Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: AZ6oO3ebdvAwZymoxTZe01vschyduJE3QBGSc9WFIss=
Subject key identifier: 43:E4:93:9D:22:78:D7:8B:88:8C:D0:2E:9E:58:87:36:2C:08:49:89
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 0196C45E03FD5F35922A8AD27EF9F95F3B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 12:00:17 +0000
Manifest this update: Mon 12 May 2025 12:00:17 +0000
Manifest next update: Tue 13 May 2025 12:00:17 +0000
Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: RUcYxNbr50MjDrvD4PuYx9UKxZz/NdZWc9fceHmKjak=)
3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:03:fd:5f:35:92:2a:8a:d2:7e:f9:f9:5f:3b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: May 12 12:00:17 2025 GMT
Not After : May 13 12:00:17 2025 GMT
Subject: CN=43e4939d2278d78b888cd02e9e5887362c084989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:de:6f:48:7b:b5:26:33:a9:8e:b6:88:93:
87:70:8d:d0:a2:55:58:7b:24:35:9c:14:7c:e3:56:
7d:b5:f7:30:ee:5b:c1:6d:8f:f9:af:12:f7:44:86:
8a:25:7f:ad:5d:89:d9:dd:0b:88:26:a7:da:ed:7a:
fb:54:ba:f7:c4:02:4e:e2:3d:43:3b:1a:13:c8:bb:
2c:56:77:95:34:50:a3:32:f6:af:a4:c4:d5:c5:87:
af:f7:99:52:fe:5f:ad:85:17:c7:71:65:f3:1b:58:
3c:79:ec:1f:17:54:b2:e8:c2:70:3d:9e:5d:63:f2:
80:2f:08:5c:87:11:a6:47:af:4b:55:05:69:60:9c:
4f:73:ba:1d:46:c4:f6:a1:42:22:ac:e7:b3:fe:5c:
9c:b8:da:b3:4a:19:eb:a0:10:f5:0e:c5:83:e1:34:
60:e6:8f:d9:2f:59:5f:d6:c3:4a:92:fb:70:16:ca:
af:b4:2c:32:6d:0e:99:80:74:c4:28:5a:e5:e9:53:
38:7e:ca:97:0f:97:d9:1e:b7:6b:1e:d5:b3:fa:6f:
a8:2d:fe:dc:62:cc:18:8b:ca:1d:7a:d9:14:42:6b:
cf:4b:ee:8c:cf:a4:7e:c8:04:4d:5b:50:d7:47:2a:
8b:93:e8:8b:dc:69:ac:b2:50:a2:99:a2:1b:45:09:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:93:9D:22:78:D7:8B:88:8C:D0:2E:9E:58:87:36:2C:08:49:89
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c1:55:92:c4:1f:b0:00:7e:2f:1e:4d:60:4a:db:b3:e8:e6:
38:79:f1:0a:81:cc:a2:14:9c:11:89:b0:6f:e5:da:54:e0:3c:
f4:c4:ba:55:a8:b0:3d:d5:53:10:9a:04:b5:86:ff:51:cd:27:
51:e7:30:7e:0c:1f:e9:04:41:61:9b:e0:14:3e:a1:f2:03:a2:
11:a0:5a:88:d7:8b:1f:6e:a4:8e:41:a6:fb:70:0d:ac:46:7e:
76:54:99:bb:47:26:7b:fa:c5:82:50:6b:7c:5b:98:b0:91:4d:
88:5c:f6:f6:7f:1b:5e:73:85:d1:51:94:42:3b:3b:c3:4c:8e:
06:b7:8b:e8:d4:91:ea:39:8c:a0:f6:35:3a:e5:e5:32:83:2c:
e3:70:1f:d2:58:6f:a7:72:3e:8c:ec:4e:46:64:74:ea:17:b4:
c5:1d:ee:75:03:51:f4:10:d1:ab:44:04:60:1c:d4:df:fc:39:
56:41:80:28:0c:e5:d3:16:8e:05:1e:91:d5:e2:f0:40:bf:1f:
11:b7:c4:cd:ea:3d:26:bf:f8:7a:09:09:45:0c:22:59:a9:42:
4d:cb:ec:ba:23:b4:a6:3a:8e:2a:07:ad:bb:55:b0:54:78:b3:
10:95:65:90:ed:db:9b:fa:a5:47:35:b6:bc:9d:c2:61:87:f5:
06:79:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:00 2025 by rpki-client