Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: GXKpOBAf+MHnGmbYq1xZnHLhFwyuca94EBG0scilw5g=
Subject key identifier: 38:86:40:5A:BF:5F:CE:54:D7:52:CC:4D:5B:95:88:F6:00:98:99:BA
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 01974A7B21B68C7815835914DA6C08EC5393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:12 +0000
Manifest this update: Sat 07 Jun 2025 13:01:12 +0000
Manifest next update: Sun 08 Jun 2025 13:01:12 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: u41eZm2zupKz2N+vWt4vpjhFNrpOJUnBUo08/YR08K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:21:b6:8c:78:15:83:59:14:da:6c:08:ec:53:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jun 7 13:01:12 2025 GMT
Not After : Jun 8 13:01:12 2025 GMT
Subject: CN=3886405abf5fce54d752cc4d5b9588f6009899ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:68:d2:06:7b:ac:21:9d:cf:88:fc:7d:78:
62:90:3d:23:b7:68:a5:1e:b0:38:a6:41:cd:10:b3:
b6:78:95:e1:93:58:3a:e7:a7:4a:02:c5:08:ee:79:
38:a0:9d:95:99:da:57:9d:d6:98:6c:3f:5d:14:0b:
2e:16:ea:0d:5c:ee:e4:71:04:43:87:2a:dd:a2:84:
fb:59:8c:14:d2:61:58:50:23:a6:b5:dc:6f:ac:f4:
4c:10:20:40:93:83:1c:2b:c0:86:18:08:bb:11:f7:
d5:9a:22:58:c3:cb:b8:bd:97:96:c5:d4:14:46:10:
7f:c1:9c:eb:21:d1:08:eb:c0:57:36:3f:36:f2:76:
7c:21:da:92:70:0c:f6:67:d7:e1:8c:94:53:ec:e9:
84:bf:45:6a:5c:c6:7e:8d:e6:c9:a6:e2:81:a2:6f:
01:ff:bb:14:52:b4:5f:96:09:d1:d5:d7:f0:c0:88:
28:93:88:bb:fb:74:7a:5f:0e:7c:9c:21:3f:cf:f7:
9c:9a:57:3c:ef:ff:48:1e:9a:a2:70:e2:42:85:4e:
b7:b3:99:6f:f5:ef:a7:ba:aa:d2:d2:9b:f1:e7:14:
36:38:de:a2:ec:b4:9b:11:8f:37:bd:a9:e1:10:76:
e3:70:dc:f6:15:8e:3f:21:52:fe:6b:46:ec:92:5d:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:40:5A:BF:5F:CE:54:D7:52:CC:4D:5B:95:88:F6:00:98:99:BA
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:91:36:25:d4:fe:62:c0:98:a6:90:8c:d6:0a:d9:e2:55:a6:
66:ee:5f:58:c9:f4:ba:13:99:8b:d8:88:9f:ba:49:d6:ae:26:
79:4f:46:3a:d9:87:ff:fc:53:26:42:23:2d:1d:bf:a4:2d:7f:
b9:d8:1a:ae:f0:9d:8a:d8:8f:f0:9c:c2:3f:70:b3:5f:be:08:
dd:e8:b3:cc:1f:81:51:24:74:60:20:d9:96:a7:64:dc:d0:e8:
68:c6:db:7d:d9:40:0e:8a:65:bd:e0:10:50:07:90:7c:51:df:
51:59:76:ed:b0:c8:13:c5:82:bb:30:d3:b4:89:8b:7a:4b:dc:
e5:30:7f:ee:63:92:57:e5:fc:59:0e:29:a8:40:09:d9:f0:62:
59:3d:df:f1:ee:e2:32:81:4b:ad:18:16:0e:ef:55:65:3a:b5:
8a:e1:4c:f0:d5:e6:c0:28:29:1c:26:57:ea:57:35:33:73:5f:
7f:09:cf:39:3f:4d:c0:17:8f:40:61:df:5b:d9:aa:78:94:d8:
65:f3:05:f5:33:ee:66:9c:ef:5f:4d:37:16:23:5a:6a:40:5c:
aa:82:45:b7:f7:8d:93:94:fe:a3:7c:86:a5:6f:f8:9d:08:6f:
73:55:39:13:53:c8:8a:b5:dd:26:1c:5d:ff:e3:0b:f8:a2:7b:
66:58:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:44 2025 by rpki-client