Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: ZBZU0buAQ1QdGO1z+TlYlyOUtdG5rtS50AyRLgJSfq8=
Subject key identifier: 9B:CE:D0:8F:D8:D5:E0:9F:84:39:FA:9D:44:77:13:1F:82:AA:5F:3B
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 0196C8A9041A1A98EFC39652FA9465962468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 0FCF
Signing time: Tue 13 May 2025 08:00:41 +0000
Manifest this update: Tue 13 May 2025 08:00:41 +0000
Manifest next update: Wed 14 May 2025 08:00:41 +0000
Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: xF8v1hKYbduLuOgr7nxV5d1c5uFphoqyNCXC8COi40A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:04:1a:1a:98:ef:c3:96:52:fa:94:65:96:24:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: May 13 08:00:41 2025 GMT
Not After : May 14 08:00:41 2025 GMT
Subject: CN=9bced08fd8d5e09f8439fa9d4477131f82aa5f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:d7:c6:1d:25:b8:8e:86:43:2c:56:02:b4:
12:3d:8a:eb:ba:6f:ab:9b:fe:44:54:60:c1:45:30:
8f:11:85:25:d3:ae:d8:b1:d6:40:bd:d5:f8:81:7c:
82:97:27:be:0a:0c:0d:87:55:96:23:2b:13:55:3c:
eb:17:cf:db:3d:b1:05:73:94:07:9c:b8:ac:4b:7b:
55:01:54:41:49:ac:e6:3f:87:10:95:93:73:97:d1:
76:c8:a4:16:36:1b:18:2c:f5:c9:57:87:78:39:52:
ec:34:f6:eb:db:0b:ff:d4:6b:a2:ec:ca:92:71:e6:
da:a9:c2:1c:ea:ec:52:83:f7:8d:3b:1f:6e:63:a6:
25:e8:14:a3:3e:a9:5a:8e:d5:ee:8d:6f:75:e9:77:
80:ce:c7:fd:c8:82:ba:59:24:97:e5:cb:e5:97:7b:
25:36:27:6e:d0:22:ea:4a:2a:b6:41:9a:9e:1d:e9:
0b:c9:c5:2c:9a:d2:ca:f4:8b:70:d0:49:9c:2c:7e:
96:a0:ff:e6:f2:40:c5:31:cc:79:07:e2:8a:1d:68:
c7:88:da:30:c9:a1:45:70:84:75:8f:a1:a6:ba:43:
f0:75:f5:ab:87:52:c4:4c:27:05:10:cc:0c:ea:7a:
6a:eb:23:d8:36:50:b5:1b:d5:d5:9b:62:b5:4e:06:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:D0:8F:D8:D5:E0:9F:84:39:FA:9D:44:77:13:1F:82:AA:5F:3B
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:f2:fb:34:0c:fd:cf:49:41:1a:19:70:2b:f1:dc:65:79:e3:
69:05:23:76:4e:21:3c:5e:91:12:ad:99:cf:41:79:55:f7:79:
79:10:1c:ed:72:f9:ba:9a:6f:3e:0e:2c:3d:ef:3e:56:24:02:
ab:5c:23:15:4e:bc:29:5a:64:a4:ea:44:d3:1c:95:dd:30:8d:
41:13:40:30:b5:ce:af:a3:c5:8b:d4:60:d9:06:dd:ad:39:09:
2b:fa:e6:f5:df:85:55:c6:37:4e:b7:58:f3:55:2b:06:bd:ac:
fc:41:09:e3:e6:ce:e9:a5:01:06:5b:c9:4a:ed:15:e7:35:e3:
fd:29:71:e3:cc:ba:8f:7d:29:81:b0:60:8e:ce:fc:7a:16:51:
d0:2e:ec:76:36:a4:d9:1a:da:82:ef:97:8c:8f:cb:a1:8c:0d:
1f:3b:f2:15:33:eb:c0:70:89:d2:77:d1:6f:a9:a0:5d:d7:53:
3a:b0:ca:e9:d4:8e:c3:71:08:cf:8e:3d:20:5c:6c:c1:49:f3:
39:37:bc:c7:a1:20:f5:6c:44:f9:b7:32:4f:08:96:90:97:36:
bf:9d:c7:e6:19:29:60:f2:be:c4:0b:63:b9:f4:23:16:ac:70:
1a:74:14:29:02:10:03:1a:9d:ea:e0:9c:eb:af:9e:e2:ef:85:
55:8f:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:15:12 2025 by rpki-client