Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: 8cK8hCKeLZrSogImR821Ev0AdqITnsHOOb+vN/IO4PE=
Subject key identifier: 39:22:15:AC:A0:F3:CB:70:EF:E1:83:CC:D7:EC:05:16:2F:6B:21:CC
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 0196A61CC1E78C53B937E11B28263122B971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0C07
Signing time: Tue 06 May 2025 15:00:24 +0000
Manifest this update: Tue 06 May 2025 15:00:24 +0000
Manifest next update: Wed 07 May 2025 15:00:24 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: waIClIXbJGjaldZKelQ6vxlV6MaStJErCeOz3DfkNng=)
2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:c1:e7:8c:53:b9:37:e1:1b:28:26:31:22:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: May 6 15:00:24 2025 GMT
Not After : May 7 15:00:24 2025 GMT
Subject: CN=392215aca0f3cb70efe183ccd7ec05162f6b21cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:53:75:07:d7:eb:bd:63:00:ff:9f:d1:8d:
b6:c2:cb:57:8e:86:b9:94:2c:6d:b0:ba:72:2f:2c:
f5:5d:16:3d:6c:59:14:0f:e9:96:11:a0:4a:9e:6b:
a3:43:b3:a6:37:72:a5:b5:54:4d:9b:ff:c1:5f:58:
36:d0:47:c4:50:6b:2a:d8:bb:8e:7f:14:a3:d1:48:
49:5d:8d:7d:18:58:49:77:bc:ad:b8:86:0b:ab:3e:
ba:9c:cd:a2:24:d1:17:dc:39:f3:0f:e4:ac:1c:07:
4c:ed:05:91:a6:77:6e:c3:26:23:40:43:d6:12:63:
e8:4f:59:23:86:a3:4e:d8:aa:73:2b:56:a5:b8:56:
e1:e7:fe:35:f5:3f:d5:da:fa:ab:2a:8a:55:25:c8:
1c:ff:f9:c3:8c:ae:12:fa:44:49:e9:cf:e7:47:d8:
72:59:e9:bc:f8:ab:74:66:dc:e8:44:10:4f:86:be:
36:1f:e1:38:26:ab:16:c9:3f:b8:7d:dc:37:78:03:
49:c4:60:f7:6c:ab:ff:ff:47:42:ce:ac:ea:c3:90:
21:52:38:81:18:e7:3b:2e:c9:42:d6:36:c0:dc:4d:
21:7c:41:46:e0:be:12:28:03:0a:25:92:86:35:01:
0d:29:6a:9d:bf:c6:1e:b0:63:7e:3d:84:f8:92:a6:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:15:AC:A0:F3:CB:70:EF:E1:83:CC:D7:EC:05:16:2F:6B:21:CC
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d7:f6:da:09:2c:41:cd:c1:fe:01:d2:47:8c:25:6b:6a:a6:
49:d9:0e:37:7c:5b:fe:76:f5:6f:50:13:49:40:81:c4:f5:92:
f5:8a:ad:a6:db:f7:26:9a:46:3b:55:68:e2:41:6c:86:b2:b7:
0e:8a:37:81:2d:e4:17:46:93:65:8c:f6:bb:88:08:61:15:76:
e0:3a:04:db:9f:aa:0e:b9:a4:5e:a8:82:ef:70:dd:6e:ea:5b:
f6:89:ec:57:5d:d4:9f:50:78:ef:49:bb:e6:46:e5:a3:dd:c1:
06:05:19:82:7d:4e:73:7f:45:9e:21:95:6e:c5:4c:05:3b:58:
35:77:67:e9:80:83:48:29:48:97:0f:ff:9b:8a:be:52:22:c7:
93:a3:c0:69:09:9a:e3:34:2f:1d:2c:1e:a5:cb:5d:a1:d4:53:
e4:97:b8:1d:35:e9:09:b5:17:a7:db:4a:39:4a:04:24:73:2e:
e4:61:e5:2b:04:35:f8:02:58:2a:92:d3:98:7a:d7:fc:65:3d:
df:a0:d2:74:b4:a5:8c:92:92:2a:7d:dc:19:a8:1e:5e:7b:bd:
fb:ab:cc:d5:e9:bf:55:6a:74:ec:3d:46:f9:6d:07:76:d2:cd:
ae:43:fe:95:0d:43:1a:57:0b:d1:22:90:57:40:3c:2f:03:f5:
53:08:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:28:44 2025 by rpki-client