Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: ntq4J9UCLQqXRAvwQa5pHGzVbGzTXrqXNnxc2klI+zE=
Subject key identifier: E9:18:27:DD:26:71:1F:57:DC:FD:95:35:E5:B8:2C:59:7D:2C:F6:77
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 0198D5F19D4E381F04E8A897CAAAFD006FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0743
Signing time: Sat 23 Aug 2025 08:00:37 +0000
Manifest this update: Sat 23 Aug 2025 08:00:37 +0000
Manifest next update: Sun 24 Aug 2025 08:00:37 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: PE/jfQ/pxYqIgLoJppD7jjzocTAaenu/9twoLVOyp74=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9d:4e:38:1f:04:e8:a8:97:ca:aa:fd:00:6f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Aug 23 08:00:37 2025 GMT
Not After : Aug 24 08:00:37 2025 GMT
Subject: CN=e91827dd26711f57dcfd9535e5b82c597d2cf677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:2d:50:97:9a:54:a0:04:b7:ec:8f:ac:62:
d0:4a:ff:18:5c:dd:7a:49:40:42:2b:73:77:fd:25:
88:7f:c9:d5:0d:17:23:44:4f:d0:cd:86:6a:e9:4d:
34:5d:0d:c9:6b:ee:f4:0f:18:d6:1e:ce:31:32:f4:
ec:5a:59:f4:4e:dd:38:9a:77:78:0c:6a:4e:68:24:
ec:44:95:8d:b5:70:a1:05:f2:83:24:44:a0:76:ec:
51:69:35:6e:fd:5e:43:d4:70:a2:c7:e8:7e:95:08:
ea:f5:02:e2:81:57:38:51:ea:50:d3:46:62:c2:98:
a9:f5:ef:a2:76:91:68:92:4a:b3:39:6c:b9:93:af:
06:d9:97:3a:8a:46:9e:b4:c0:fc:5d:69:21:a0:43:
09:02:14:c4:32:d2:a1:35:82:88:2e:eb:e4:93:8c:
a0:0d:43:82:c9:43:34:e5:07:51:f6:9b:0d:ba:f1:
a8:d2:07:7c:e5:97:d1:1d:1b:1d:be:5c:48:24:0c:
02:b5:77:2b:ce:c8:f3:fe:e7:eb:94:ca:7d:c6:46:
d9:8b:53:a7:ba:18:4d:82:f8:12:17:6e:93:80:c7:
b7:3f:52:08:42:b7:b3:ea:2a:cf:ae:bf:c0:e8:cd:
6f:a4:2e:56:3c:60:4b:f3:a6:0a:f4:83:56:35:92:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:27:DD:26:71:1F:57:DC:FD:95:35:E5:B8:2C:59:7D:2C:F6:77
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:e1:0c:fe:2c:ac:76:c4:21:fa:9a:fc:e8:1d:a2:6e:64:
13:16:77:1a:4a:64:e2:de:fa:2f:c1:30:5c:83:8e:4a:c1:6d:
f2:91:98:f0:39:61:80:b3:96:d6:30:3b:5e:43:49:75:76:a2:
e4:8a:8e:91:a8:91:77:f9:7b:2f:bd:9b:fb:55:db:29:df:03:
19:a0:2a:5d:c3:57:66:19:f1:5a:2e:a2:f3:37:17:34:9e:54:
52:f7:f9:08:96:9f:44:eb:07:46:d3:ca:93:03:4a:8a:76:77:
c3:7d:b7:3f:e2:4e:cc:97:52:6c:97:80:8c:ba:32:bf:2d:5e:
be:39:aa:d6:2c:a4:b7:0c:b6:97:b9:65:a4:5f:97:27:92:b5:
db:f5:2f:6f:59:c8:55:ae:c1:e1:c9:21:73:48:3f:52:49:b1:
ee:1a:13:80:ab:06:10:3a:35:44:cc:8f:83:51:9c:fb:5d:ea:
52:19:4a:dc:3b:9b:9e:c0:cc:a5:92:b6:6b:cc:77:e9:50:ac:
fb:9c:83:1b:c9:b1:80:27:c9:09:c0:2a:2f:6d:81:30:cf:bf:
da:d9:56:6e:2c:6d:09:1b:5d:2c:99:23:58:eb:04:ba:34:76:
e7:61:17:71:cc:e7:30:4e:4a:6d:b9:53:e7:40:df:39:e6:17:
56:7c:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:20 2025 by rpki-client