Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: Bmu6RD3kzHvlmuHFCywhFdz8G0aChQcgD6z1He4D3kQ=
Subject key identifier: 85:81:95:BC:45:49:EB:76:7D:E7:54:7B:C3:96:1B:48:41:01:73:CD
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 0197B88F38BF97805A049F0F9202701F4A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0C95
Signing time: Sat 28 Jun 2025 22:01:23 +0000
Manifest this update: Sat 28 Jun 2025 22:01:23 +0000
Manifest next update: Sun 29 Jun 2025 22:01:23 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: P+PNauu+hXd2DM2i5tYvZieUJ5NOsovTeYjrs7BQY8o=)
2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:38:bf:97:80:5a:04:9f:0f:92:02:70:1f:4a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Jun 28 22:01:23 2025 GMT
Not After : Jun 29 22:01:23 2025 GMT
Subject: CN=858195bc4549eb767de7547bc3961b48410173cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:21:1c:c6:d2:34:31:a0:02:c5:e8:6f:f0:
71:76:b9:fa:16:d4:9f:a1:6d:82:8b:44:6b:a4:4f:
a6:89:43:ef:ab:95:06:af:5b:46:22:ed:45:26:87:
b6:98:ba:58:19:f1:11:5e:2f:18:ab:6b:35:9f:d1:
b1:d5:c6:49:f3:18:20:e6:71:ac:b1:86:51:a9:f0:
a3:8d:72:45:0f:95:82:b6:c2:0a:6e:27:05:7c:c7:
c5:42:20:be:7b:9a:bc:bb:98:05:62:37:a2:0f:24:
f3:df:5a:52:27:0a:64:99:e9:a1:b1:67:fa:07:18:
e4:3c:4b:39:07:d5:97:63:50:9d:13:b8:cd:24:c6:
83:96:b9:9b:16:69:58:81:d9:9c:61:5e:9f:04:87:
37:14:90:74:e7:c4:89:fd:c8:6b:ea:90:54:ee:39:
46:e8:de:93:29:81:29:75:3c:3f:54:99:13:6a:9a:
50:fc:17:4c:ce:4b:8d:1a:46:e7:e9:ba:fa:ec:5f:
65:b3:54:46:16:b3:cc:1e:21:c1:29:2a:f5:ae:67:
4e:01:4a:c3:4d:f0:f6:6a:1e:cf:26:b8:55:e9:5d:
16:cf:99:31:1c:f2:9a:3b:fb:0d:bf:8a:a6:14:dd:
d8:91:19:4f:2c:64:82:7f:39:f2:69:6a:c5:87:2a:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:81:95:BC:45:49:EB:76:7D:E7:54:7B:C3:96:1B:48:41:01:73:CD
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:f0:20:dc:95:fb:86:d9:f9:9e:c0:67:b1:e4:f7:88:fd:
10:2b:b5:09:ad:50:b8:21:e8:f1:89:fc:c9:c9:bd:66:4b:92:
7f:b8:57:2e:a3:6d:04:32:84:4d:0c:13:67:a1:9d:c6:b0:88:
e9:b8:64:fb:e4:67:d8:b6:f2:83:27:8c:89:fc:3d:7f:d5:69:
e8:7d:b6:fb:7c:ee:c1:80:e0:e8:ea:59:30:2d:02:f6:70:58:
05:f3:f0:cb:47:c4:bd:79:70:1c:2f:5f:7f:ea:15:08:07:6d:
59:83:ca:78:ac:ca:03:5a:c0:21:00:a1:9d:8d:e4:f4:f4:4a:
00:0a:66:fa:ae:87:a7:e3:43:d3:9b:26:a7:72:cd:c6:f1:15:
c7:40:60:6f:31:f8:4f:f7:eb:74:b4:93:f5:be:74:f7:9e:93:
c4:1f:15:33:ca:ab:f2:0d:d6:41:43:bb:0d:6c:99:28:f0:bc:
88:2e:75:6f:c5:f3:78:20:58:ca:bf:f7:97:d7:7e:1e:49:33:
f1:2e:83:ab:dd:9b:2e:cc:86:6d:f2:fa:e2:1b:f1:21:c9:91:
73:39:c8:25:77:55:be:60:c6:a1:97:21:2e:d1:e6:77:89:4e:
6d:e0:b2:aa:87:bf:19:45:5e:ef:03:b7:f2:32:b5:0d:5c:b0:
ba:d1:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:02:58 2025 by rpki-client