Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: yyhGomCfaxUejMJ/H/9EguZAK6UgokOSZzkp0RPtOv4=
Subject key identifier: AD:61:53:01:FC:19:E7:BD:01:CE:A2:73:2F:96:F8:B3:6F:D2:7A:66
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 0196AA3077FF8EB5A3E95450CB66754DAD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 11CA
Signing time: Wed 07 May 2025 10:00:25 +0000
Manifest this update: Wed 07 May 2025 10:00:25 +0000
Manifest next update: Thu 08 May 2025 10:00:25 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: F6iv0I634G0r30oX1g6w5gRsypO975OEeRLsuhpzbsM=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:77:ff:8e:b5:a3:e9:54:50:cb:66:75:4d:ad:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: May 7 10:00:25 2025 GMT
Not After : May 8 10:00:25 2025 GMT
Subject: CN=ad615301fc19e7bd01cea2732f96f8b36fd27a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:6e:de:47:03:42:d0:dc:6f:43:56:23:33:
5e:f1:f5:96:84:8b:ef:96:c3:37:5e:d4:39:bb:5a:
50:25:b9:7d:11:13:7f:24:98:d9:8f:88:56:c6:23:
2b:60:01:a2:eb:85:04:aa:31:e4:5a:07:ff:f0:96:
cb:98:2c:dd:d7:37:39:34:1b:03:d2:30:00:9f:8e:
0c:20:4c:4c:8a:da:0f:cb:c0:b1:be:48:7f:bc:df:
d1:8b:27:ed:c6:04:c5:4e:3b:a5:6f:43:a3:ce:c4:
b2:ae:a8:ad:07:36:52:a7:04:74:fc:87:6b:91:4e:
48:79:c1:52:d9:a0:be:2e:d7:21:dd:30:5f:60:25:
2a:11:7f:66:5c:a2:a2:02:4c:a9:0c:63:9f:51:31:
2f:99:bd:bb:66:2b:63:d8:a0:4b:78:06:c6:eb:b9:
d8:3e:46:e7:8f:b1:dd:7e:fa:0f:7c:b6:0b:02:82:
9a:70:fc:ba:b2:da:4d:4d:3b:cf:6c:51:ff:45:10:
35:e1:9b:b8:c8:a8:c4:5b:40:34:9b:79:c1:eb:e8:
d0:04:3f:17:37:eb:9e:95:fd:4b:32:21:9b:d2:00:
28:6e:a0:a1:26:48:03:c9:df:f5:fd:fc:4f:4d:dc:
91:a2:6f:de:59:1b:63:26:ec:ec:5d:a7:c6:c7:2d:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:53:01:FC:19:E7:BD:01:CE:A2:73:2F:96:F8:B3:6F:D2:7A:66
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3e:93:3a:fd:59:be:9d:b7:8f:02:44:e1:e9:f8:78:df:b4:
53:31:2e:31:94:19:5c:97:08:53:ea:71:fc:43:92:db:23:01:
a4:55:d3:5e:ad:d5:f0:9d:df:14:ce:04:1d:d4:1f:62:f5:44:
aa:44:29:56:04:8d:c4:a8:b8:1f:85:9f:ea:15:18:55:9c:dc:
d8:02:b2:1f:21:d4:b5:44:1c:47:66:e3:94:ca:f8:a8:47:d1:
62:fa:4a:ae:e3:73:47:50:3b:45:72:7a:e4:a0:32:2f:7e:5f:
2b:4e:c1:30:61:28:92:a2:53:ae:17:4c:59:32:bc:81:c9:de:
9f:49:02:16:78:23:cc:50:77:c1:07:e2:4c:1c:3b:e8:e5:c1:
c3:b8:fc:5d:ba:2a:9c:43:68:6c:aa:76:d9:f2:1e:a6:05:b5:
15:d3:62:45:e5:78:59:12:05:ba:3a:57:1c:97:4b:a2:8a:f8:
05:c6:e7:d7:c4:15:4a:82:85:c2:c6:d0:e0:a2:f4:35:c4:ba:
8f:4d:e4:9b:b5:7b:7b:b4:73:21:ae:36:7d:22:66:07:51:7c:
b3:26:ad:df:bc:1c:31:d7:81:b0:06:07:cc:d6:58:4d:24:93:
d0:83:62:0c:c4:50:7b:f3:16:34:6e:39:cc:2a:09:39:fa:72:
73:4c:69:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMHf/jrWj6VRQy2Z1Ta2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTgwYzA3NGZiZTU5ODgyNGM3MDAzMTk1YjMwYWE0YTM2
NjE1MmMwHhcNMjUwNTA3MTAwMDI1WhcNMjUwNTA4MTAwMDI1WjAzMTEwLwYDVQQD
EyhhZDYxNTMwMWZjMTllN2JkMDFjZWEyNzMyZjk2ZjhiMzZmZDI3YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuBu3kcDQtDcb0NWIzNe8fWWhIvv
lsM3XtQ5u1pQJbl9ERN/JJjZj4hWxiMrYAGi64UEqjHkWgf/8JbLmCzd1zc5NBsD
0jAAn44MIExMitoPy8Cxvkh/vN/RiyftxgTFTjulb0OjzsSyrqitBzZSpwR0/Idr
kU5IecFS2aC+Ltch3TBfYCUqEX9mXKKiAkypDGOfUTEvmb27Zitj2KBLeAbG67nY
Pkbnj7HdfvoPfLYLAoKacPy6stpNTTvPbFH/RRA14Zu4yKjEW0A0m3nB6+jQBD8X
N+uelf1LMiGb0gAobqChJkgDyd/1/fxPTdyRom/eWRtjJuzsXafGxy3JAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1hUwH8Gee9Ac6icy+W+LNv0npmMB8GA1UdIwQY
MBaAFDgYDAdPvlmIJMcAMZWzCqSjZhUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEt
MmY5ZTkzYTY1YzA4LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEtMmY5ZTkzYTY1YzA4
LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD6TOv1Z
vp23jwJE4en4eN+0UzEuMZQZXJcIU+px/EOS2yMBpFXTXq3V8J3fFM4EHdQfYvVE
qkQpVgSNxKi4H4Wf6hUYVZzc2AKyHyHUtUQcR2bjlMr4qEfRYvpKruNzR1A7RXJ6
5KAyL35fK07BMGEokqJTrhdMWTK8gcnen0kCFngjzFB3wQfiTBw76OXBw7j8Xboq
nENobKp22fIepgW1FdNiReV4WRIFujpXHJdLoor4Bcbn18QVSoKFwsbQ4KL0NcS6
j03km7V7e7RzIa42fSJmB1F8syat37wcMdeBsAYHzNZYTSST0INiDMRQe/MWNG45
zCoJOfpyc0xpyQ==
-----END CERTIFICATE-----
Generated at Wed May 7 13:14:41 2025 by rpki-client