Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File: MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier: 8+/L5g5Nvpai0Qlf47QfPvgQ3w3hnA+GYNYc0rX6Nvc=
Subject key identifier: 6B:F9:D6:C0:94:4B:7A:7B:1A:83:71:2A:67:24:AD:D1:D6:72:94:0E
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer: /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial: 019745F91BFE98B9D70D8C96F335C72E24C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number: 054F
Signing time: Fri 06 Jun 2025 16:00:42 +0000
Manifest this update: Fri 06 Jun 2025 16:00:42 +0000
Manifest next update: Sat 07 Jun 2025 16:00:42 +0000
Files and hashes: 1: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: GG6aYXT/54KlL6q2KT5HjteX44byug58pWB3Q94nNsw=)
2: ztFr_-g0BQXlSd44UjlTquqKHlw.roa (hash: ICOrnGo6DEP/QUKA6WPeJcvKMnXrNs1C20UGRkpbiEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:1b:fe:98:b9:d7:0d:8c:96:f3:35:c7:2e:24:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Validity
Not Before: Jun 6 16:00:42 2025 GMT
Not After : Jun 7 16:00:42 2025 GMT
Subject: CN=6bf9d6c0944b7a7b1a83712a6724add1d672940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:ee:43:8c:68:56:44:18:e5:62:c7:30:14:
8a:52:67:50:d0:32:db:33:2e:5d:fd:8e:71:62:9b:
d9:3d:99:21:df:1e:92:4a:b8:4e:0c:21:fd:5f:d8:
1d:eb:64:86:3c:3b:37:11:79:fb:8f:e9:07:3e:31:
57:dd:b4:8f:43:e3:08:7d:81:41:b3:d2:2d:b9:32:
f2:1d:9d:d6:12:2d:61:eb:4c:a4:d8:b6:49:f3:5d:
ec:b6:2d:cb:83:55:bb:99:29:e3:db:dd:66:77:0f:
91:54:f2:42:14:11:87:37:93:0e:a5:04:9f:af:ce:
d4:2d:69:a4:4b:c3:c4:1d:77:6c:a7:95:cf:98:37:
6e:96:7e:fd:d1:a4:9a:57:75:24:6d:91:e9:7a:11:
5c:bb:d0:e0:ca:35:28:ac:3f:90:53:b0:c6:c6:20:
2b:41:18:3b:5d:b7:a7:ff:5a:73:22:c0:08:1c:32:
8f:5f:1f:17:c5:d2:67:9c:59:ea:f3:4b:9f:e0:80:
94:2c:59:89:33:4a:38:93:5d:7b:e6:2d:85:92:59:
61:90:fc:54:4d:eb:c9:4c:a8:df:7d:cd:ea:f0:f1:
1f:ac:ff:4b:d1:d3:3d:f9:2e:d1:e2:38:5a:1e:00:
27:c2:a2:eb:10:cb:b9:45:39:b4:bb:13:e4:8b:09:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:D6:C0:94:4B:7A:7B:1A:83:71:2A:67:24:AD:D1:D6:72:94:0E
X509v3 Authority Key Identifier:
keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ce:6f:65:6d:1e:d6:88:05:20:7a:51:1e:13:6f:a0:fe:3c:
6a:83:82:fa:34:16:42:17:24:73:af:ce:ee:27:ac:22:a9:5e:
1e:dc:59:b8:00:52:a4:01:04:c0:b0:03:3b:f8:b3:f2:cc:61:
82:47:20:38:d8:1e:27:f7:74:4f:2c:b2:53:b3:2d:b6:32:df:
12:3a:48:38:82:fd:b5:be:1d:f7:7b:2c:10:66:2c:49:b0:0b:
97:4e:92:54:a0:f8:78:dc:06:68:68:bf:1a:06:e2:7c:87:e8:
e2:af:18:82:74:ef:0e:44:46:a4:df:83:d7:9b:7c:13:87:9f:
b8:56:da:a6:cb:cc:c3:30:ad:df:e2:3c:39:ea:9d:5d:3c:29:
80:7b:b1:f4:e7:ea:c0:28:f6:7c:06:c7:f2:b6:02:64:b1:a2:
fc:31:90:79:13:65:a4:3d:17:38:02:c4:de:96:0d:16:a9:27:
70:2b:a0:fe:4a:28:64:be:18:e5:35:91:bc:d4:b8:51:62:0a:
9f:a8:97:99:ce:3a:a1:8c:ef:4d:ea:8c:80:27:e4:62:7d:fb:
3f:ae:3a:fa:02:17:87:e6:78:8e:16:bd:d9:62:d4:b2:d7:3b:
39:5f:35:38:51:e9:c0:fe:b7:97:6b:76:a3:ab:05:d5:fa:4f:
f6:63:99:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:34:59 2025 by rpki-client