Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: xFxavYIpjFnpor0y/VCbCJDwmpRa7KtQph6Zp36jk1U=
Subject key identifier: DB:EA:E8:CC:A0:80:8D:82:9F:06:3A:66:E1:62:82:97:B5:35:A8:CB
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 01974EC5458A912BAB5269E55CA04E169D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 09:00:40 +0000
Manifest this update: Sun 08 Jun 2025 09:00:40 +0000
Manifest next update: Mon 09 Jun 2025 09:00:40 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: 80TY9IR4Lwsy3itWsvX3bbwLqyLQghf8JvNsEhkCRyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:45:8a:91:2b:ab:52:69:e5:5c:a0:4e:16:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Jun 8 09:00:40 2025 GMT
Not After : Jun 9 09:00:40 2025 GMT
Subject: CN=dbeae8cca0808d829f063a66e1628297b535a8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:c2:2a:3b:2e:2e:95:58:71:8a:2f:f8:74:
5a:66:6a:d7:7a:4d:3c:be:eb:9a:c7:1b:0b:30:31:
e1:f0:28:65:fe:af:a3:99:66:be:a0:2e:eb:19:d7:
eb:be:00:ad:87:8d:8a:64:a1:c9:75:eb:d7:a3:3c:
97:e0:95:0c:5a:97:c3:a3:47:c4:f4:8c:67:c7:d0:
e5:83:21:bf:9c:14:d2:f6:16:83:96:25:b1:e9:7a:
e6:7e:bb:43:c5:dc:80:9c:4b:5f:b4:9b:74:d1:32:
0c:e4:98:ca:37:7e:fa:38:f2:f8:a6:3d:a3:95:d4:
bf:55:e4:f1:47:24:a4:f0:7d:72:ab:de:dd:af:55:
36:2d:61:08:b0:73:a1:3c:70:54:ed:ca:45:da:1b:
d7:96:64:08:22:19:fb:e3:cf:c8:34:38:cd:a6:fc:
ad:d3:be:55:3c:e1:f3:80:45:3d:c6:18:a9:4a:6e:
9b:ac:3b:4c:47:ac:af:6a:1d:f0:bf:76:1a:19:53:
3a:84:fa:ee:f6:a1:f9:20:9a:0d:bb:26:6f:8b:01:
dd:78:c5:6f:fd:37:7c:60:ce:ea:d1:15:34:76:06:
2f:96:ff:ce:89:47:60:b6:b5:95:19:41:bb:b2:cc:
68:1b:71:9c:9e:70:14:34:e3:f5:78:d4:05:83:1a:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EA:E8:CC:A0:80:8D:82:9F:06:3A:66:E1:62:82:97:B5:35:A8:CB
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:4f:a5:65:e0:26:3c:6c:6b:af:92:43:89:84:88:17:4b:
3f:ff:03:51:73:48:1a:58:94:cb:20:ae:98:ab:52:f0:95:7d:
d0:d5:e6:f9:c8:11:bb:3b:5d:3f:97:be:4f:bb:1b:34:36:79:
62:7f:9f:56:2c:50:9b:08:1a:09:83:f5:a5:37:79:8b:cb:8a:
ae:72:62:f5:24:09:17:cb:0d:e9:55:e0:8e:1a:82:e8:e0:b0:
6b:a5:90:e7:25:b0:33:ca:a1:47:a7:32:cc:56:dd:32:32:67:
e2:86:ef:1a:18:d7:d7:80:75:c0:97:89:a9:f7:a4:d6:f6:fc:
f5:75:36:3e:91:4f:60:d6:0d:60:be:b7:a1:f6:db:1d:d8:75:
69:17:d4:54:9c:5c:95:9c:3b:76:00:fc:93:1c:e7:a9:7a:cc:
99:6d:28:ee:d8:ad:c7:81:61:7b:2f:fe:4f:88:6c:da:a0:b2:
43:e3:2a:0e:f2:14:95:a2:27:69:bf:81:6b:0f:07:7c:f5:99:
b2:fb:62:3b:9e:0f:d4:a8:fa:43:63:14:0a:1d:44:c7:8e:59:
70:6f:4a:09:ee:3c:31:6b:f9:34:37:38:41:45:99:6d:4c:85:
d4:86:3c:15:1f:30:5f:82:fe:9b:fc:d1:84:0a:b8:d4:42:7e:
9c:0c:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:54:55 2025 by rpki-client