Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: bWr383ycMG+hwqrb8WY2M3dhq+KO3KUIfXU2IpPkFAE=
Subject key identifier: EE:F2:91:38:AA:C2:F1:25:E0:FC:BF:E0:4D:EC:24:F1:FE:8F:77:58
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 01974CD716F15434EF9D2126ADC77994E4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 00:00:53 +0000
Manifest this update: Sun 08 Jun 2025 00:00:53 +0000
Manifest next update: Mon 09 Jun 2025 00:00:53 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: PSMoFSSYrLtN01AJfQJg/2OVKqO7qI/XQ24pROwt1GA=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:16:f1:54:34:ef:9d:21:26:ad:c7:79:94:e4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Jun 8 00:00:53 2025 GMT
Not After : Jun 9 00:00:53 2025 GMT
Subject: CN=eef29138aac2f125e0fcbfe04dec24f1fe8f7758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:5c:60:af:15:17:c7:09:b8:28:5b:69:e4:
9e:f6:f7:a5:7b:e4:6c:f7:4d:f2:9a:0e:1e:64:77:
47:d8:5e:4c:d2:ab:2e:ef:70:60:7c:f8:31:df:62:
ad:70:ec:c0:59:ae:eb:8c:52:81:de:9c:0f:d0:44:
ea:ae:73:40:45:fa:4d:34:d7:df:d2:f5:ff:f8:0b:
66:33:b8:79:cb:77:7a:36:23:de:b3:69:9b:1b:68:
8a:46:38:cd:90:d0:ab:7b:3c:52:b4:fe:d6:ec:98:
18:f9:d5:cb:3b:8a:47:a1:9a:34:6a:d7:8b:60:b8:
cb:f1:52:40:14:b6:81:2c:c5:48:75:5b:05:ee:4b:
dd:2f:14:6e:f0:95:3d:c2:d8:b1:8c:b8:35:a4:dc:
43:66:ef:d9:4c:56:57:47:94:94:a8:9e:24:e2:40:
b7:43:fd:2d:16:a3:ae:03:ba:29:5a:1c:8a:6f:16:
03:06:4d:a1:d0:93:25:b1:95:d3:ab:92:27:f1:00:
a7:09:20:c1:28:e6:3b:fa:35:c8:ba:24:15:ce:73:
31:fa:c2:d2:4e:f7:89:cf:98:d4:c1:0f:11:5c:b6:
12:97:86:4a:fc:eb:4c:e1:80:3b:66:9d:83:fc:a5:
de:a1:c8:c2:4b:d0:bc:d5:93:fa:02:88:5a:8d:6b:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F2:91:38:AA:C2:F1:25:E0:FC:BF:E0:4D:EC:24:F1:FE:8F:77:58
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:de:91:c6:0b:60:f2:00:79:15:46:bc:dd:49:d2:9e:53:db:
57:91:97:88:15:fd:5f:59:34:fa:db:69:30:a0:bb:59:06:24:
81:33:bb:89:90:7d:26:71:fa:11:b5:fd:20:0a:49:c4:8e:19:
89:a4:9b:6c:23:cb:ab:44:d1:43:5b:39:07:44:e9:e0:3e:6f:
43:cc:ed:16:fa:2e:e0:52:c0:b0:a1:ca:ef:15:50:fe:f9:c9:
9c:b3:95:d1:4c:a4:0a:2d:43:3f:f9:1f:ab:9c:cf:af:d6:bd:
22:7b:13:85:4a:d1:c5:bc:ef:84:42:ec:eb:09:05:f4:43:b1:
be:af:e2:69:5f:20:24:91:de:7d:9f:0a:3c:39:ea:d6:66:32:
fa:29:96:f8:25:29:33:cc:22:60:73:63:13:3f:f6:58:91:aa:
25:70:d7:2c:12:b4:c9:4b:72:08:79:44:be:8f:0b:bc:83:7a:
e9:00:85:4f:90:d8:d9:ce:bb:d9:f8:8d:d7:66:86:89:b1:3c:
a3:4a:78:e4:3a:7d:fb:21:21:78:8e:e5:d9:30:93:66:a9:37:
7c:ae:45:b0:11:dd:57:24:1e:51:86:9a:ad:88:70:58:75:d5:
cc:d2:05:8c:8b:2d:fb:7a:51:3c:fb:dd:16:af:41:54:48:94:
ec:7e:4e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:15 2025 by rpki-client