Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: uLNBN48b+jQtr3K7gX5it9yOpDvLy3Ib15E9N4oGm4E=
Subject key identifier: 14:80:78:C0:48:CA:56:6B:28:69:9D:98:84:E2:42:96:A2:DE:97:1D
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 01991764189EBC602A901DB4FE32C6C555FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0EB3
Signing time: Fri 05 Sep 2025 01:00:59 +0000
Manifest this update: Fri 05 Sep 2025 01:00:59 +0000
Manifest next update: Sat 06 Sep 2025 01:00:59 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: aCovU1gkvLxqBR1nf99Hjxpxkqq9abUnWI+Piw9HGU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:18:9e:bc:60:2a:90:1d:b4:fe:32:c6:c5:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Sep 5 01:00:59 2025 GMT
Not After : Sep 6 01:00:59 2025 GMT
Subject: CN=148078c048ca566b28699d9884e24296a2de971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:28:f1:ee:52:92:a5:9e:c0:e1:cc:0d:e4:
0e:bf:c2:3e:45:e3:45:e1:0c:9a:91:20:3b:ae:e8:
a9:9f:88:a1:9c:62:a2:a7:b7:72:6f:9d:14:d7:36:
08:10:5f:a2:dc:e1:eb:5c:96:76:8c:a7:22:fa:f5:
ef:bf:4e:39:01:13:17:67:20:f5:a5:17:ec:ca:02:
42:25:00:50:5d:85:0d:d0:88:07:6c:38:bc:76:42:
fe:4f:44:87:89:11:35:de:cf:c4:0b:74:26:3e:2e:
bd:1d:78:ff:40:5d:87:8f:4a:b0:92:27:ff:22:52:
f9:58:41:01:a8:60:bb:bf:d0:44:54:0b:e2:16:aa:
87:19:4f:67:61:05:93:f6:2a:69:65:ca:1a:2e:cc:
40:7c:57:2c:fb:42:c9:5b:ab:1e:33:b0:36:30:ed:
82:1b:85:7b:17:d1:13:24:e4:8b:d3:bc:b2:10:04:
be:2b:9c:ab:28:5a:b5:ed:9a:f8:75:f5:8c:11:16:
61:74:c6:4a:7d:67:91:0b:b3:a0:8f:b4:8a:51:24:
2e:2f:12:1c:c2:76:8c:48:21:2d:6d:0a:4a:e2:8b:
2d:13:59:0e:19:0f:4f:64:f1:dd:8a:56:89:7f:d9:
e0:30:5e:64:40:32:eb:46:95:cc:c5:62:86:b9:6a:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:78:C0:48:CA:56:6B:28:69:9D:98:84:E2:42:96:A2:DE:97:1D
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:9d:7b:47:80:8a:00:c8:6f:d0:9e:64:35:8e:47:4d:96:
98:e1:56:57:21:6f:d7:bb:33:6a:db:6b:7e:67:7f:35:c2:dc:
25:2d:5a:94:9e:e4:ad:0e:54:37:a2:41:c9:fb:7e:8a:0d:a3:
5e:ac:5f:65:b0:2b:c6:bb:0a:15:1a:29:90:f9:32:df:a3:ea:
1c:d6:ec:e6:79:e2:39:12:ef:9b:8b:e7:f7:71:5f:54:c2:b6:
d0:ad:4a:69:e1:67:18:1c:d2:f7:b1:bb:cb:06:6a:7f:ea:02:
75:6e:bc:98:b0:c5:ae:0e:d3:9c:a6:e4:d8:4e:4c:18:93:17:
d8:59:bd:05:a2:7f:3a:d7:c0:51:2e:20:2a:d6:6a:ce:72:20:
90:13:7f:66:7d:b0:b8:77:35:5f:af:16:80:8a:79:6a:98:ed:
28:11:6e:17:bc:8a:71:48:a8:4f:38:20:5b:c6:5f:08:1e:6a:
b3:d9:56:2d:9f:40:ac:5e:b4:9c:fd:40:62:98:7f:6f:5d:53:
56:10:c8:da:8d:cb:7d:c8:b0:63:da:2f:64:16:d4:28:74:d0:
ff:7c:d5:3c:17:3c:b5:72:3c:8a:83:4b:0a:22:f1:2e:2b:06:
c5:f6:6e:01:d6:2d:56:ee:fa:02:fb:5e:44:2c:4e:c2:e0:30:
f5:23:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:48 2025 by rpki-client