Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: Bxje5slSbt7kObKGX4ozGboov4DDB3D6U7Dbukvw9ao=
Subject key identifier: 1F:2A:1C:9C:3C:2F:A2:AD:A7:33:E3:87:75:94:09:EF:B0:6F:56:B2
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 0196A01AD4F909A38DDADB6A8C93F27F0B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 061E
Signing time: Mon 05 May 2025 11:00:35 +0000
Manifest this update: Mon 05 May 2025 11:00:35 +0000
Manifest next update: Tue 06 May 2025 11:00:35 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: 1TXYd51Mvqa8B1BIOOreboQD5ACesu+89hI9ekIHdwA=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:d4:f9:09:a3:8d:da:db:6a:8c:93:f2:7f:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: May 5 11:00:35 2025 GMT
Not After : May 6 11:00:35 2025 GMT
Subject: CN=1f2a1c9c3c2fa2ada733e387759409efb06f56b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:20:79:9f:a9:c6:50:dd:61:28:71:6d:49:
8b:b2:4c:58:fe:41:a2:38:c1:25:f4:2c:5e:50:91:
d6:88:8f:c6:3a:b6:98:db:17:a1:e8:73:32:6c:d6:
51:24:da:23:ed:b1:6d:a1:66:81:1b:d7:44:2f:d4:
b3:83:44:94:17:67:a8:d0:24:f5:d4:63:f9:9d:00:
d3:5c:cb:aa:62:31:7f:c7:56:a9:51:33:b0:10:cd:
8f:6d:6e:a5:d7:f6:8f:79:5a:62:17:f5:58:28:f1:
74:7e:43:a6:41:fe:a8:d1:8c:43:03:ee:1e:7f:72:
df:03:6c:f4:44:e9:74:75:42:ce:b1:d5:3b:42:65:
fc:40:7d:fa:31:25:96:fd:6d:3e:0b:0f:9e:4a:ad:
b4:a4:80:7d:ce:01:e4:b4:17:91:80:d7:2b:f3:fc:
46:3b:3a:67:14:af:80:e8:d3:3c:01:cf:3d:ee:d3:
23:68:c2:92:c2:ae:8d:d9:fe:34:14:a9:e1:e3:5d:
49:ab:c4:f0:e2:ac:c1:eb:2b:d0:fc:42:4a:cc:b1:
bb:a5:91:d6:d5:22:30:23:db:ca:86:4c:64:76:9c:
97:0f:06:83:af:80:7f:73:e9:15:0b:97:2d:75:ba:
2d:5d:fa:d2:9b:6d:34:01:d7:0f:7e:6c:df:59:41:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:1C:9C:3C:2F:A2:AD:A7:33:E3:87:75:94:09:EF:B0:6F:56:B2
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:63:03:b1:08:77:7c:42:8b:30:89:a8:c8:31:44:1b:a3:6b:
4b:c4:ac:a6:a2:ee:c2:af:63:3b:00:f5:f1:bb:f4:8b:1b:53:
94:b7:42:91:34:bf:bb:da:62:2e:48:41:b2:63:e0:c5:f1:64:
21:10:24:34:a0:46:f2:be:0f:13:c3:cf:89:07:7f:5a:a8:49:
2b:56:f0:c4:54:5c:17:6e:2b:16:41:96:eb:f8:df:dd:17:09:
9d:f1:4a:54:13:ac:87:3d:a9:01:26:1b:37:ef:f4:bb:f0:34:
f4:5d:29:e9:2f:83:3a:7d:23:99:06:fd:40:88:17:39:53:89:
94:45:b9:f5:41:2e:8f:57:a4:a6:64:42:d4:8f:28:4b:89:56:
a1:ed:91:e1:8f:17:7b:0e:ff:42:17:69:1f:43:cb:db:4e:e9:
00:d5:7b:3e:a6:e8:5b:0e:9a:53:8f:f5:c2:ab:a5:7e:d2:ef:
bd:6e:37:e4:34:ef:69:06:19:be:ea:41:f9:6d:22:37:32:d9:
02:19:00:59:54:e4:8c:cb:52:37:1b:69:a6:aa:f2:38:58:0a:
9b:38:26:f7:95:4f:b3:cc:ee:34:d9:23:82:d2:b9:37:7e:c4:
3c:ab:19:3f:ab:47:94:9d:04:bf:ad:98:b8:ad:57:27:29:c8:
67:04:5e:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGtT5CaON2ttqjJPyfwtPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMWExYzdkYmI5YTE1NzFhNWJmNDkyNGFiM2ZjNTA0OTMx
NDVmNGYwHhcNMjUwNTA1MTEwMDM1WhcNMjUwNTA2MTEwMDM1WjAzMTEwLwYDVQQD
EygxZjJhMWM5YzNjMmZhMmFkYTczM2UzODc3NTk0MDllZmIwNmY1NmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkcgeZ+pxlDdYShxbUmLskxY/kGi
OMEl9CxeUJHWiI/GOraY2xeh6HMybNZRJNoj7bFtoWaBG9dEL9Szg0SUF2eo0CT1
1GP5nQDTXMuqYjF/x1apUTOwEM2PbW6l1/aPeVpiF/VYKPF0fkOmQf6o0YxDA+4e
f3LfA2z0ROl0dULOsdU7QmX8QH36MSWW/W0+Cw+eSq20pIB9zgHktBeRgNcr8/xG
OzpnFK+A6NM8Ac897tMjaMKSwq6N2f40FKnh411Jq8Tw4qzB6yvQ/EJKzLG7pZHW
1SIwI9vKhkxkdpyXDwaDr4B/c+kVC5ctdbotXfrSm200AdcPfmzfWUE0AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8qHJw8L6KtpzPjh3WUCe+wb1ayMB8GA1UdIwQY
MBaAFKAaHH27mhVxpb9JJKs/xQSTFF9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lODk2YjgtMGVhMC00YmJjLThjMzUt
MjI2MmM1YmQ3YTJjLzEvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lODk2YjgtMGVhMC00YmJjLThjMzUtMjI2MmM1YmQ3YTJj
LzEvb0JvY2ZidWFGWEdsdjBra3F6X0ZCSk1VWDA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGMDsQh3
fEKLMImoyDFEG6NrS8SspqLuwq9jOwD18bv0ixtTlLdCkTS/u9piLkhBsmPgxfFk
IRAkNKBG8r4PE8PPiQd/WqhJK1bwxFRcF24rFkGW6/jf3RcJnfFKVBOshz2pASYb
N+/0u/A09F0p6S+DOn0jmQb9QIgXOVOJlEW59UEuj1ekpmRC1I8oS4lWoe2R4Y8X
ew7/QhdpH0PL207pANV7PqboWw6aU4/1wqulftLvvW435DTvaQYZvupB+W0iNzLZ
AhkAWVTkjMtSNxtppqryOFgKmzgm95VPs8zuNNkjgtK5N37EPKsZP6tHlJ0Ev62Y
uK1XJynIZwRelA==
-----END CERTIFICATE-----
Generated at Mon May 5 17:14:42 2025 by rpki-client