Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File: MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier: HRc7LcMrzBn868QFKlH6Oye0gStFVS6/l7yXbSAAiB0=
Subject key identifier: 5A:53:91:EA:67:84:A7:2B:02:1F:D9:67:D4:D6:D1:7F:3E:22:6D:72
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer: /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial: 0197B7EA2668BAC83CFB36A2282271601D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number: 058A
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: sCAKLgKnL9iW/e+HIufbNcifaFlECPlOhj6V1prikkA=)
2: ztFr_-g0BQXlSd44UjlTquqKHlw.roa (hash: ICOrnGo6DEP/QUKA6WPeJcvKMnXrNs1C20UGRkpbiEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:26:68:ba:c8:3c:fb:36:a2:28:22:71:60:1d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=5a5391ea6784a72b021fd967d4d6d17f3e226d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:4c:1e:12:d8:87:c1:32:3e:27:60:85:6c:
03:77:1c:fd:40:49:15:44:90:40:e9:f9:45:45:d3:
08:b5:85:3c:97:8f:17:9b:2a:c3:9a:7c:55:a8:ea:
9c:25:a2:ea:02:09:ac:25:e7:63:64:53:68:b4:87:
5c:c5:f3:bf:19:8f:32:6b:85:70:36:76:99:8d:a8:
24:b1:e6:ce:59:1d:fa:e0:0c:8d:0a:06:a5:9c:e6:
2b:4f:c2:ea:9c:e4:c0:25:2a:d3:ef:be:dd:ba:0c:
b0:e8:bd:b5:d2:c3:94:c4:53:49:72:25:4d:e8:cf:
49:ca:5c:f4:5a:df:e2:9d:6f:aa:67:1d:97:aa:ed:
22:a9:61:d3:20:b4:de:bf:92:39:b3:26:bb:30:cb:
3a:e3:ec:4e:61:83:d6:6e:03:b9:cb:b9:0c:82:54:
28:fe:8c:6b:fa:77:df:2a:bf:10:4e:ca:94:f1:01:
3c:6a:98:25:7c:87:6e:2e:50:db:89:fe:05:d1:68:
ed:af:36:e9:f5:a2:d7:f4:87:15:df:ba:5e:df:37:
09:ae:5b:89:8d:c1:49:ce:af:fd:fe:8b:7f:67:70:
73:5e:2a:4b:99:67:bb:09:e2:e3:5e:40:68:4b:4b:
fc:ac:ce:04:df:88:16:a9:b4:67:c4:4f:59:4b:c9:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:91:EA:67:84:A7:2B:02:1F:D9:67:D4:D6:D1:7F:3E:22:6D:72
X509v3 Authority Key Identifier:
keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:28:b4:6e:09:8e:09:7f:16:39:eb:54:92:26:8f:be:fb:75:
25:dd:ab:83:af:12:06:29:c5:0d:8d:ff:be:7f:10:0d:e7:9c:
7a:c9:ae:db:f2:df:9f:7e:c3:6a:10:1a:4e:be:7a:fc:9e:1a:
b4:ce:df:3c:98:d1:a3:cd:8a:12:c3:a6:50:f3:4f:79:61:f7:
df:88:86:2c:79:b1:e3:fd:e6:4a:b0:05:86:75:c7:d6:b3:61:
7f:31:d4:ae:6b:e7:77:a6:6a:1c:e7:1f:1b:67:0c:bc:2c:cc:
fe:e7:0e:d3:7c:93:2f:11:8c:a7:68:cf:64:20:41:f1:fa:87:
dd:ab:a8:34:b3:73:bc:eb:85:b4:e1:8c:69:c4:3a:a2:e6:cb:
ca:74:26:64:6f:b8:d6:63:2a:1f:73:da:d2:3e:b3:86:de:5a:
33:2c:98:14:6c:de:3c:a7:af:de:c3:9f:24:2c:ec:0e:61:6c:
94:28:4a:cf:72:ab:d3:86:24:90:38:6a:dd:ea:ae:70:63:79:
32:1c:42:ce:a1:49:f7:a8:97:3c:4a:5f:b4:6f:97:34:90:43:
cb:b6:ae:c2:b3:00:6a:2e:dd:a1:ad:7b:db:a1:f2:10:ea:62:
62:9c:ca:7e:0a:43:5d:6f:a1:64:43:03:ca:c0:8c:c7:4a:98:
a3:df:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:42 2025 by rpki-client