Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: OhCQO+6hTlfXXAVpvzXig+HzbQVvmtUImJto6sJtKZY=
Subject key identifier: 64:05:A1:4B:52:DE:BB:25:6C:A3:77:16:8A:DA:92:B2:7B:29:9C:C5
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 0196CB73276AD9644A4129AE64F044A48840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1380
Signing time: Tue 13 May 2025 21:00:43 +0000
Manifest this update: Tue 13 May 2025 21:00:43 +0000
Manifest next update: Wed 14 May 2025 21:00:43 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: 3h/AQjxqWNL5YCznm6E3xwj3JZRwpiEqajEGzjsCBJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:27:6a:d9:64:4a:41:29:ae:64:f0:44:a4:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: May 13 21:00:43 2025 GMT
Not After : May 14 21:00:43 2025 GMT
Subject: CN=6405a14b52debb256ca377168ada92b27b299cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:87:8e:bf:8e:f5:24:23:0f:eb:14:7c:42:
e0:35:05:db:cd:25:4a:d4:05:28:84:85:f5:f1:89:
fd:21:84:83:57:4e:a2:97:61:b2:78:5e:68:ad:d0:
45:b5:ea:b1:58:c8:4e:2c:24:07:ca:26:f7:29:12:
92:6c:c7:a6:7c:39:92:1d:85:d1:65:8b:af:74:c7:
ff:0b:b2:5f:db:04:37:46:77:ac:c4:de:de:74:b1:
95:ce:75:30:a1:ba:f2:dd:e0:fb:e3:f1:eb:22:fb:
a0:45:52:ad:ee:73:94:a0:63:9e:57:e5:19:c8:cd:
08:59:fd:11:1a:67:ee:fe:e4:29:7f:0a:a8:81:53:
2e:63:4d:23:f8:b3:d5:e2:10:69:9b:4c:df:d7:ff:
e4:37:92:b5:fb:49:ea:1e:0d:ec:fb:d8:49:df:53:
4c:50:af:c6:67:48:00:ce:d8:71:2a:be:5c:5b:09:
cb:34:39:13:85:ef:29:34:0f:38:5f:00:80:6d:92:
b0:fc:12:0a:90:a8:0b:47:9a:72:4a:64:60:c0:d2:
fc:e5:27:5f:0f:ea:f9:9f:46:13:c0:69:0b:69:44:
b2:ff:f7:b0:02:12:32:f3:1e:d2:14:30:ba:b4:8b:
b2:44:5c:d6:ab:cb:d0:3b:9e:55:26:39:c1:77:14:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:A1:4B:52:DE:BB:25:6C:A3:77:16:8A:DA:92:B2:7B:29:9C:C5
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:88:18:06:23:b0:d0:43:65:04:e5:ec:b1:57:12:df:e7:8c:
cb:6f:03:02:34:ac:c6:6f:da:21:bd:d5:d1:c1:6d:49:b7:d4:
d3:2d:6c:47:ad:b7:65:ef:2a:76:e0:55:cd:2d:c2:d2:43:78:
7a:2c:a8:44:cb:61:e9:58:ac:c8:cd:9d:f8:60:1b:78:93:39:
77:e7:b6:60:da:2c:15:d0:d0:16:f4:cc:5f:ba:83:78:c2:be:
1c:72:43:6b:b4:aa:1b:53:05:a9:f4:ff:f5:85:43:2c:aa:4d:
55:66:9d:4b:4b:ff:07:90:d0:f2:ba:3a:af:7b:35:95:71:11:
4e:b8:1f:a0:4d:89:ef:06:dc:e4:98:ce:c1:ee:34:83:3e:b7:
1a:8f:df:1d:cc:fb:ce:69:95:cb:c9:70:c1:12:5b:a4:8c:67:
b9:02:d0:84:6b:34:3e:bd:50:90:cc:0f:9f:03:f3:62:18:4d:
f0:a8:7e:28:ec:f1:24:9f:7d:bc:5c:f9:40:cd:ff:0a:cb:d5:
15:cf:b7:aa:97:8b:93:3f:4a:63:7d:f5:8c:0a:a0:54:cc:0f:
09:c6:dd:f1:56:a0:2a:21:43:99:86:8b:25:72:5c:48:11:b7:
94:24:1b:59:a5:07:d1:86:0a:88:1f:d0:0f:a3:24:21:0d:31:
02:14:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:45:09 2025 by rpki-client