Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: 5/O4a4TmlOhqhhy78USE1SoYk39JQWWz1gU1hE3N4Ug=
Subject key identifier: FB:BD:3C:60:B1:A2:86:99:9A:2A:46:51:20:53:1B:20:09:DA:5F:37
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 0197CB0304AA1D4056FF5584EE709C00A19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 12:01:01 +0000
Manifest this update: Wed 02 Jul 2025 12:01:01 +0000
Manifest next update: Thu 03 Jul 2025 12:01:01 +0000
Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: aRKxLa6ey7GFL1UfdR+Lz4cy1iW45XXX48tv8u5QynA=)
3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:04:aa:1d:40:56:ff:55:84:ee:70:9c:00:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Jul 2 12:01:01 2025 GMT
Not After : Jul 3 12:01:01 2025 GMT
Subject: CN=fbbd3c60b1a286999a2a465120531b2009da5f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:4d:0c:4f:83:c5:00:82:2d:9f:23:80:4e:
56:db:99:ea:8f:24:71:94:4e:1e:c6:4f:06:a2:2e:
9d:d3:71:a0:77:00:b8:85:5c:cb:55:46:52:67:cd:
7b:be:3e:b9:e6:bb:ae:02:26:fa:90:5d:5d:8b:8c:
53:e5:6c:d8:7a:3c:b1:61:89:9e:6b:fb:18:5b:bc:
25:ef:cd:cd:31:3e:58:03:35:b2:c2:96:c0:6b:ae:
8f:81:8e:06:86:83:b2:ec:46:5c:13:46:08:39:4e:
d5:82:7b:03:c2:41:1f:33:e0:29:58:24:03:f2:9c:
fc:6c:a4:4e:36:d5:48:62:dd:b0:47:bd:54:6d:7e:
29:2e:97:e7:e7:2a:54:ab:40:9a:65:99:61:54:e8:
13:ad:c1:d2:43:18:b4:c2:02:b7:dc:7e:bb:c4:b1:
20:50:02:c2:01:e4:4f:25:1f:de:e7:9a:8a:86:70:
82:f9:6f:5c:73:94:ea:2b:94:99:bf:3a:32:87:69:
d6:cc:d6:28:da:bc:a2:9c:5c:97:f3:4f:60:fd:fc:
18:84:b0:90:66:cb:35:8c:5a:e2:8b:01:51:cf:b9:
e9:f5:85:2b:b6:99:c0:bb:45:73:70:0a:29:ba:67:
72:9a:87:a7:a2:0c:cf:21:67:e0:e2:1f:8f:46:be:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:3C:60:B1:A2:86:99:9A:2A:46:51:20:53:1B:20:09:DA:5F:37
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:7e:09:f2:48:af:47:4b:c3:75:b7:b5:dc:af:76:ba:98:
d3:bb:cd:62:39:cc:09:f4:28:af:96:bf:02:02:a9:42:9e:50:
91:95:b0:be:78:3c:dd:34:f2:c9:f3:37:e9:b1:e1:ad:11:bf:
9a:e2:8c:6c:02:45:c5:db:b6:48:a5:10:5d:e6:6c:5f:34:b3:
5f:cb:ea:40:20:93:fa:51:d9:1c:c6:28:1d:e2:06:8d:68:65:
e5:aa:f2:7e:9a:9e:e2:b2:06:a8:c0:c9:6c:1a:7f:fc:72:f0:
99:76:53:5e:52:4c:0e:40:d5:5d:59:3d:2e:37:c5:b2:bd:fa:
e4:27:44:b8:c5:23:d4:a2:4d:64:be:63:e9:b3:a2:f5:ae:ad:
af:31:95:3b:33:7e:87:dd:16:6c:07:55:bf:32:71:49:8b:2f:
51:f4:5f:ed:46:6a:b7:93:42:5e:e7:bf:f8:c0:c7:c8:7c:f0:
b1:fc:a6:f9:1a:1f:10:32:64:ea:96:9b:56:f8:d0:93:61:6c:
51:54:2c:d8:d3:1a:e4:c2:31:0b:9c:70:89:2f:32:e6:91:bb:
00:bb:0d:f9:58:d0:76:3a:7a:a9:1a:ae:f2:1d:05:cc:e1:db:
96:a1:7a:c3:e1:01:97:06:73:fc:aa:65:70:32:97:20:02:5c:
23:f8:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:26:02 2025 by rpki-client