Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: 77PR7TUz5kBsm/2zO+AZvx0vvGbxpY9K9d5R4PQ2i/M=
Subject key identifier: 93:83:DC:B3:FD:75:C9:69:A7:68:6F:80:13:C7:BD:E9:FD:BE:9B:82
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 0196BDEEB7863010B38FFEC939CFCDF5D51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0DFA
Signing time: Sun 11 May 2025 06:01:00 +0000
Manifest this update: Sun 11 May 2025 06:01:00 +0000
Manifest next update: Mon 12 May 2025 06:01:00 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: sGeCdCSRk2F5y5OzLgdu+noiE8VuffxBo9T08yKIyeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:b7:86:30:10:b3:8f:fe:c9:39:cf:cd:f5:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: May 11 06:01:00 2025 GMT
Not After : May 12 06:01:00 2025 GMT
Subject: CN=9383dcb3fd75c969a7686f8013c7bde9fdbe9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:67:8d:8f:30:6b:25:48:2b:d4:42:88:6f:
25:8f:f9:86:30:fb:b9:e6:a5:d5:90:1d:0f:ae:9c:
11:f8:76:d5:e5:35:32:8a:75:e3:55:25:51:62:1d:
b5:0a:a3:3f:b1:9a:da:11:45:e1:9c:e0:39:16:10:
4f:c0:f9:10:80:9d:73:2d:bd:ae:94:6b:cf:bb:eb:
4d:8f:2d:54:91:b0:54:57:d0:a3:56:aa:c8:0d:42:
2a:6d:dd:91:3d:4c:59:18:3b:21:e1:f6:c7:cb:2c:
0e:77:f7:dd:25:e1:69:4d:b2:65:a9:ed:1d:6e:bd:
78:ad:e7:09:1a:2b:2e:83:80:01:53:e6:25:cc:45:
6d:27:0c:16:69:7b:a2:70:03:4d:3d:02:7a:b6:4b:
a0:7e:8e:1a:a2:6d:98:9b:04:fe:71:41:db:9a:67:
f5:13:cb:0e:86:02:98:29:b9:8a:35:1d:1c:bf:11:
fc:0a:e8:b9:30:8d:a5:65:62:db:51:a9:71:e6:ec:
1d:e1:32:ac:36:a6:90:8b:8b:28:9e:dc:37:d8:90:
c9:d6:12:63:99:79:bf:dc:9f:fd:3b:8d:25:e8:21:
58:1c:2d:0b:98:77:04:1e:87:9d:d6:99:f5:0c:b0:
51:f6:c1:07:22:58:f1:4b:55:3d:57:9e:a3:8d:de:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:DC:B3:FD:75:C9:69:A7:68:6F:80:13:C7:BD:E9:FD:BE:9B:82
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a7:94:32:b2:e5:3a:89:49:c9:c7:d1:fa:68:32:04:b0:6a:
72:bb:b0:6a:e0:82:f2:36:35:95:65:65:fb:21:58:76:07:1b:
f0:ca:6f:28:b4:e3:b7:33:99:c7:f9:c8:d6:bf:38:52:9e:4e:
62:9e:f1:7e:87:20:7d:ce:bb:cd:3e:a6:a9:c6:a8:28:60:42:
ad:dd:56:35:01:73:da:0d:2a:db:0b:ef:89:8c:9f:5d:a0:97:
4f:1b:6e:26:92:c8:21:94:9f:3f:12:8f:b6:99:84:b9:77:26:
a9:90:eb:e8:59:57:c7:4e:49:1a:6e:38:fd:69:06:d5:5f:c0:
bb:78:26:af:7e:14:ad:99:d1:fc:62:b7:0e:d8:c5:25:73:27:
55:15:47:22:77:73:24:81:df:75:b4:4f:23:56:f8:d6:7e:61:
4e:ca:9e:f2:a4:55:ee:b8:3d:8d:2c:39:26:0e:ef:56:1d:a3:
89:ce:33:45:1f:12:b0:a7:5e:27:25:0c:9b:78:35:61:0a:e9:
1c:53:1e:51:67:fc:4d:f2:e2:67:65:43:84:36:1d:fd:18:42:
58:2c:24:d1:d4:e5:df:87:78:8d:90:bf:2c:b6:50:55:95:12:
b0:d9:4f:fd:1e:87:6d:eb:eb:d7:72:21:19:59:24:2c:16:a0:
69:52:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:03:53 2025 by rpki-client