7e:77:7b:0a:67:e8:4e:04:bd:5d:e5:08:d3:f0:02:
b6:09:96:e1:88:f8:0e:72:d7:de:45:05:03:0d:bf:84:81:9d:
c9:77:23:37:70:26:d4:d1:34:e4:eb:61:e1:d0:ed:c9:29:7a:
c7:17:98:7f:6a:63:10:8e:74:b6:c5:7b:11:51:2a:34:d8:98:
de:fd:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:49 2025 by rpki-client