Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
File: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft (raw, json)
Hash identifier: mIuINuPQ+CDM6ItkErh1/qAvESy6g67j+U0D7NiCC2o=
Subject key identifier: A7:A6:B8:EC:C2:81:53:03:48:F0:06:67:C9:23:AB:8B:37:62:24:4F
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Certificate issuer: /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial: 019849D2DAB40DAD7C28FE973DCA6FBFF38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:12 +0000
Manifest this update: Sun 27 Jul 2025 03:00:12 +0000
Manifest next update: Mon 28 Jul 2025 03:00:12 +0000
Files and hashes: 1: 0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl (hash: FCGUcbSpbThMGY/pFtqicWsywBUI2gat7gy8c8W1D/M=)
2: f7YxschREuysiSjDT6JDZ1hIzJU.roa (hash: od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:da:b4:0d:ad:7c:28:fe:97:3d:ca:6f:bf:f3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
Validity
Not Before: Jul 27 03:00:12 2025 GMT
Not After : Jul 28 03:00:12 2025 GMT
Subject: CN=a7a6b8ecc281530348f00667c923ab8b3762244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:e4:dd:bf:67:32:6d:dc:f1:bc:f6:42:2a:
1f:55:b2:54:c5:87:8e:e3:f5:57:42:c3:7a:82:48:
7b:2c:e2:f3:c9:67:41:e6:b6:ec:6e:4f:0c:3c:a6:
5d:dc:d1:d7:f1:39:83:d6:60:06:02:2b:dc:a8:97:
51:a0:41:04:ee:33:b7:b9:f2:cd:c6:eb:21:b5:5f:
c5:f7:02:1c:ed:57:85:37:2a:ab:03:88:12:09:72:
c5:f8:f0:93:f5:80:de:6e:88:f5:47:9b:2f:3b:da:
5d:da:07:e4:a7:f4:f4:55:b1:1d:06:5b:1d:97:9a:
72:37:d9:f4:21:6f:dd:ff:26:45:82:9d:26:12:f0:
84:7c:b5:d6:f6:17:7a:cf:8b:89:18:3d:30:66:e5:
87:12:de:1f:5d:86:21:da:de:e4:68:f7:20:2f:2c:
cf:db:d2:67:52:d1:97:1e:72:b2:2a:3e:54:e1:82:
9b:0b:66:bc:47:57:8d:d4:62:65:e0:47:cc:9e:ec:
e6:61:f9:64:67:f6:69:c5:19:40:39:5c:b3:52:7a:
a0:91:38:72:d4:c5:28:fb:cd:1f:0d:be:52:f1:28:
67:21:55:3e:f7:eb:60:b6:2e:f7:0b:c1:81:9c:0b:
8e:5a:bf:37:19:90:38:dc:a0:09:39:42:7c:6c:dc:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:B8:EC:C2:81:53:03:48:F0:06:67:C9:23:AB:8B:37:62:24:4F
X509v3 Authority Key Identifier:
keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8f:bb:cc:d3:0d:80:e4:54:71:95:f8:9f:54:9e:d3:c1:5f:
5d:9a:f5:72:65:44:fb:b1:96:73:44:e0:59:02:69:a9:80:74:
51:68:2c:ab:fa:4c:ec:a2:a2:8e:78:b4:79:aa:f1:ad:6e:9e:
69:9b:93:46:31:f9:e4:c3:c6:b5:62:1b:2e:76:98:bb:7f:cc:
1c:c0:6b:e5:46:dd:fc:31:c0:9f:8a:08:38:ef:66:73:e6:03:
46:15:06:17:8d:f3:48:64:a7:26:6d:fa:13:e2:e3:11:17:29:
cf:f2:90:3b:50:54:8d:29:06:81:d7:d6:0d:ea:e4:ba:dd:7f:
6f:53:b2:9e:27:6f:10:ea:68:4f:ca:1d:09:eb:6e:2d:b8:cf:
b0:ee:d8:3c:b5:2c:78:c1:9f:01:ed:7d:f9:0c:f6:7b:01:10:
b8:bf:a5:4b:f2:f9:a3:09:dd:05:32:91:3f:8e:b8:1d:7e:2f:
7d:b7:e5:84:86:81:5b:84:cb:ed:ba:a6:be:3c:f6:7f:e2:13:
f6:5a:5e:e2:51:9f:e5:37:f5:bb:8e:22:1b:06:4c:2b:5a:09:
c4:bc:f9:96:3c:ac:da:1b:af:19:a0:f4:38:f7:ac:47:a2:54:
34:8c:06:1b:b9:ab:f7:79:d0:af:5c:56:a0:a8:72:79:b0:75:
d6:da:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:55:09 2025 by rpki-client