Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: QnwgP4PaneXIP9BfvElyam/Zr3OE6GGjlK4XbYUbYJ8=
Subject key identifier: F4:EA:BA:94:E4:DD:36:5B:03:6F:4D:79:94:9A:2B:D3:2E:D6:36:F4
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 0199233132CFBCE99EF07F60F80618F805C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 076B
Signing time: Sun 07 Sep 2025 08:00:50 +0000
Manifest this update: Sun 07 Sep 2025 08:00:50 +0000
Manifest next update: Mon 08 Sep 2025 08:00:50 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: OVgTRGkH3sp9ng2b5EfKbM/7s/bQZE2M8CDWlFgZS/g=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:32:cf:bc:e9:9e:f0:7f:60:f8:06:18:f8:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Sep 7 08:00:50 2025 GMT
Not After : Sep 8 08:00:50 2025 GMT
Subject: CN=f4eaba94e4dd365b036f4d79949a2bd32ed636f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:77:31:1b:1a:51:a0:95:12:6d:db:ba:6c:
36:e6:d4:58:b7:a3:b8:c1:be:03:dc:5d:66:55:42:
c3:e1:ee:be:b2:01:82:58:83:a5:a1:63:ab:3f:19:
5f:1c:2c:ae:67:87:9e:4c:e4:e4:b5:ef:07:f3:81:
39:f2:60:b8:e6:e7:8c:c5:cb:1e:d3:14:89:71:64:
77:ff:63:46:fa:1a:85:e8:8c:1f:f8:79:87:0c:f8:
0a:21:d4:b6:a8:46:dd:4c:09:ba:82:34:e7:f8:3b:
ba:82:b2:ea:67:47:73:be:56:49:58:55:24:62:77:
57:93:63:e9:71:1a:f8:d2:84:3b:af:15:24:17:cc:
a9:78:03:4a:7a:9d:2a:14:f5:0d:05:db:c8:4e:27:
91:ab:89:82:b0:03:cf:17:0f:f9:f0:c7:77:3c:b4:
5a:0e:69:4f:57:24:85:16:ef:26:94:72:d9:e4:75:
b8:ff:d8:a5:cd:ae:c0:47:57:4d:9a:e3:1a:36:84:
fc:0a:89:a7:cc:81:05:95:58:4f:09:87:ab:a3:94:
87:46:91:9f:d5:55:30:bd:af:46:ad:66:56:01:d2:
43:12:98:cb:93:17:d6:6e:d2:dc:d6:67:26:c4:93:
00:87:ab:17:98:08:10:3a:0d:2d:70:96:91:23:ff:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EA:BA:94:E4:DD:36:5B:03:6F:4D:79:94:9A:2B:D3:2E:D6:36:F4
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:3b:c9:e2:bd:bc:9b:28:27:8c:c2:74:fe:7c:59:5d:53:
24:7a:94:3e:77:6b:73:6d:ba:d7:5f:19:57:d4:17:99:3b:61:
23:51:0f:32:df:72:0e:23:17:3f:72:6f:54:cd:00:df:f1:59:
8c:c9:f8:16:50:73:51:3f:f4:22:02:93:d0:18:30:45:8f:75:
09:60:08:a2:08:dd:ac:a9:e6:28:7b:2b:b8:35:b6:a4:90:14:
90:0c:72:bf:95:a0:b1:d9:62:ce:ad:fa:35:19:42:7f:89:1c:
84:88:e3:61:dc:de:d6:38:f1:f9:9e:f9:db:b5:e1:3b:cf:22:
3a:a8:4c:0a:ff:6d:d6:e7:d6:28:bd:fb:e9:dc:16:10:e4:56:
70:76:a0:3b:6a:8c:e0:e0:36:f3:71:aa:7c:2e:47:3e:71:6c:
62:d1:f7:e1:f7:70:4d:97:73:dc:cf:43:e5:40:a6:12:1d:6b:
e8:9d:06:49:2d:9b:b7:30:af:d1:92:a8:1e:6a:ea:4c:52:23:
86:57:7a:3d:42:e6:c0:07:21:57:65:da:35:53:b0:9f:14:05:
0e:5f:ed:6d:64:f6:1b:16:b6:ca:4e:b7:68:e3:88:f3:07:06:
bb:c5:76:5c:a2:d2:40:e3:5f:b5:8e:be:a9:db:b3:0f:4e:73:
73:30:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:39 2025 by rpki-client