Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: cefrVZHDKUO9zNBdbKeoaW2+5csB83BQUYpreybZH1s=
Subject key identifier: 1D:02:B2:03:DB:14:59:5C:E0:9E:E6:20:90:F8:8D:CF:E4:D7:04:54
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 0197518FC1CA426BEC9BAF0B5922DB83C80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 0F22
Signing time: Sun 08 Jun 2025 22:01:05 +0000
Manifest this update: Sun 08 Jun 2025 22:01:05 +0000
Manifest next update: Mon 09 Jun 2025 22:01:05 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: m3nGPNFJMoOPsCuuUV9RWzsSraGNBNkOK8pa8SUberA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:c1:ca:42:6b:ec:9b:af:0b:59:22:db:83:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Jun 8 22:01:05 2025 GMT
Not After : Jun 9 22:01:05 2025 GMT
Subject: CN=1d02b203db14595ce09ee62090f88dcfe4d70454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:a3:8f:aa:dc:25:73:e1:4f:84:98:85:c8:
13:28:f0:79:b3:1c:dd:1c:5e:dc:ec:08:a5:ba:f1:
1b:43:61:31:ee:7c:a3:22:e6:59:c0:5c:2b:b5:8e:
b8:ef:4a:e6:8a:74:68:f9:50:ee:81:c1:22:be:22:
b6:73:a0:37:2f:b0:17:1f:85:53:51:f2:b2:88:70:
16:c4:7e:17:fb:f0:ba:16:b0:cc:79:5d:87:85:50:
f1:d1:c5:cb:aa:94:e5:25:86:cb:c6:2c:ab:aa:e9:
30:de:37:90:7c:47:a4:e2:71:35:66:1c:6b:c5:6e:
56:18:94:57:1d:32:b7:8b:de:59:3a:56:ed:b1:96:
e0:6a:9e:72:cc:ca:7d:91:1f:45:37:93:1a:b4:9c:
88:ba:82:94:54:69:79:05:d1:4e:4c:c7:99:16:12:
9e:f1:55:1c:1c:69:cb:48:d1:dc:a3:29:49:81:03:
5c:cc:e6:1d:5f:c8:46:dd:5f:8a:cf:4c:e1:cf:95:
4b:40:38:cb:58:c8:05:c2:e9:f8:a2:1f:a4:3a:2a:
1c:43:62:63:10:32:97:22:b0:63:39:85:10:26:56:
16:51:bc:02:dc:1e:78:9d:2e:e6:32:90:73:e9:71:
80:49:f7:3a:2b:9d:a5:e2:e2:ef:2e:77:41:c9:51:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:B2:03:DB:14:59:5C:E0:9E:E6:20:90:F8:8D:CF:E4:D7:04:54
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:f9:49:50:b8:ae:de:71:bf:5d:dc:ac:97:b9:00:72:04:
1c:b7:29:11:a4:07:7c:c4:48:5e:6f:a9:c5:23:fa:ba:49:d6:
56:e1:9e:19:8c:cc:50:71:f5:7c:1b:bc:9f:9c:ac:28:70:b6:
00:4a:01:22:fa:db:f8:78:b6:53:dc:a1:43:af:e6:c2:f1:4c:
85:b4:54:29:3f:05:f5:d3:db:15:0b:ca:77:eb:a2:8c:4e:d2:
fd:cd:2d:f1:4a:1c:d5:e6:82:f3:00:ad:58:46:3d:d3:a5:82:
a5:42:5f:8e:52:61:8b:74:9a:6c:4f:37:ee:86:98:15:f3:95:
2d:3d:4b:68:27:15:f5:24:15:ce:5a:13:f4:24:d9:8e:ae:e2:
97:35:7e:ba:da:be:51:a3:1b:32:cd:37:6c:77:93:35:a9:09:
71:b0:2c:8b:5c:28:51:f8:26:df:ce:6e:61:e7:39:23:f2:e6:
26:d9:49:c7:16:3b:2a:5c:e5:16:b7:bf:0a:7d:dc:05:80:22:
89:61:7e:cc:ea:86:d4:23:0f:98:3a:00:f6:37:b4:09:ad:b7:
43:de:06:56:bc:bc:fb:81:89:76:aa:f4:6b:13:d8:db:4b:a6:
c6:31:f3:e7:08:73:61:bd:19:ae:91:e7:6d:36:ea:2c:83:18:
39:fd:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:06:07 2025 by rpki-client