Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: 4yx8C5dH1kVZ5djLnKX4TKeFIUZQo1Jhfr6RpfSup0g=
Subject key identifier: E3:31:A4:C2:AD:D4:5D:AC:1E:DF:8E:29:93:58:C6:91:6A:3F:26:CA
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 0197CE3B55780CE98DF1C34BE6FFEA9D8317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0B5C
Signing time: Thu 03 Jul 2025 03:01:24 +0000
Manifest this update: Thu 03 Jul 2025 03:01:24 +0000
Manifest next update: Fri 04 Jul 2025 03:01:24 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: 655zqa9itujBJGDyGyedxoHeFAcHOOSkEk/r2bdLRx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:55:78:0c:e9:8d:f1:c3:4b:e6:ff:ea:9d:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jul 3 03:01:24 2025 GMT
Not After : Jul 4 03:01:24 2025 GMT
Subject: CN=e331a4c2add45dac1edf8e299358c6916a3f26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:97:04:96:b7:90:d7:29:fa:a6:e7:e5:74:
f8:74:b8:a0:8f:e7:aa:7f:b7:fa:e6:15:69:ca:e3:
89:95:51:63:5a:ca:15:80:70:74:27:34:bd:fe:30:
2e:4d:aa:6b:0d:6e:cd:77:7b:14:e0:69:59:d7:10:
73:a5:d0:73:55:92:64:66:a2:40:cb:f8:96:91:81:
0e:3e:d2:54:5c:27:9c:b1:82:af:26:13:d9:af:23:
6e:95:93:1c:54:b9:b5:16:49:25:ff:8d:5a:7a:31:
f6:15:a3:3a:d4:2c:ba:c7:68:f9:1f:68:14:cd:c2:
0d:38:5f:70:99:13:24:96:e1:f5:c5:71:2e:be:6d:
bd:e6:aa:ab:8c:65:51:03:72:71:c1:b9:07:63:dc:
b0:50:6b:83:2a:93:57:cc:5c:13:13:4b:28:b3:7f:
5e:5c:3a:60:1b:1a:a0:df:8b:73:e6:f0:7e:ad:78:
1d:b7:be:08:2a:66:3d:40:81:13:23:e8:a2:eb:91:
3e:d9:b8:84:9d:41:e8:5d:42:8e:93:4d:f4:64:1e:
e3:c3:1c:c4:5a:d3:e3:cc:8d:e7:82:9f:eb:c9:25:
51:cd:19:2b:b2:27:a4:da:ec:2e:99:1d:5d:69:c1:
51:b4:66:da:be:18:b5:fb:38:4a:00:0e:f4:48:4e:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:31:A4:C2:AD:D4:5D:AC:1E:DF:8E:29:93:58:C6:91:6A:3F:26:CA
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ea:cb:45:42:20:84:71:59:f1:97:4c:d4:05:03:c8:cb:61:
3b:09:fc:23:d8:45:ac:1a:6d:38:b4:6c:06:a2:03:64:b7:25:
33:ca:2a:68:33:19:6e:18:f3:03:d1:cd:9c:ec:0d:02:57:06:
48:3d:15:9d:c4:c9:4e:53:1f:e8:d0:14:81:a1:59:e8:74:b8:
93:ad:08:8a:ed:90:4c:71:15:79:bc:f4:d0:b8:1a:d2:dc:c5:
1d:18:28:85:9f:de:b3:5d:05:8a:a9:36:a2:b8:ee:c8:44:47:
ee:e6:7f:b1:6c:08:82:85:1a:50:0e:cc:6c:4e:cd:7f:cf:8f:
bc:fd:44:25:6d:f3:1b:f8:13:08:2e:5f:c0:12:4b:42:b1:98:
97:95:65:32:6b:46:f3:84:17:fd:4c:8a:20:50:49:2d:c6:ad:
81:b9:43:12:23:7d:51:58:cb:e7:cc:01:72:6c:57:c1:d6:6b:
53:bd:a2:fb:c3:7c:f9:41:28:9f:01:06:60:08:63:90:90:65:
16:67:c8:8b:12:39:0f:e7:5b:d5:dd:d0:98:e0:c4:1b:da:b7:
06:cb:cb:5b:1b:b6:50:ab:1b:20:6c:85:09:78:e1:28:13:7a:
6d:8a:21:71:be:af:b8:f1:99:06:44:ab:76:db:6b:8a:1e:ef:
e5:76:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:16:44 2025 by rpki-client