Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: o14rWFvCE8lr9POTvMhfe7/Va0DhuwjaPRXg0iVn5E0=
Subject key identifier: E3:37:9E:5E:6B:F0:1E:C8:31:29:FD:E7:F5:B8:4E:F3:3D:A1:93:42
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 01969FE43EA126953F8DF2965B9954542432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 0EC6
Signing time: Mon 05 May 2025 10:00:57 +0000
Manifest this update: Mon 05 May 2025 10:00:57 +0000
Manifest next update: Tue 06 May 2025 10:00:57 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: FrFWp8abP2gGn1z7L08DWgZ9X2q32GtbqnZ1JBLnpp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:3e:a1:26:95:3f:8d:f2:96:5b:99:54:54:24:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: May 5 10:00:57 2025 GMT
Not After : May 6 10:00:57 2025 GMT
Subject: CN=e3379e5e6bf01ec83129fde7f5b84ef33da19342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:6c:e4:6d:4d:ab:34:38:01:0a:ae:d5:f1:
91:1c:0f:50:f6:f5:74:24:67:ed:68:41:6d:bf:d0:
ce:f7:59:bd:1f:ca:d3:93:84:f6:80:5b:5e:6b:01:
7b:b7:4a:da:f1:8c:46:0c:d1:52:e8:8d:63:ce:64:
d9:e2:52:fa:80:a8:13:a3:55:2a:87:44:62:9c:b1:
ae:b2:73:1e:80:d5:8a:e0:44:f8:f0:2f:e8:a7:55:
60:36:a8:1c:a5:bc:ab:50:f9:40:74:82:6c:db:08:
ca:fd:17:25:4b:68:58:65:38:c2:d2:b6:43:4c:ac:
d1:94:05:78:0e:50:d5:54:e1:37:c0:64:68:91:ee:
72:a2:26:88:ca:8b:37:cd:df:7f:b9:b0:c7:12:42:
4c:b3:f0:a1:d5:dd:58:0e:c2:18:7c:02:9b:32:df:
01:b7:5c:b7:52:33:f3:5f:42:67:44:a5:ed:88:27:
c5:d1:31:17:e8:39:92:56:9d:06:5d:81:25:6a:1a:
99:7a:6b:f9:67:43:e4:07:2a:d2:ee:c3:90:5e:4e:
6f:f1:ab:ab:e0:56:ac:eb:08:54:8a:14:bc:25:00:
08:11:35:df:00:94:ff:e6:9a:14:d0:ab:07:1a:9c:
39:dc:0c:11:34:4f:2a:d1:70:ae:91:46:27:e4:32:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:9E:5E:6B:F0:1E:C8:31:29:FD:E7:F5:B8:4E:F3:3D:A1:93:42
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b4:e4:c6:20:01:f4:76:7e:b2:7e:fb:b8:0f:b9:81:83:d7:
09:48:e6:61:16:00:ef:a6:49:23:98:2d:6a:e9:02:47:47:82:
a2:e6:e3:4f:51:1c:cf:93:a4:90:f0:7e:bb:e9:1a:b9:dd:91:
87:ec:93:37:22:ab:9d:0a:17:5f:c9:3c:fc:8f:1f:90:60:4d:
d0:53:ec:35:1a:6d:79:a6:d7:a5:9a:49:c2:7a:c9:d6:0a:d9:
6f:8c:83:8b:e7:19:6a:01:9f:36:b3:e3:6a:b5:81:d0:82:b0:
8e:e5:51:97:f6:0b:38:f0:39:06:81:76:62:30:74:ea:26:1b:
d0:97:32:05:fa:1c:6d:f9:06:27:38:44:c7:0b:df:9e:71:9d:
a6:16:a3:52:f9:23:96:5c:3c:b0:3e:58:93:b7:df:5a:ad:47:
81:4b:f5:51:a9:70:d6:40:4d:2f:b7:17:c0:dc:8d:8a:f2:4e:
2b:81:be:27:64:a7:6b:17:0e:72:36:59:47:c5:cf:35:b3:d1:
96:ef:cc:c3:d9:07:cc:d0:28:a8:f7:41:b5:08:8d:55:b1:90:
51:af:08:df:a3:c9:a6:af:7a:47:b2:cf:16:28:75:14:bf:d1:
45:f4:cc:a3:c3:74:00:64:0d:9f:62:06:c2:f5:72:24:c0:62:
aa:57:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:49:46 2025 by rpki-client