Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: PWyFYfcPmFgnis1KKjE+vjlWxCDdswPBDu1T20UjSbk=
Subject key identifier: 5D:F3:BC:D0:4D:EF:B7:96:A1:03:D8:BE:FF:BE:01:28:47:B5:83:77
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 0196CB3C23706F96C08AD2C33AD5C849548F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 153D
Signing time: Tue 13 May 2025 20:00:38 +0000
Manifest this update: Tue 13 May 2025 20:00:38 +0000
Manifest next update: Wed 14 May 2025 20:00:38 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: GKuCeBwDPf8Bxxd2B2mTzVu2fl9kqkB8V8pXWNEiU9g=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:23:70:6f:96:c0:8a:d2:c3:3a:d5:c8:49:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: May 13 20:00:38 2025 GMT
Not After : May 14 20:00:38 2025 GMT
Subject: CN=5df3bcd04defb796a103d8beffbe012847b58377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:8a:f3:a1:f1:0d:bc:f2:f6:1a:a3:1d:90:
55:e5:67:c8:5a:23:34:c2:e6:29:89:b1:7f:e8:22:
73:d8:56:72:49:92:94:20:6f:f5:28:47:ba:5b:ad:
54:bd:8b:47:19:81:63:61:00:72:6a:bf:12:37:43:
ce:b6:90:f1:3f:7a:96:4b:00:65:66:f5:93:a7:ea:
a1:8c:ea:7f:29:43:a9:2f:8f:47:59:1d:34:82:cb:
51:b7:0b:68:75:b1:01:3a:55:f7:72:37:e7:bb:dc:
a2:4f:6d:d3:74:ce:f6:f8:b5:f2:06:d8:38:3e:c1:
38:e0:1e:51:f8:3d:f6:b3:1f:54:60:08:b9:bb:d2:
14:6b:6d:3e:1a:0f:27:9f:17:ee:09:2d:51:00:63:
42:31:ee:23:61:9c:12:77:f7:45:df:77:22:84:16:
8a:6d:c2:23:e5:cd:2e:b3:d1:5c:75:76:65:a4:b7:
3d:f9:1e:1b:b9:7c:01:21:73:e2:2f:80:fc:4d:0b:
20:0b:56:3c:11:fa:4c:51:86:86:78:ee:0c:9e:3c:
cb:dd:8d:3b:b6:61:7b:07:23:ec:fa:f6:3f:ac:e1:
1e:b6:aa:9e:7c:59:52:fd:d4:bd:21:c0:30:b7:17:
80:30:65:e0:ec:f1:ce:66:d4:53:ff:b5:56:7d:9d:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:BC:D0:4D:EF:B7:96:A1:03:D8:BE:FF:BE:01:28:47:B5:83:77
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8f:5f:a8:dd:14:75:e3:e8:ec:22:55:73:e5:cd:95:a6:d2:
91:39:28:17:f8:e2:74:6f:b8:db:d1:bc:2d:ec:5c:ec:67:6a:
f6:f1:82:96:ee:48:9a:78:06:bc:49:f3:3d:88:c3:32:c0:6f:
e6:58:f0:8e:5e:e4:1c:e1:04:7a:7f:7f:90:b9:42:9b:7e:73:
8c:28:9c:13:0b:84:12:b6:22:63:0e:f2:03:7f:6a:66:a5:03:
99:c3:20:49:83:5b:55:36:77:da:7d:d4:36:24:a7:41:62:99:
00:82:ac:cf:7c:88:91:fc:fc:7c:76:35:42:51:a8:21:a2:e2:
5d:1e:a5:14:0a:d5:d9:ae:49:79:13:23:43:ec:eb:e7:09:70:
e9:e7:dc:89:08:f3:8d:9e:38:cf:77:09:0b:30:50:eb:a8:76:
06:67:8d:9c:fe:e8:2b:bf:98:c4:68:45:c9:49:82:14:26:76:
c4:4e:f7:aa:03:cc:5f:85:e8:5e:2b:34:d1:ac:79:cc:09:08:
83:4e:cc:c6:c3:51:b1:ba:70:b8:c9:67:25:59:2c:50:d9:cf:
4c:ee:65:f4:aa:1a:60:3b:2d:4b:c9:a1:fb:d0:81:df:df:2b:
2c:a3:65:84:be:06:47:bb:9e:cd:4d:ce:18:68:67:db:e0:89:
99:66:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:32:03 2025 by rpki-client