Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: LIn+IRkhBqNRA8B7M1JNS/mkyrwTSwLpx2itlznsWS0=
Subject key identifier: B4:CA:44:E2:F7:96:48:6B:F5:37:79:86:64:F9:60:63:71:C7:B9:EF
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 0197B6A1AD5CC9F14F40F1D2EC09365550CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 0F91
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: mUxPg4tg7Ellj8k/N7AmgX6LlIz/LY4f4WLDVPDBng4=)
2: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (hash: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ad:5c:c9:f1:4f:40:f1:d2:ec:09:36:55:50:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=b4ca44e2f796486bf537798664f9606371c7b9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:8e:00:47:e2:51:ad:d0:38:1a:f9:10:8c:
53:57:88:c5:f3:dc:d3:e0:0f:a2:5f:87:92:e6:24:
eb:9c:36:38:99:d0:3c:70:48:00:77:90:df:33:a2:
c0:67:0e:5e:7e:01:7b:dd:1b:3b:35:d0:d8:80:b6:
11:67:d4:19:19:34:7b:3a:64:38:90:a9:7b:a9:13:
f5:b8:83:a6:81:c3:10:9b:0d:2f:61:ef:dc:99:2b:
2d:a9:f9:9b:2f:cb:e2:b6:4a:b5:a8:42:5f:08:83:
9f:9c:c3:13:eb:44:51:a0:41:84:a8:10:e8:8d:ca:
96:80:d9:95:91:72:d3:46:62:22:8b:36:dd:10:10:
63:96:c2:ce:67:11:fe:e6:3a:17:4e:57:69:9d:df:
46:eb:74:78:3e:16:c9:eb:a1:49:ba:83:a7:57:7b:
24:04:db:66:27:67:f6:d9:3b:85:1c:48:bc:c6:79:
8e:f0:0e:1e:3a:f9:08:fb:a9:83:9e:d0:49:a5:50:
3a:a7:85:0d:10:d5:6a:5a:07:68:22:27:a6:06:91:
ab:39:ae:e2:4e:a8:e1:be:bc:f5:59:06:d8:95:25:
2e:ad:13:f7:e9:30:24:70:e5:55:24:fa:ab:40:5f:
35:d0:25:0c:13:f1:19:45:c4:39:f7:4a:62:50:f4:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:44:E2:F7:96:48:6B:F5:37:79:86:64:F9:60:63:71:C7:B9:EF
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:59:0f:a3:d9:96:6c:a3:53:48:30:97:ce:c6:27:ac:d8:ed:
0c:53:5a:46:4f:75:ae:2d:9b:f3:92:66:b1:2f:a2:6d:4c:7f:
36:cd:41:8a:f3:8e:92:be:f6:26:a9:32:ad:63:a8:60:eb:0f:
a0:d4:77:31:ba:29:10:6e:67:07:38:07:bd:fc:30:c4:4c:fe:
b2:27:4f:75:55:e0:42:f6:c1:0a:0b:70:84:eb:70:f7:90:d6:
a8:f7:b7:34:30:37:3e:f5:1a:13:45:0f:93:b3:fd:27:16:ba:
6a:83:47:b9:98:0c:a8:55:ee:d0:d9:25:32:d8:0b:4a:7a:a9:
2e:01:54:6b:81:ad:d4:d2:4c:19:f0:f4:1e:b9:ca:58:a6:5d:
9a:0a:11:2a:88:4a:18:30:eb:b8:79:2e:41:62:3b:1f:ec:e5:
b8:e2:30:f6:23:a1:58:49:4f:28:c5:07:7d:90:7c:ec:7f:9e:
02:17:e9:44:b9:34:3a:88:4b:66:18:69:7a:fa:43:46:fa:85:
2c:27:d1:f3:9c:06:c3:a4:71:26:45:c8:49:b5:d4:96:bf:77:
80:3a:35:2a:92:92:46:7d:51:c2:38:e4:df:bb:32:b8:7e:38:
d8:68:2a:ce:6b:d4:36:36:3e:a4:31:c0:55:e5:fd:3a:bc:b8:
d5:4e:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:01 2025 by rpki-client