Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: MGvGbEXG7epll1Uw6rzbF6QjtxyagfUZaWH2EyfVtRo=
Subject key identifier: 90:A6:D3:4F:B9:B8:6A:01:EB:4E:71:E1:96:08:0B:5E:2F:7B:68:BF
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 0197C237BB53A4DB08CC649F8B44C1A05EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 0DBF
Signing time: Mon 30 Jun 2025 19:02:01 +0000
Manifest this update: Mon 30 Jun 2025 19:02:01 +0000
Manifest next update: Tue 01 Jul 2025 19:02:01 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: 7smSIkR3AAIJ3zPYy8UhK/rTfrLmtYVEl1CQp7Mgmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:bb:53:a4:db:08:cc:64:9f:8b:44:c1:a0:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Jun 30 19:02:01 2025 GMT
Not After : Jul 1 19:02:01 2025 GMT
Subject: CN=90a6d34fb9b86a01eb4e71e196080b5e2f7b68bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:cf:c5:37:19:e7:f3:28:5b:30:16:83:4d:
6f:41:96:33:77:7b:44:62:4f:91:aa:cb:c4:df:03:
15:5e:c9:54:bf:f0:3e:a1:39:62:c3:a3:d3:0a:66:
03:22:9a:e4:ac:ba:69:96:60:6d:2c:02:85:2d:4c:
4e:9c:d5:70:96:2d:89:70:ca:48:57:72:4a:a9:05:
c4:72:3f:bf:4d:0e:ea:9d:a1:05:0c:eb:49:cf:64:
b2:07:79:0b:8b:a2:ba:81:46:00:b2:34:14:bb:e5:
e8:24:8c:a8:18:7b:f9:81:16:1b:45:f6:a1:3d:25:
90:38:af:b6:85:27:0a:21:9f:d6:8c:88:27:0d:3c:
d6:62:a3:0e:2f:2a:1d:65:64:5d:89:3b:53:07:df:
39:ed:bc:0a:91:7b:eb:7c:e9:f3:3d:29:b1:92:d6:
98:7d:91:ce:03:f2:9b:b5:52:d2:53:df:a6:98:66:
d4:72:8a:b4:5f:53:c9:57:fc:f7:c5:9e:88:76:ee:
7c:78:02:9c:2a:e4:49:3f:f9:f4:16:1b:04:fb:7b:
33:33:10:79:24:ee:30:98:57:24:d6:88:17:10:7a:
f9:ff:05:85:17:0b:60:35:9f:12:0f:84:c8:b2:94:
28:13:6c:37:fa:cb:fc:6b:4b:39:fe:34:97:fa:1b:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:D3:4F:B9:B8:6A:01:EB:4E:71:E1:96:08:0B:5E:2F:7B:68:BF
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d7:22:a3:49:3f:36:88:cb:06:c9:8a:e0:e1:45:60:d1:a9:
e0:db:ea:66:b6:ed:da:8a:ba:5d:23:e9:24:a5:b3:7e:e1:5d:
24:e6:19:32:7d:6e:57:47:1a:43:4c:10:60:7d:29:3c:30:f0:
9d:41:38:4a:c2:7c:6c:15:f8:5d:cb:20:41:be:fa:22:cc:bc:
e5:34:56:c5:10:57:90:38:38:0d:88:4f:24:a1:ac:63:5b:47:
38:9a:29:d2:45:e0:06:7c:5e:85:06:42:a8:1a:0e:83:d2:87:
4e:dc:d1:a8:a5:17:cf:d9:93:66:65:12:b6:52:3f:3e:5c:a8:
5e:fb:01:60:e7:37:ab:e1:14:c1:bf:50:e5:ca:4e:c0:52:70:
f0:b0:79:b7:a5:eb:e4:de:3f:41:e9:26:d9:69:2e:82:d9:4a:
61:fa:2c:3f:48:57:2d:01:87:7f:3b:ca:a5:25:5f:29:68:1e:
8c:ac:17:54:f2:ba:67:fe:cd:c2:c0:df:a4:49:7d:1f:21:2c:
3c:e9:6b:bf:66:bd:b6:89:10:00:76:10:4f:12:b1:6b:e7:20:
da:f4:cf:48:d0:0f:8d:08:3e:6d:e0:25:0b:d8:68:aa:5a:5a:
8b:48:e4:56:89:af:66:b3:32:64:1d:4e:5f:00:d3:b7:65:79:
2f:5b:cf:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCN7tTpNsIzGSfi0TBoF76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjc5OTgzMjQ5YzFkNWY4NjE5ZjEzNWM2ZDZlN2UzN2Rm
YmY1NjIwHhcNMjUwNjMwMTkwMjAxWhcNMjUwNzAxMTkwMjAxWjAzMTEwLwYDVQQD
Eyg5MGE2ZDM0ZmI5Yjg2YTAxZWI0ZTcxZTE5NjA4MGI1ZTJmN2I2OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gjPxTcZ5/MoWzAWg01vQZYzd3tE
Yk+RqsvE3wMVXslUv/A+oTliw6PTCmYDIprkrLpplmBtLAKFLUxOnNVwli2JcMpI
V3JKqQXEcj+/TQ7qnaEFDOtJz2SyB3kLi6K6gUYAsjQUu+XoJIyoGHv5gRYbRfah
PSWQOK+2hScKIZ/WjIgnDTzWYqMOLyodZWRdiTtTB9857bwKkXvrfOnzPSmxktaY
fZHOA/KbtVLSU9+mmGbUcoq0X1PJV/z3xZ6Idu58eAKcKuRJP/n0FhsE+3szMxB5
JO4wmFck1ogXEHr5/wWFFwtgNZ8SD4TIspQoE2w3+sv8a0s5/jSX+huTaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCm00+5uGoB605x4ZYIC14ve2i/MB8GA1UdIwQY
MBaAFKG3mYMknB1fhhnxNcbW5+N9+/ViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xMjJkODktOGU0My00MGMzLTljZWYt
YjMzOTE2YjlmODM5LzEvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xMjJkODktOGU0My00MGMzLTljZWYtYjMzOTE2YjlmODM5
LzEvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtcio0k/
NojLBsmK4OFFYNGp4NvqZrbt2oq6XSPpJKWzfuFdJOYZMn1uV0caQ0wQYH0pPDDw
nUE4SsJ8bBX4XcsgQb76Isy85TRWxRBXkDg4DYhPJKGsY1tHOJop0kXgBnxehQZC
qBoOg9KHTtzRqKUXz9mTZmUStlI/PlyoXvsBYOc3q+EUwb9Q5cpOwFJw8LB5t6Xr
5N4/Qekm2WkugtlKYfosP0hXLQGHfzvKpSVfKWgejKwXVPK6Z/7NwsDfpEl9HyEs
POlrv2a9tokQAHYQTxKxa+cg2vTPSNAPjQg+beAlC9hoqlpai0jkVomvZrMyZB1O
XwDTt2V5L1vPnA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:46:35 2025 by rpki-client