Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
File: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft (raw, json)
Hash identifier: og5DUbTmeam6+DCFm209Ck67uWaV6n7V4URdoEC3ZDE=
Subject key identifier: 1F:8F:81:7B:2D:52:7D:B1:4E:18:A5:66:92:B7:7C:CC:F8:33:13:2E
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Certificate issuer: /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial: 0197B9A182BC77C95ADF1E70FD5E1BBA5C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
Manifest number: 06C0
Signing time: Sun 29 Jun 2025 03:00:59 +0000
Manifest this update: Sun 29 Jun 2025 03:00:59 +0000
Manifest next update: Mon 30 Jun 2025 03:00:59 +0000
Files and hashes: 1: 4C0OXayjBs5jaM2cyHhqCBjs15k.roa (hash: Z1AW2ktKl7nH/pif3t4jJj3aESh4kYBCdiYTjw37+0A=)
2: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl (hash: Jmx4fgrE4YKpkq88ZJ4gmmKdz6HAj4o7ihGbilGLewo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:82:bc:77:c9:5a:df:1e:70:fd:5e:1b:ba:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
Validity
Not Before: Jun 29 03:00:59 2025 GMT
Not After : Jun 30 03:00:59 2025 GMT
Subject: CN=1f8f817b2d527db14e18a56692b77cccf833132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:d3:e7:aa:31:62:7f:72:9a:17:a9:19:a9:
5e:29:cf:98:9e:69:1b:2e:0b:10:11:fb:be:b7:9b:
27:10:eb:b2:43:1a:eb:98:c3:8c:de:d2:f7:6f:6d:
60:e5:fc:85:7d:d4:c6:87:ab:06:fd:57:08:93:ac:
b0:52:eb:99:1e:38:18:11:3f:8f:81:d5:d9:07:1c:
fd:bd:01:9d:d8:ac:bf:ba:9f:ec:28:1d:7a:77:c1:
3a:08:ca:fd:f1:33:e1:b4:4e:61:cc:22:c2:7d:05:
22:b0:22:9c:b4:6e:57:93:e8:2d:80:b1:5c:b6:30:
6a:bd:60:3b:19:26:28:bb:4c:90:3e:b9:39:af:1a:
7c:a7:5f:d6:28:0c:07:be:75:cf:7b:2c:9b:73:9a:
af:79:c0:05:48:9f:12:20:aa:37:7d:be:68:76:16:
dd:ce:e3:7d:59:de:f5:dd:22:6b:68:be:64:fa:8d:
99:6d:aa:28:df:28:b8:19:c8:0f:bd:07:d8:79:b2:
ef:5c:a6:91:e9:19:0c:24:41:df:f0:9c:31:72:52:
9c:31:33:05:ea:1f:a2:0b:93:9d:96:ba:b1:51:e8:
06:0b:e6:c5:4e:ba:93:ef:fd:8b:d1:e1:5b:3d:86:
74:e1:a3:64:fa:0b:35:fc:08:67:b9:eb:9d:a3:69:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:81:7B:2D:52:7D:B1:4E:18:A5:66:92:B7:7C:CC:F8:33:13:2E
X509v3 Authority Key Identifier:
keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:1a:a4:24:19:46:4f:b0:9f:25:63:3f:72:3f:d0:cf:31:
57:04:eb:97:57:49:64:58:75:82:54:9d:98:b4:ed:d8:96:0d:
85:be:87:b7:f2:2f:b4:bb:bd:65:6f:54:82:f9:dc:60:49:82:
f6:ab:09:03:82:76:3e:e1:4a:d5:80:16:50:60:d7:1c:15:a1:
09:77:8b:0e:6a:97:d0:18:aa:89:0c:46:07:77:85:68:b9:7b:
78:cd:43:7e:f6:36:bc:08:7e:8e:03:9f:1c:93:56:98:4d:77:
7c:2a:19:3a:54:27:c8:71:ad:2e:ec:1a:d8:d3:55:3d:cd:4a:
e5:fc:5b:fb:fe:bb:6d:0d:e6:35:39:cc:2d:a9:c2:8c:f1:9d:
89:61:c8:01:38:7d:1c:12:7a:92:1f:a3:22:12:20:b9:64:28:
f0:19:ea:b1:cd:8c:b6:2a:0a:6a:ea:55:0a:de:09:e1:59:aa:
ca:5c:18:23:78:36:4e:11:cf:6e:07:91:25:b6:c4:ee:f8:51:
f3:e6:f5:2f:10:7d:ce:49:b4:57:d9:32:af:95:40:9c:6c:dd:
ac:d5:30:94:4e:a9:6e:45:32:96:c5:57:61:92:b9:b4:a4:38:
ef:af:3c:18:3e:1c:e7:2d:9e:33:bb:84:9c:9d:82:7a:84:c9:
05:b8:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:14:13 2025 by rpki-client