Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File: obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier: nbasbn0L8svjDZpSKUApLRN1FsbETuT1Je5WqTwQuP0=
Subject key identifier: 72:BA:F5:15:5E:35:78:B9:B5:14:FE:DC:C3:5A:E3:BF:BA:B2:7F:7B
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer: /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial: 0196A08873F6BBB398AF88E4FCFB1613F1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 13:00:19 +0000
Manifest this update: Mon 05 May 2025 13:00:19 +0000
Manifest next update: Tue 06 May 2025 13:00:19 +0000
Files and hashes: 1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: leW0lRJHUl05FtJo3n38n/w/OeNC9whncEZweGOiCBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:73:f6:bb:b3:98:af:88:e4:fc:fb:16:13:f1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Validity
Not Before: May 5 13:00:19 2025 GMT
Not After : May 6 13:00:19 2025 GMT
Subject: CN=72baf5155e3578b9b514fedcc35ae3bfbab27f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:95:58:fe:42:e5:1f:e2:81:95:ab:77:44:
c2:e9:ae:51:a5:45:fa:fe:4d:33:f4:7d:4e:74:f3:
e7:06:61:64:45:68:9c:2c:e2:b4:51:a1:7f:db:46:
ab:c2:07:0b:e6:6a:6e:7b:53:bd:21:4d:e4:a5:f9:
d4:28:66:b3:bb:4b:70:25:98:a5:5f:b7:24:ec:20:
7a:d9:f5:f5:ac:b2:84:8c:d1:b1:cb:65:ea:d1:7f:
36:ae:49:c9:fb:66:55:e7:91:e0:c2:c2:5e:ec:89:
9b:3b:0f:d4:6e:a8:9f:b4:93:51:0a:e1:14:b5:12:
81:a3:1a:f2:12:ef:02:52:ea:3d:81:ef:da:0d:6f:
79:a9:48:d7:a0:e7:0f:ab:c3:41:c8:f1:3a:c6:ae:
08:3f:76:b9:51:3f:d3:27:79:2d:b7:ef:38:40:80:
39:57:a7:fb:db:20:3d:c2:e2:be:83:d1:5f:dc:62:
19:9c:e4:4c:62:1f:8f:b1:3b:a8:94:af:65:3d:78:
2a:d3:ef:69:81:2c:b5:b6:93:68:e4:b3:39:86:28:
c1:df:8b:d7:2b:3a:48:0b:d1:4d:da:56:c3:da:37:
ae:05:bd:66:a5:f1:99:bb:dc:ca:78:1f:25:01:32:
be:6a:1c:9c:4f:cf:a0:dd:b4:59:d5:ed:7e:18:6d:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:F5:15:5E:35:78:B9:B5:14:FE:DC:C3:5A:E3:BF:BA:B2:7F:7B
X509v3 Authority Key Identifier:
keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:10:ae:7c:33:db:b4:4b:ca:16:d1:ac:8d:e8:aa:d5:9a:43:
fa:4d:cb:01:68:bb:91:7d:3a:4b:f9:a6:e7:19:65:d1:0a:71:
a3:8b:0e:2b:20:c7:46:36:24:c9:d2:41:16:03:0f:73:e4:96:
31:d2:e7:16:e9:32:91:3f:7f:fb:3c:f8:6e:e4:b5:07:64:f1:
24:45:c7:58:71:e5:1f:34:d0:91:76:ed:eb:3e:7e:ec:06:0f:
14:d0:cd:a7:62:4d:fe:1a:77:85:25:c7:e2:6e:8d:ca:91:af:
80:d2:70:a0:af:6e:b3:c9:cf:09:b3:49:98:7c:9c:5d:cc:bd:
da:06:7c:5d:14:82:1d:61:86:62:28:f5:ea:23:46:54:88:48:
60:2c:d5:24:d8:aa:cc:86:56:bc:2a:03:42:95:15:85:6b:22:
c9:12:58:e8:7e:7e:06:a0:27:d0:97:f4:88:b7:63:2f:49:d2:
db:18:11:26:cf:a8:48:0d:99:b4:55:71:c0:0c:eb:78:8c:0b:
bc:39:68:7f:b2:45:eb:15:df:91:97:d3:51:56:46:1c:4b:5c:
35:d9:59:ef:4f:7d:02:8a:3b:f7:a2:9e:ca:ee:94:9a:df:5b:
f1:42:f3:71:4e:b8:1d:87:18:07:5a:be:c4:e9:b0:41:7f:7f:
e8:f4:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:58:10 2025 by rpki-client