Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: 2tTviQ3whPN35AJhgxOn001WuxKIUpa3fQu3lIMR6HQ=
Subject key identifier: DF:68:06:91:BA:96:0A:10:2B:AB:68:F7:0E:B3:0C:8C:E3:77:EF:F2
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 0198D4E026A848067B6F629E2E1B5CAF1F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: MGizkR9sPKv7MBiAnJ8NElpqz91sxbLwYnIe69gfSaA=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:26:a8:48:06:7b:6f:62:9e:2e:1b:5c:af:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=df680691ba960a102bab68f70eb30c8ce377eff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:16:d2:46:c7:23:96:59:fb:e0:2a:6d:11:0c:
a8:3a:ac:b1:da:91:fc:a9:2e:6e:07:87:0f:49:e3:
94:0f:44:fe:b6:98:d4:28:2f:8e:fb:ca:a0:aa:eb:
e4:e8:8d:68:fb:81:45:87:26:d9:22:48:20:3f:80:
df:42:b4:64:8f:13:6b:bf:4e:ca:28:69:45:9f:c8:
a0:6f:b5:74:2e:ee:4a:d5:34:76:ee:27:ca:15:35:
87:17:0b:86:f7:08:c1:6c:72:a5:87:d2:7c:a3:34:
33:9f:a0:22:a5:f4:26:b2:60:70:83:6b:05:bf:d6:
d2:4f:ca:38:69:7e:2c:ad:d8:46:66:e5:4f:8e:d1:
33:39:ae:9a:5e:1d:27:17:a1:a8:03:55:b3:a1:be:
b0:f2:08:c2:d5:0c:ac:58:03:9b:9f:e9:bb:61:e8:
c4:46:87:50:a5:3b:73:1f:b2:bb:5b:d8:b1:50:3c:
c0:61:80:99:0f:de:b3:ca:2d:5c:83:c2:80:27:ef:
92:7d:c6:0c:4e:a4:79:f2:7c:d7:98:f8:37:ad:ce:
83:d9:d8:00:f4:ef:22:49:d4:11:bd:47:39:cc:cd:
11:9f:26:fd:73:c0:af:b1:bd:85:94:4e:8a:ce:93:
d8:83:53:4b:6f:92:33:b6:9f:9f:90:73:72:c6:f0:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:68:06:91:BA:96:0A:10:2B:AB:68:F7:0E:B3:0C:8C:E3:77:EF:F2
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:28:c3:8e:d6:89:c7:37:b5:fa:bc:ea:2d:e5:fe:a1:2b:
b3:36:58:51:9e:e2:9a:93:ec:aa:71:0f:a8:d4:04:6d:5d:46:
a9:22:b9:0f:04:6d:a0:88:d4:6a:69:c9:60:c4:1a:71:b0:42:
be:4f:68:8f:bd:44:08:77:13:8b:26:53:25:9b:d2:24:39:68:
83:c8:2b:85:fc:be:89:a9:ad:d1:bd:6b:91:6b:d4:c7:37:0b:
2f:1e:cf:d5:aa:24:82:72:1d:4b:cc:40:c4:21:d2:70:66:2a:
ab:ed:31:04:be:d2:77:71:94:83:a3:8c:60:75:de:77:4a:2c:
95:44:3d:a8:76:8b:63:92:99:33:85:ad:66:19:5b:ff:6f:02:
07:0e:ca:2e:30:63:63:f2:65:34:93:83:28:5c:73:31:91:f3:
d7:e6:b3:7b:ba:19:04:31:ae:a1:ca:08:30:22:24:df:4d:58:
78:31:56:83:41:ea:4a:63:24:89:52:a9:94:0d:90:6d:b9:55:
cd:e9:b9:46:94:65:a1:d4:c7:23:c7:d1:9d:fb:3b:95:7e:2d:
d6:84:da:79:0e:b3:f9:8e:96:51:95:95:01:ec:aa:f3:92:67:
64:41:16:a7:f7:67:66:a4:6a:47:cb:f3:37:fe:87:95:c5:05:
79:55:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:01 2025 by rpki-client