Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: nKlaOnW6d8Hn7CV1CvOZ2MoEKH8MCMpV7gJY6m1QkTw=
Subject key identifier: 2B:CE:35:06:BD:57:E8:4D:88:B3:F6:5A:E8:E0:A1:0A:D2:CE:2D:6C
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 0197CC4CC3DAE6529F13E1B8B857082F819B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1405
Signing time: Wed 02 Jul 2025 18:01:12 +0000
Manifest this update: Wed 02 Jul 2025 18:01:12 +0000
Manifest next update: Thu 03 Jul 2025 18:01:12 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: f8dKL/TjwRJTxoQcJEp7D9J2zo5dwo2e2twbpW/A8OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:c3:da:e6:52:9f:13:e1:b8:b8:57:08:2f:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Jul 2 18:01:12 2025 GMT
Not After : Jul 3 18:01:12 2025 GMT
Subject: CN=2bce3506bd57e84d88b3f65ae8e0a10ad2ce2d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:68:42:81:93:64:6a:92:c9:d0:5c:b3:9c:
8d:c2:86:9c:c9:4a:bb:32:42:35:21:e0:70:92:bf:
14:62:82:b2:8a:ff:99:a9:c6:d2:1c:1c:7f:f3:d9:
6c:be:02:b1:1d:7e:37:d6:53:f0:6f:58:6e:7e:74:
e0:7a:42:b4:58:0e:10:35:17:8d:c3:d9:2e:db:1c:
ec:23:59:78:5b:ba:9b:8d:5d:11:73:68:b9:12:07:
9b:24:f9:e1:ab:09:ae:d2:d6:96:ac:50:a5:40:8a:
b5:b7:0d:4b:6e:1c:0e:3b:37:4a:f2:8b:c9:a1:b4:
d1:63:0d:f9:af:35:e3:44:62:96:0b:23:c3:02:66:
c3:ac:46:8f:00:40:4c:29:1c:21:4e:46:7c:32:5e:
bd:a7:54:42:0f:77:55:32:1b:ec:26:72:1e:6a:91:
8c:e5:21:e0:af:60:1e:09:e0:2b:7f:b8:37:8a:64:
67:09:d8:22:9b:d2:01:f2:a7:2f:75:91:5b:15:0d:
b9:4f:34:1f:5f:a5:29:7e:68:1b:68:b0:04:dd:79:
9f:47:79:ce:c8:49:46:b3:02:de:0d:9c:85:53:8c:
45:88:cd:51:b7:6b:19:0f:be:61:58:2f:f0:e1:a2:
a6:25:58:e3:a9:5b:d8:62:2b:6e:5d:0a:10:ff:f2:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CE:35:06:BD:57:E8:4D:88:B3:F6:5A:E8:E0:A1:0A:D2:CE:2D:6C
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fd:58:6b:d2:15:1e:3f:65:bc:e4:d6:29:8a:ef:0a:2e:9c:
66:06:b3:08:5e:d4:2f:a5:2f:9a:8b:92:e9:07:59:42:91:a1:
dd:4d:1f:41:76:a9:9b:6f:05:35:1a:77:93:c8:ce:8d:68:72:
13:30:f9:34:a9:89:40:30:25:0f:98:dd:d5:44:e6:e1:9a:60:
7f:f5:a8:f7:d1:cf:2b:a9:f9:80:9d:f2:a6:dd:69:38:fd:a8:
d4:dd:d7:6f:68:3d:85:64:e1:f1:ae:ca:9c:6a:4a:7f:8f:5b:
61:7f:34:09:9b:87:4c:35:7b:97:c4:66:a1:77:7d:00:59:e3:
f3:8b:45:98:9f:fa:5b:c5:e2:79:ec:d8:90:f8:7f:73:a1:23:
08:c9:3d:5a:9a:93:52:8a:4b:4a:32:ce:ba:03:18:51:cd:71:
01:e0:04:b8:a9:f3:e2:3f:a9:5c:9a:8c:07:20:88:67:9d:05:
c7:1b:17:bc:9d:fe:f1:b6:c4:16:1e:89:f2:d0:b6:31:95:f1:
07:7c:22:45:29:c1:29:af:2d:cb:16:e7:7b:2c:04:a1:8c:56:
35:f3:cc:65:73:16:1f:15:74:c2:cf:82:7a:8f:dc:95:28:7c:
93:37:a6:72:29:da:8c:a7:79:d4:e1:4d:ec:08:24:15:18:9c:
63:d8:29:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMTMPa5lKfE+G4uFcIL4GbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjRkZDgzZmM1ZWNkMjEwZjRmNjg0ZmI2YmY0MGZiMzE2
MGRiMjEwHhcNMjUwNzAyMTgwMTEyWhcNMjUwNzAzMTgwMTEyWjAzMTEwLwYDVQQD
EygyYmNlMzUwNmJkNTdlODRkODhiM2Y2NWFlOGUwYTEwYWQyY2UyZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFloQoGTZGqSydBcs5yNwoacyUq7
MkI1IeBwkr8UYoKyiv+ZqcbSHBx/89lsvgKxHX431lPwb1hufnTgekK0WA4QNReN
w9ku2xzsI1l4W7qbjV0Rc2i5EgebJPnhqwmu0taWrFClQIq1tw1LbhwOOzdK8ovJ
obTRYw35rzXjRGKWCyPDAmbDrEaPAEBMKRwhTkZ8Ml69p1RCD3dVMhvsJnIeapGM
5SHgr2AeCeArf7g3imRnCdgim9IB8qcvdZFbFQ25TzQfX6UpfmgbaLAE3XmfR3nO
yElGswLeDZyFU4xFiM1Rt2sZD75hWC/w4aKmJVjjqVvYYituXQoQ//J48QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvONQa9V+hNiLP2WujgoQrSzi1sMB8GA1UdIwQY
MBaAFKG03YP8Xs0hD09oT7a/QPsxYNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgt
ZmIxODZiOTQzMzRmLzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNDZmOGEtZTA2OC00OGNhLWEzODgtZmIxODZiOTQzMzRm
LzEvb2JUZGdfeGV6U0VQVDJoUHRyOUEtekZnMnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP1Ya9IV
Hj9lvOTWKYrvCi6cZgazCF7UL6UvmouS6QdZQpGh3U0fQXapm28FNRp3k8jOjWhy
EzD5NKmJQDAlD5jd1UTm4Zpgf/Wo99HPK6n5gJ3ypt1pOP2o1N3Xb2g9hWTh8a7K
nGpKf49bYX80CZuHTDV7l8RmoXd9AFnj84tFmJ/6W8XieezYkPh/c6EjCMk9WpqT
UopLSjLOugMYUc1xAeAEuKnz4j+pXJqMByCIZ50FxxsXvJ3+8bbEFh6J8tC2MZXx
B3wiRSnBKa8tyxbneywEoYxWNfPMZXMWHxV0ws+Ceo/clSh8kzemcinajKd51OFN
7AgkFRicY9gpMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:30:03 2025 by rpki-client