Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: s01lYw4MTAFzeo1t1MxX3HilSyB4YtrUf/3spgt/BeI=
Subject key identifier: D3:25:15:78:8F:7B:14:5B:DF:26:5A:EA:4C:B7:57:29:65:FB:78:30
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 0197BAEB70D8FBE8EEF82AC053C072F16392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 154A
Signing time: Sun 29 Jun 2025 09:01:21 +0000
Manifest this update: Sun 29 Jun 2025 09:01:21 +0000
Manifest next update: Mon 30 Jun 2025 09:01:21 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: ewgcNsJADdIY1Lj0KiVc3PVGB+x0UFw5SRXD8g0Z9QM=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:70:d8:fb:e8:ee:f8:2a:c0:53:c0:72:f1:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Jun 29 09:01:21 2025 GMT
Not After : Jun 30 09:01:21 2025 GMT
Subject: CN=d32515788f7b145bdf265aea4cb7572965fb7830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:dc:10:49:af:91:69:96:2b:3e:a6:a2:91:
ca:6e:78:22:51:41:32:d7:fa:30:ae:8e:af:4c:56:
e8:76:8c:2f:87:f3:f9:3e:b7:bf:2e:1e:17:10:82:
1d:47:9a:59:f5:f9:c6:3b:14:9f:35:69:26:c1:16:
b2:f2:97:8e:0c:3d:6d:03:9d:af:cf:b0:65:0b:c8:
61:cf:bd:37:32:2f:a1:91:67:b3:ae:e7:97:d7:53:
05:6d:4c:bb:a5:f1:4c:17:52:55:bc:67:ef:3a:cf:
0e:3b:9b:0d:0a:f4:d5:83:57:1d:eb:b4:cc:4f:62:
9f:23:10:fc:2b:68:37:7c:57:38:fd:4c:ba:b4:c5:
6c:a3:d0:9b:aa:07:33:c4:f7:79:79:1c:3e:4e:a8:
13:09:14:34:3e:5d:e2:51:56:d3:b1:0c:35:2d:e9:
90:c3:cb:66:e7:26:ac:47:4f:fb:36:95:21:6c:da:
b9:4a:0e:f8:38:9f:07:1c:d0:23:3e:60:e7:a2:3a:
da:67:3d:bf:66:08:56:95:af:9b:ea:56:e6:40:00:
0c:20:a8:45:1d:3c:4a:62:9e:e7:7e:3f:c4:a9:57:
e6:42:ad:19:72:74:68:71:28:49:f6:57:eb:71:98:
18:1e:bd:04:dc:fd:50:6e:ba:e5:13:94:b3:ad:3f:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:15:78:8F:7B:14:5B:DF:26:5A:EA:4C:B7:57:29:65:FB:78:30
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7f:30:49:32:d6:44:8c:b1:6b:96:80:9a:09:ac:33:ab:ca:
fe:e1:8f:9b:76:c6:09:5e:f3:6a:5c:3d:8b:e8:72:43:73:e4:
92:5d:2c:61:a0:05:74:1c:b7:a5:f6:f5:1d:14:f8:36:fd:7b:
15:90:df:1f:16:71:53:9f:08:9f:f6:7e:08:9b:ae:1e:04:c9:
0f:b6:89:df:d8:3d:13:ba:73:7a:5a:57:35:9f:fd:1a:52:a8:
bd:ee:a5:b3:f2:59:a6:8f:3e:ff:d0:61:1e:bd:54:cc:6d:f9:
f8:f7:2f:c3:35:30:48:62:50:99:5f:cf:ec:e1:b8:4c:a3:b4:
e2:83:ae:95:9e:8e:19:6e:79:20:14:26:1c:00:e0:6a:4d:ed:
19:df:c6:58:9b:e3:97:1c:e3:46:55:2a:78:c0:be:60:b7:d5:
6c:21:68:55:3a:2c:15:dd:6e:92:91:ae:97:21:0d:b5:8b:32:
df:83:35:7a:b0:82:2a:c8:b3:e2:e6:71:c9:40:65:28:29:5a:
64:ec:9d:39:99:ff:6a:ad:ad:a0:12:97:ed:cf:71:a5:85:d1:
86:4c:cf:9f:2e:3b:c5:ac:67:36:33:a7:25:a3:15:59:ed:7d:
ba:b2:d3:00:e1:45:fd:97:d5:45:cb:de:43:2c:2a:9a:5d:19:
ea:87:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:29:03 2025 by rpki-client