Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: 6z9YroNeW/yTwYqQ1OzAmUx/9msAdtHL49g9kMGwUAI=
Subject key identifier: 0A:8F:87:15:DB:60:EA:D2:F8:FD:2A:08:B7:D2:F5:79:C7:9D:B2:F5
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 0197CC15BE44F857DF937B0165330E7AB9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 17:01:06 +0000
Manifest this update: Wed 02 Jul 2025 17:01:06 +0000
Manifest next update: Thu 03 Jul 2025 17:01:06 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: OqCKa4ceohkBU3D1oUk4sPI0xAOF/Y/1evoeZNXZ5xE=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:be:44:f8:57:df:93:7b:01:65:33:0e:7a:b9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jul 2 17:01:06 2025 GMT
Not After : Jul 3 17:01:06 2025 GMT
Subject: CN=0a8f8715db60ead2f8fd2a08b7d2f579c79db2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:f7:7d:2d:e3:cf:88:20:d0:65:5a:c5:a5:
e3:b0:ec:1c:dd:4d:e9:91:79:2c:bb:70:69:a0:f5:
99:87:c9:92:85:53:28:96:7e:d7:99:54:c5:ea:c7:
56:ab:67:a8:ed:67:13:62:ff:bc:2c:66:18:da:76:
a5:2b:f6:c7:f0:6f:e6:1b:cc:54:5d:c9:90:55:77:
37:47:c8:ea:1a:ad:e1:67:32:bf:aa:4e:16:92:37:
c3:07:8c:e0:fc:a2:f3:7b:fc:b4:9a:81:c1:3e:ea:
e4:aa:a6:71:7a:08:de:1f:2f:73:0c:29:da:e8:9f:
39:3f:a8:a8:9b:29:5c:6a:89:6c:19:d5:e1:8a:9f:
b4:b2:57:bc:0a:72:4f:c0:09:a4:77:21:4c:bc:93:
42:19:52:42:a1:97:0c:54:06:b0:e1:1e:78:c6:c8:
ec:42:8a:ee:d6:19:f0:9a:f0:1e:74:d8:50:62:04:
48:82:88:d7:52:23:96:51:a3:09:1c:9c:7f:66:a4:
a7:7f:2a:8a:e3:4d:e4:9b:5a:65:2d:41:d6:8d:12:
38:2f:a0:b5:f6:13:6e:6b:99:3e:64:d0:cc:c7:44:
22:08:4c:15:19:e7:dd:a6:6d:21:94:28:4a:1a:10:
1d:f5:d3:79:7b:93:a1:a7:d9:7e:4f:4b:53:be:a6:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:87:15:DB:60:EA:D2:F8:FD:2A:08:B7:D2:F5:79:C7:9D:B2:F5
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c8:5c:67:0e:3d:13:7e:f1:56:00:af:9e:9d:dc:6a:43:52:
1b:55:34:d3:ae:ff:f7:57:4b:06:e9:47:5e:bd:66:c8:b7:aa:
ab:c6:55:a2:25:de:0f:09:e0:d4:79:01:d2:27:c6:22:5c:60:
16:8c:a3:94:13:d3:6b:3e:73:23:07:88:74:92:61:61:70:f7:
b7:66:cf:5b:97:c3:96:47:af:42:97:45:cd:e9:cc:d1:7e:6b:
5e:4b:17:fc:0e:41:f0:4d:63:39:be:5b:68:70:c0:f9:7c:62:
af:0c:35:3d:23:56:53:52:99:81:11:4f:59:6b:9b:dd:4e:8c:
2a:45:3e:bd:44:18:58:57:7f:bc:5b:f1:9f:1d:2d:bf:19:a1:
63:a8:6f:32:36:c2:e9:ac:54:1a:97:a2:37:5d:fc:c2:af:f5:
ea:0a:87:8e:b0:79:ac:d0:62:69:52:bf:6a:21:a5:0a:67:cb:
7a:70:b8:1a:bd:cc:7c:da:ff:16:6b:da:4b:11:ce:b9:c6:ba:
11:e2:b7:f0:ab:f5:9c:da:a0:4f:a2:9a:ed:c5:72:dc:7b:f2:
77:20:bf:cc:06:63:03:67:93:2f:b5:74:ef:5f:54:de:be:44:
20:56:d3:72:ca:40:19:02:96:c1:46:c3:a9:89:c2:2f:be:4e:
ba:c1:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:31:10 2025 by rpki-client