Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: ztYTG8+r968EzIdt1T+AAnk6D/jAHv3LpM836ZEj4+8=
Subject key identifier: A1:09:35:3F:CB:0D:9F:C6:38:D8:66:DE:2F:20:3D:5D:E8:7D:A4:58
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 0197B88F47C3542187F5B168E4D8A658F9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 1256
Signing time: Sat 28 Jun 2025 22:01:27 +0000
Manifest this update: Sat 28 Jun 2025 22:01:27 +0000
Manifest next update: Sun 29 Jun 2025 22:01:27 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: I1BDBigLmDwe8tryDu+sD5nF8dEJDvwluHvVetd0pDw=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:47:c3:54:21:87:f5:b1:68:e4:d8:a6:58:f9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Jun 28 22:01:27 2025 GMT
Not After : Jun 29 22:01:27 2025 GMT
Subject: CN=a109353fcb0d9fc638d866de2f203d5de87da458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:ba:ad:70:bc:55:78:85:b9:fe:3c:19:4a:
35:7f:fe:35:1f:ac:b3:55:d4:cc:0f:96:a6:31:13:
ff:4a:07:ea:60:87:7c:db:eb:bb:5b:2b:97:db:70:
c6:1d:40:1e:7f:1b:d8:6f:cf:13:79:15:b4:f6:35:
f0:ec:27:bb:c9:5e:00:51:7d:e6:5e:d8:17:6c:ab:
e3:c5:9c:d5:84:41:74:c3:c7:9a:ab:04:bc:8a:26:
1c:ef:6b:96:c2:87:bc:b3:3d:99:89:45:55:c1:e2:
f4:0e:7b:b9:90:21:93:62:dc:b3:96:cd:a3:06:3a:
a5:ae:60:b7:d4:03:75:c0:f3:75:db:e7:63:2e:ca:
9b:5b:7f:cc:98:06:df:06:79:e1:0f:ee:a5:b9:57:
68:f8:2a:39:d5:82:79:69:b5:bc:01:7a:87:d6:31:
9d:27:53:0e:07:8a:02:ed:c5:f0:28:9b:b9:bb:71:
ad:c6:25:6d:40:86:d1:ed:0a:bc:2c:19:2f:88:16:
8c:44:fd:8c:70:40:77:77:b6:ce:7f:d7:d8:63:e1:
15:e4:57:52:73:47:3c:dd:34:fd:bc:5b:bd:15:6b:
20:c8:a7:9d:2a:34:3d:d4:e0:f1:1d:d6:65:94:bc:
68:18:de:27:95:a4:88:fd:0d:bc:0e:f6:58:45:d8:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:09:35:3F:CB:0D:9F:C6:38:D8:66:DE:2F:20:3D:5D:E8:7D:A4:58
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:55:2b:db:1a:dd:dd:be:0c:33:8c:c3:c3:e4:cf:b9:35:57:
91:31:5c:72:6d:8d:b0:4a:28:28:9f:c6:bc:d9:19:0b:6d:c6:
e0:60:a7:fe:f9:10:a8:12:b4:ba:5c:2c:4a:a4:bc:03:95:0e:
4b:fe:e4:91:c6:f3:19:37:f1:c1:3c:a0:82:2a:c7:0b:25:01:
95:6c:fa:62:9b:12:26:02:4b:d3:87:62:de:0f:bf:cc:06:6b:
40:6b:c7:26:33:fa:54:a2:ae:4f:04:6e:d5:df:ad:1a:95:62:
e2:8f:84:5f:a0:5a:81:f9:2d:66:fd:8a:a8:c8:c2:69:d6:7b:
3f:d6:08:c1:a0:a3:0c:d0:30:d5:87:79:69:de:85:e9:db:0b:
58:7c:49:2d:f0:c0:2d:e9:e5:75:42:c4:e0:e0:e9:80:8c:05:
7e:92:53:ae:44:58:50:7b:2c:2e:63:a3:ed:dd:4f:f3:cc:5c:
a2:5a:6c:ec:9d:66:a3:26:a8:73:95:ae:99:00:7f:fd:9a:1f:
b5:6b:f2:80:70:81:0a:3f:fc:69:96:8a:a1:93:21:ce:ff:7d:
04:57:a1:6d:a2:6c:0c:2b:7b:44:2e:42:cd:43:72:35:29:1a:
4e:79:00:e9:de:bf:23:96:d5:50:2d:10:24:a9:5d:0a:56:2f:
5c:aa:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:27 2025 by rpki-client