Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: 9Q40rCJKcmGLHGpvDpsEk3C3AUVJA7O8EBWyq2CwhAc=
Subject key identifier: D0:35:D8:D1:9F:E3:82:70:B7:E5:8B:EB:45:A1:CB:3B:B6:FF:93:68
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 0197BCD98B8A7BC745A000B3569417634730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 18:01:02 +0000
Manifest this update: Sun 29 Jun 2025 18:01:02 +0000
Manifest next update: Mon 30 Jun 2025 18:01:02 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: XMloO6R6+WLTJgURy0SxI7XGDBq6rTRUqGCt1LVc8/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:d9:8b:8a:7b:c7:45:a0:00:b3:56:94:17:63:47:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Jun 29 18:01:02 2025 GMT
Not After : Jun 30 18:01:02 2025 GMT
Subject: CN=d035d8d19fe38270b7e58beb45a1cb3bb6ff9368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:7d:a9:16:df:e4:5e:7e:d1:19:40:39:1e:
c2:08:1e:1a:b7:ac:a3:dd:38:7e:28:27:38:0b:01:
9c:34:79:ac:56:9f:33:27:80:65:71:ab:52:a1:44:
1a:72:0e:fe:54:d0:ca:2c:87:0d:81:0c:0a:11:26:
56:94:52:7a:ef:df:81:1a:61:01:3a:ac:eb:94:49:
a2:19:23:b6:5e:d0:7f:7e:8f:b0:f4:dc:10:95:ee:
29:74:12:25:4c:b3:50:d6:49:6e:ec:81:e1:af:80:
e3:77:40:4d:54:09:bf:9a:3d:0e:97:11:aa:91:e5:
31:ec:72:f1:4e:c2:3e:38:e1:63:96:55:ab:57:1e:
ef:b3:f4:a7:86:27:e1:3f:78:3d:0a:22:4d:4f:45:
1c:2f:28:70:94:61:6f:36:07:dc:1b:c3:d3:66:21:
f9:e8:8e:79:2c:33:95:fc:47:c8:3d:b7:7a:48:20:
6e:96:a0:9d:13:1b:61:32:0e:da:e6:89:3d:af:72:
1e:f4:43:01:bc:77:7d:80:7b:48:ac:5c:46:44:42:
de:b8:27:83:30:a1:56:06:40:21:d7:29:90:8c:a4:
43:9c:08:02:1e:c4:40:13:84:70:14:f6:9a:a7:ea:
aa:1b:07:d6:9c:4f:77:33:96:de:1f:07:61:a5:e1:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:35:D8:D1:9F:E3:82:70:B7:E5:8B:EB:45:A1:CB:3B:B6:FF:93:68
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:51:fe:ee:ef:f7:ff:90:bb:60:2d:76:9f:f7:d1:3f:6f:
5f:57:7b:17:2f:73:8d:5d:4f:db:53:c6:09:56:cc:82:41:28:
de:97:88:59:49:b0:d9:cc:b5:a9:df:a5:32:18:b5:49:fb:10:
12:33:df:47:ff:af:9f:7b:8d:cb:19:27:42:22:5d:8d:12:4e:
4e:39:c8:92:fc:cc:9a:bd:e7:cf:32:20:91:b7:7c:a9:b1:38:
33:59:7c:a0:78:93:b1:b0:2f:0e:3d:6e:7a:9e:60:34:b8:86:
f7:d9:99:e7:87:55:41:b9:15:19:51:c2:28:d5:6f:d4:54:20:
1f:4b:44:a4:36:36:5f:a1:63:0f:cd:e6:e4:04:b6:a6:67:57:
a2:4d:e3:cd:2d:cf:d9:d6:20:00:34:3b:52:32:f6:5e:a1:c3:
b0:8a:16:07:72:47:62:e1:88:bc:2e:ec:4a:07:d0:14:ee:52:
94:eb:ce:5f:b8:56:53:a7:89:26:41:cb:5f:fd:54:57:3e:f1:
e5:b9:1a:2a:15:25:7f:62:a4:88:90:02:1d:ff:e0:2f:42:9f:
5d:c4:74:75:b7:d5:52:35:74:2e:ca:3c:0d:18:40:df:13:1a:
b2:10:23:ed:a6:bf:db:37:10:67:6d:df:77:7d:6a:7b:d4:f2:
db:56:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:08:23 2025 by rpki-client