Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: Plb50oymCv+qs6QTrJs0Yc6EQR7JsukDjbCOG+lYTB8=
Subject key identifier: B2:07:10:D1:E1:56:EA:CD:B2:C5:FD:4A:19:AC:00:FB:65:FA:EA:ED
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 0199FD6B3B78946EE0D09209560E3AEE0BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 07DC
Signing time: Sun 19 Oct 2025 17:01:27 +0000
Manifest this update: Sun 19 Oct 2025 17:01:27 +0000
Manifest next update: Mon 20 Oct 2025 17:01:27 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: N5djEX0OceM3XxLZPFa9iR8o+3ep6jAvNcac80fQ4fU=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3b:78:94:6e:e0:d0:92:09:56:0e:3a:ee:0b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Oct 19 17:01:27 2025 GMT
Not After : Oct 20 17:01:27 2025 GMT
Subject: CN=b20710d1e156eacdb2c5fd4a19ac00fb65faeaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:d7:4a:90:a7:cd:05:1a:df:77:f6:e6:79:
3d:46:42:c8:87:1d:b2:96:5d:4a:a9:3e:78:67:3c:
0f:6f:2b:c5:a0:34:04:49:50:af:91:43:eb:5e:a9:
5d:3c:97:83:71:4f:a7:29:e0:11:01:61:33:7a:1c:
82:52:c2:98:4e:72:23:5b:f5:83:d9:79:70:c4:e7:
06:6e:07:e7:50:18:4f:74:4c:f9:31:bb:ed:62:cd:
7b:c5:0c:ee:40:f1:d7:90:5f:a9:20:81:6d:a2:9a:
26:55:c2:4d:12:9b:e4:cb:4f:c8:7b:ff:0f:bb:68:
44:33:54:ab:90:86:f5:06:8a:99:ba:ea:25:64:44:
0b:5f:6d:bd:82:cd:8c:08:a8:54:20:fd:39:ed:5c:
c2:22:cf:a2:5f:c2:20:6e:1b:b9:48:78:c6:62:be:
9c:71:32:f7:94:cb:e6:93:eb:bd:48:7f:bf:5d:d5:
49:7d:64:57:ff:b2:9e:68:1e:69:75:83:63:3f:08:
7d:d5:89:c0:c5:13:14:cc:0b:60:e1:ea:1b:ee:52:
ee:6e:4a:9a:09:85:a1:2c:ee:52:f3:02:a5:74:00:
07:a9:13:45:cc:a7:fb:f4:a3:be:0e:db:c9:0d:be:
21:5d:45:17:1d:4a:c8:e5:8a:1a:c7:a9:31:6f:35:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:10:D1:E1:56:EA:CD:B2:C5:FD:4A:19:AC:00:FB:65:FA:EA:ED
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:34:a1:a2:1f:cb:e5:8a:74:7f:5b:da:a1:3b:e8:46:4b:d7:
92:3e:5d:ee:d0:ff:ef:c9:e3:31:12:1f:8c:a6:78:c6:26:9a:
0e:07:bf:94:79:00:13:d9:0b:16:67:27:e4:95:6e:59:6a:59:
1b:12:c5:9f:f5:14:ab:9e:63:8d:f7:dc:8c:ad:1c:98:b0:d7:
ae:3a:55:80:3a:ba:ed:b5:47:d9:69:42:f0:14:6b:e6:45:62:
a6:a4:8f:aa:7d:a4:75:80:1a:a2:c3:92:cf:cb:87:64:29:14:
00:60:65:bd:cf:a1:bd:30:32:b5:2a:50:cb:0a:22:ec:b9:2f:
86:84:1f:9a:77:f9:4a:89:c8:a3:b0:3b:de:e1:79:c8:44:23:
ef:23:55:75:29:ca:d1:2e:86:d3:b6:60:71:5b:ee:9a:df:a5:
ca:d3:11:14:5f:8f:5f:3a:27:84:28:cc:a8:ac:24:b9:ae:ef:
9e:7b:0c:fd:82:6c:2a:bc:fa:03:4e:bf:90:c6:cc:71:fb:1e:
6d:ff:d0:7c:61:5d:76:b2:ce:cb:30:c3:ab:26:ac:8e:cb:5b:
c7:4c:65:8b:aa:6a:0b:63:1a:33:14:06:41:e7:9c:f7:e6:9f:
79:da:5a:1a:a5:97:93:3b:17:0f:67:a4:f1:2c:e6:84:02:c6:
d3:f5:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:51 2025 by rpki-client