Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier: 89CYTUz7OunYxEeyHQ7QPfdM/TAhtocyWl2eNH+ogYU=
Subject key identifier: C0:A4:4A:52:C6:A3:00:0F:09:3E:73:27:E6:7F:C0:0D:47:4F:AE:BA
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 0196BFDCE9E7B335C2D2FAA2315C46E9AC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 15:00:48 +0000
Manifest this update: Sun 11 May 2025 15:00:48 +0000
Manifest next update: Mon 12 May 2025 15:00:48 +0000
Files and hashes: 1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: f8x7Tj6kFzvBkHFp6jXmAbkN+ETBayVzF2lBLbHkdL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:e9:e7:b3:35:c2:d2:fa:a2:31:5c:46:e9:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: May 11 15:00:48 2025 GMT
Not After : May 12 15:00:48 2025 GMT
Subject: CN=c0a44a52c6a3000f093e7327e67fc00d474faeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:b8:c9:20:1b:5b:14:b3:b9:13:6a:96:1d:
88:74:83:78:80:b4:4c:c8:3a:87:31:d6:d3:49:7d:
ae:24:0a:00:8e:8c:17:11:8c:fa:e7:d0:27:31:70:
1b:86:e5:93:29:dc:24:22:42:9f:d5:68:f6:5f:f8:
98:3c:2c:24:07:fb:2f:6b:47:50:1c:37:86:d2:7b:
28:f9:71:af:ff:b7:49:73:53:91:d3:55:bd:02:06:
14:e4:ee:4b:92:f1:89:86:56:55:ad:84:0e:c2:4d:
81:eb:5b:b7:70:e6:64:ad:2f:cb:1e:cb:b1:1d:54:
94:d5:1c:25:eb:e1:27:bc:d7:6a:96:91:cb:bb:69:
ef:b3:49:69:59:85:e8:82:fc:8b:20:62:49:a4:73:
14:57:d3:92:e0:48:99:c8:ca:9f:1b:c5:25:6a:55:
59:7d:d9:a4:fc:e6:04:cf:d1:63:30:e0:af:6e:ee:
89:08:12:2b:aa:46:63:f5:27:52:65:6e:83:28:cb:
72:d6:e0:fa:82:0f:31:88:d6:78:85:9b:5a:b4:a7:
bb:6e:bb:e3:c1:c5:d8:bb:6a:5e:29:3f:1a:fb:cb:
b2:ff:00:7a:74:23:80:3b:f3:3e:7b:1f:5b:d6:b2:
36:4c:35:b0:11:b2:af:0c:4c:62:9a:98:80:fe:b6:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:4A:52:C6:A3:00:0F:09:3E:73:27:E6:7F:C0:0D:47:4F:AE:BA
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7e:c4:f0:4e:aa:d9:d5:bb:32:89:ef:be:80:38:2d:38:e2:
9f:64:43:f5:5f:6f:c8:c1:10:fe:6c:ab:92:f6:ec:bd:4f:d8:
39:7b:1f:5e:de:50:86:29:f1:86:d4:40:7b:b4:1a:14:11:6a:
34:8a:a5:b6:5a:43:6f:7b:02:42:99:41:f5:c3:e2:fb:78:7b:
c9:c0:ab:94:b3:aa:1d:b8:ad:64:b2:48:7d:ac:0c:5f:8c:1b:
50:4b:6f:e7:2c:c1:d7:7d:33:72:a5:0b:e3:ec:8b:25:3b:a3:
ab:80:09:56:55:83:e9:6a:a8:2b:19:6f:f3:35:02:da:2b:2b:
85:fc:58:ec:fe:3d:e1:89:8c:ac:97:c9:2d:ff:9c:7c:cd:c2:
1c:58:19:aa:c5:71:03:06:76:69:3b:dd:fb:10:ce:51:c3:a9:
ae:86:af:a8:20:24:a9:4f:a1:bb:48:37:2d:28:9b:13:35:3d:
61:e3:47:01:88:97:ee:fa:e5:08:e9:99:59:9a:3a:21:1a:35:
b5:60:8a:fb:9b:23:69:ae:a6:f1:d3:b3:d5:e2:0d:8f:a9:75:
ad:63:26:44:32:36:3c:3c:1e:ba:62:7f:78:f1:d1:b0:af:d9:
88:91:99:20:86:ea:eb:72:a8:81:44:53:70:c2:63:92:26:d9:
01:fb:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:58:39 2025 by rpki-client