Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: 3iQftEmMnXInYtgmftXpH6xQF/OS3Y+Tro6Ru05BeuU=
Subject key identifier: 6A:49:00:F8:B4:19:1E:D4:37:2C:FB:17:77:5A:33:21:3E:AB:F1:49
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 0197CF16F0A89576C1648A590044E7A26DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0E09
Signing time: Thu 03 Jul 2025 07:01:16 +0000
Manifest this update: Thu 03 Jul 2025 07:01:16 +0000
Manifest next update: Fri 04 Jul 2025 07:01:16 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: Uhy327BEjGZTJx+K+RD3aIdpYHgs1a319adCAHd5O3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:16:f0:a8:95:76:c1:64:8a:59:00:44:e7:a2:6d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Jul 3 07:01:16 2025 GMT
Not After : Jul 4 07:01:16 2025 GMT
Subject: CN=6a4900f8b4191ed4372cfb17775a33213eabf149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:c7:7f:28:0f:19:6e:e0:88:e1:f5:4e:4c:
63:fc:cc:50:7b:6d:d0:fe:27:a5:d2:52:5d:93:72:
73:a0:5d:71:32:cf:a7:89:2e:01:17:a2:9b:00:a5:
5b:ac:11:64:0c:69:fc:65:22:0a:ff:4c:6f:2f:f7:
0d:f2:ea:c5:e2:bc:ea:00:6a:28:04:d2:be:4b:a7:
9c:8a:32:4a:6e:a1:27:0c:0b:d2:3b:56:c0:fb:40:
47:6b:c5:2b:2c:33:36:b7:b6:f1:07:d7:4b:7a:88:
7a:c7:f8:9c:33:1d:23:17:4f:ad:f0:8e:5b:68:42:
f3:42:6a:36:32:90:c7:61:e4:ad:6e:bd:7e:54:32:
05:fd:32:18:f2:93:c9:9b:e4:ef:8a:69:1f:fa:63:
d7:66:d4:ed:c7:a1:4e:1c:e1:a3:a8:2c:d5:ca:77:
a5:da:dd:ba:86:a8:39:d8:9c:cd:50:cc:b0:a4:e9:
5e:d9:03:7f:bf:6e:f5:eb:cc:ec:d0:43:91:8e:1e:
e8:ee:ae:62:47:3a:18:ae:c8:58:7b:c6:2d:02:e7:
ce:a0:26:29:58:0f:9b:63:5d:4a:4a:2b:e0:c1:95:
1a:d6:63:22:74:10:46:71:04:ed:ae:d9:e0:9b:76:
fd:77:26:c1:3f:0d:36:08:a2:e5:44:a5:c8:2e:51:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:00:F8:B4:19:1E:D4:37:2C:FB:17:77:5A:33:21:3E:AB:F1:49
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:58:8a:f2:d4:70:32:66:97:1a:02:9c:e8:02:24:79:39:
be:bb:bb:2c:99:6e:b0:98:71:1c:b9:12:f5:63:e9:e3:4c:1d:
62:02:c9:7c:dd:c5:69:af:09:e2:11:e7:03:a7:98:5e:34:25:
e0:b2:61:95:57:92:1f:ce:c6:0e:af:f7:48:8b:ff:17:c2:7b:
c4:65:a4:0d:1a:92:0a:45:62:0a:c4:0c:15:f2:ea:d6:d3:53:
21:e1:d9:f3:8a:bb:02:c3:ac:ed:e5:7a:ff:ce:0a:5b:02:6d:
76:ca:64:65:6f:68:3f:8a:d8:bc:f7:0a:af:d9:90:19:64:2d:
89:1e:e0:12:2a:3f:76:a8:e9:55:13:a9:b0:b8:9b:6e:50:05:
80:79:e2:30:5b:5e:e7:40:f7:2b:29:23:9c:fe:f7:0f:78:24:
57:b1:0b:3d:5a:5b:d4:93:19:ce:34:fd:7d:71:df:08:60:74:
02:ea:77:a0:7a:24:36:d7:2c:01:a5:ed:46:e6:30:64:a1:91:
82:df:c2:fa:e6:c1:70:65:60:15:ed:c9:ce:9a:19:2e:9b:af:
c6:1e:1e:83:01:98:a1:2d:4f:fb:9d:20:a0:a5:89:df:37:6d:
01:65:bc:26:19:08:e1:96:75:f5:03:e0:22:29:43:2d:aa:6a:
80:11:bb:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfPFvColXbBZIpZAETnom3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlODZkY2RlNzExZDU0NTM1Mzk3NGIzMzk1NTEwOGQ5ZGY0
MGI2ZTkwHhcNMjUwNzAzMDcwMTE2WhcNMjUwNzA0MDcwMTE2WjAzMTEwLwYDVQQD
Eyg2YTQ5MDBmOGI0MTkxZWQ0MzcyY2ZiMTc3NzVhMzMyMTNlYWJmMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyvHfygPGW7giOH1Tkxj/MxQe23Q
/iel0lJdk3JzoF1xMs+niS4BF6KbAKVbrBFkDGn8ZSIK/0xvL/cN8urF4rzqAGoo
BNK+S6ecijJKbqEnDAvSO1bA+0BHa8UrLDM2t7bxB9dLeoh6x/icMx0jF0+t8I5b
aELzQmo2MpDHYeStbr1+VDIF/TIY8pPJm+Tvimkf+mPXZtTtx6FOHOGjqCzVynel
2t26hqg52JzNUMywpOle2QN/v27168zs0EORjh7o7q5iRzoYrshYe8YtAufOoCYp
WA+bY11KSivgwZUa1mMidBBGcQTtrtngm3b9dybBPw02CKLlRKXILlHz5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpJAPi0GR7UNyz7F3daMyE+q/FJMB8GA1UdIwQY
MBaAFH6G3N5xHVRTU5dLM5VRCNnfQLbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUt
MzVmMWE5MDg4YjQyLzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUtMzVmMWE5MDg4YjQy
LzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKFYivLU
cDJmlxoCnOgCJHk5vru7LJlusJhxHLkS9WPp40wdYgLJfN3Faa8J4hHnA6eYXjQl
4LJhlVeSH87GDq/3SIv/F8J7xGWkDRqSCkViCsQMFfLq1tNTIeHZ84q7AsOs7eV6
/84KWwJtdspkZW9oP4rYvPcKr9mQGWQtiR7gEio/dqjpVROpsLibblAFgHniMFte
50D3KykjnP73D3gkV7ELPVpb1JMZzjT9fXHfCGB0Aup3oHokNtcsAaXtRuYwZKGR
gt/C+ubBcGVgFe3JzpoZLpuvxh4egwGYoS1P+50goKWJ3zdtAWW8JhkI4ZZ19QPg
IilDLapqgBG7Nw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 13:24:38 2025 by rpki-client