Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: Nms9iSfzZWVhS5GxHpCNPpoUbwZj7R5qQVm5WsJLCAs=
Subject key identifier: 52:2C:B7:AC:7D:9F:11:BB:44:B3:86:82:FF:4C:EF:21:CB:FB:F6:76
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 0196BD80B42CF3F7D0942540F7CE8BAEDAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 1279
Signing time: Sun 11 May 2025 04:00:50 +0000
Manifest this update: Sun 11 May 2025 04:00:50 +0000
Manifest next update: Mon 12 May 2025 04:00:50 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: YPUUszaJTmAcUfOlM9BPeGVOVJjM1wwFMmjRnHqshQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:b4:2c:f3:f7:d0:94:25:40:f7:ce:8b:ae:da:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: May 11 04:00:50 2025 GMT
Not After : May 12 04:00:50 2025 GMT
Subject: CN=522cb7ac7d9f11bb44b38682ff4cef21cbfbf676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:6d:72:4b:9f:c2:a5:11:28:0f:5b:29:cf:
08:93:48:3b:2c:60:d6:cf:03:91:7e:85:09:14:95:
19:e7:e7:dc:83:6b:5b:03:37:78:29:95:5a:5b:3a:
d4:98:b0:1c:71:cc:90:17:83:be:e5:ac:17:03:22:
65:09:b9:88:9a:71:f2:48:21:cd:f9:69:1d:be:a9:
c5:bc:26:97:20:f5:c6:f1:53:d4:50:4c:41:d4:09:
df:df:01:8b:15:24:59:46:61:ac:fb:33:f3:cf:f6:
a2:bf:62:82:39:ea:33:cf:b9:cc:41:5d:a5:99:9b:
26:37:85:97:a0:80:71:3f:49:74:a4:2e:54:f2:d2:
c2:fe:dd:0c:f8:51:88:55:f0:e3:4d:2d:cc:aa:cb:
07:4a:bd:e2:33:d7:1f:86:48:6a:16:d4:52:8d:29:
b6:bc:d6:60:83:1f:72:59:59:81:8f:58:2a:19:73:
c3:15:7b:77:70:43:be:4f:69:5a:45:15:43:bb:7f:
30:79:af:0f:18:89:1a:8e:ed:b0:5a:ea:5b:f3:0e:
ff:34:f8:a8:37:8a:57:6e:45:6d:b7:f9:f1:39:e3:
8a:ec:46:1e:0e:92:49:a0:8d:ff:a1:61:ad:39:fb:
3b:d6:2e:69:41:c2:e1:c3:0c:a7:04:bf:b9:63:b2:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2C:B7:AC:7D:9F:11:BB:44:B3:86:82:FF:4C:EF:21:CB:FB:F6:76
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8e:17:ba:8c:2e:60:ba:e9:6b:17:6d:cb:ec:72:f3:95:c4:
52:ac:b0:a0:ec:ab:e6:ab:42:27:66:01:ce:a2:1c:05:c0:55:
2d:5d:17:ef:75:64:36:05:4e:c7:2b:54:65:b4:f2:02:2b:19:
78:67:b5:6a:a7:2c:4f:bb:d2:26:46:0f:4e:fe:c9:ff:0f:48:
c5:1a:06:e5:da:d9:f5:73:91:c6:8b:85:fc:ff:c2:82:4e:9c:
cd:67:92:56:7a:3e:4b:99:1d:18:0c:d9:1c:17:27:71:f1:da:
9d:8b:36:6d:44:e4:36:09:69:68:71:ba:97:8b:82:fd:51:d5:
4c:85:1c:a0:c8:42:3e:91:4d:29:84:b8:63:0a:e1:40:90:4d:
dd:9f:72:dd:1a:05:e0:66:53:ea:11:e0:bd:e8:9c:bf:cf:58:
14:4f:51:44:d0:de:83:ce:09:4a:ff:36:77:7f:4d:c1:1a:1a:
0e:03:c2:f5:1d:ee:fb:ca:7f:d6:1b:75:df:66:2e:31:35:bb:
b1:a7:cf:74:e9:72:00:7c:48:68:fb:0e:a5:bc:66:56:d4:a0:
ac:21:59:a0:15:65:ca:db:d4:45:64:da:ee:3c:4c:2c:5a:96:
75:b8:14:c3:90:c6:ac:5d:b3:82:1a:a9:cc:b7:bf:27:60:24:
4a:16:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:48:42 2025 by rpki-client