Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: 6r+9mtugeGHVxpKcRR3VNdK1NGSPsferlchEZ6oK3WI=
Subject key identifier: EA:65:A0:51:B5:8E:8C:D5:94:E1:61:93:3C:51:57:0B:F7:16:E8:C0
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019922FAEE1A133EF500FB645EAF7D172001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 1013
Signing time: Sun 07 Sep 2025 07:01:34 +0000
Manifest this update: Sun 07 Sep 2025 07:01:34 +0000
Manifest next update: Mon 08 Sep 2025 07:01:34 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: LmnAlbIif3mV9IcVDjmEKGkFkPZxkPmjuTScRrzIA0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ee:1a:13:3e:f5:00:fb:64:5e:af:7d:17:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Sep 7 07:01:34 2025 GMT
Not After : Sep 8 07:01:34 2025 GMT
Subject: CN=ea65a051b58e8cd594e161933c51570bf716e8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:76:3e:b4:10:f7:a0:d1:c6:cd:4c:fd:9c:
b4:50:b8:df:d9:f7:e8:c5:ed:8d:53:e7:8e:d8:c8:
83:86:f4:8d:c0:eb:a1:6a:1c:bf:82:c4:ca:60:6e:
a8:64:81:0f:08:e7:b0:5d:30:c8:07:31:5b:fa:e7:
a3:54:18:42:56:46:1d:3d:0c:34:81:2c:ae:15:9a:
5b:ba:af:bb:57:60:d5:00:d5:c8:44:03:87:c7:ae:
58:f6:7d:ee:f9:33:c2:08:2c:22:57:94:f8:69:c2:
cf:88:5d:19:cb:2b:b1:fd:e9:51:06:fd:bc:3f:d6:
3f:cd:3b:7a:f6:99:89:be:28:ad:75:56:bf:5f:78:
de:6f:8f:7b:f8:66:26:64:37:f1:a2:80:9c:8a:0c:
32:bf:82:db:36:7f:8a:e4:9d:9c:0d:81:7e:d4:cd:
61:e0:32:8b:f1:72:09:da:0b:d6:fa:ca:f7:57:a6:
38:82:37:c4:ab:3c:98:b5:8a:77:78:06:61:5a:47:
29:56:cc:01:c9:e5:0a:10:4a:67:b6:ae:00:91:86:
ff:da:b2:12:ed:02:52:a7:e9:cd:f1:44:15:40:16:
6c:40:1e:2e:14:f1:12:94:5a:7d:e7:75:4e:49:7a:
15:94:aa:92:33:9b:a1:0c:82:22:64:48:21:b3:7b:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:65:A0:51:B5:8E:8C:D5:94:E1:61:93:3C:51:57:0B:F7:16:E8:C0
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:1b:f5:75:fb:c2:4c:07:d6:78:1e:7f:13:12:08:b7:ed:
6f:ce:ab:dd:63:b5:7f:1f:41:75:79:5c:44:8d:01:6a:58:f4:
88:1d:81:d8:d9:0b:f4:52:d2:49:6a:46:04:c9:d4:dd:bb:47:
52:89:80:b8:b0:61:4c:d8:4a:07:70:4a:f4:ad:63:2e:c7:3f:
e0:26:60:6a:56:d1:68:54:6f:4d:f3:79:59:09:69:ce:a7:04:
f1:22:31:2d:59:8b:b3:1c:1a:52:80:fc:4e:28:0a:6f:ab:f5:
cd:14:32:8c:91:41:d6:6c:70:ec:11:da:1a:54:ac:83:bd:ec:
2d:60:8f:d0:c3:a0:7a:08:4c:86:e9:89:91:18:5e:d8:ad:91:
c0:e2:96:15:d0:74:60:16:79:1f:52:ed:89:47:a8:ee:86:18:
b9:11:a9:0d:cd:10:19:5f:bf:7d:d6:2d:d8:c8:9a:e0:a5:06:
b9:6b:9a:ef:fe:be:d3:32:8b:e6:bd:79:b7:59:e0:b4:8d:8f:
94:49:c0:a1:ef:9f:3d:0c:d0:71:20:f0:0d:bd:cb:c6:5c:b5:
b6:cd:b9:4d:74:81:87:8f:64:65:f5:17:5c:ba:8e:ab:be:07:
c6:d2:7b:fe:02:10:20:bb:e9:f1:69:8f:57:58:55:3c:68:a4:
f7:01:49:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:49 2025 by rpki-client