Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: Q5TVMkplgYVR0uYHuMNk0QBd8TnS9wtVJlmM1Gubvt4=
Subject key identifier: B5:B5:30:BE:4D:E8:19:D3:34:F2:EB:61:F8:E6:EB:38:32:3E:42:7D
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 019788B4BF14F6E4746FB86CC5A6C822541E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 13E2
Signing time: Thu 19 Jun 2025 15:00:36 +0000
Manifest this update: Thu 19 Jun 2025 15:00:36 +0000
Manifest next update: Fri 20 Jun 2025 15:00:36 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: uB63HaI5T3mF+mtRfdJWltb8WYi3peP8TSOwh3KI8jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b4:bf:14:f6:e4:74:6f:b8:6c:c5:a6:c8:22:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Jun 19 15:00:36 2025 GMT
Not After : Jun 20 15:00:36 2025 GMT
Subject: CN=b5b530be4de819d334f2eb61f8e6eb38323e427d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:36:b2:7c:42:76:0c:0d:c8:b1:5c:ca:a2:
76:0d:5e:bd:96:cf:89:f4:6d:d9:b0:d3:cf:77:ec:
86:cd:46:e5:86:ab:83:75:2e:05:08:ad:93:96:28:
5d:40:52:4a:a7:b9:48:1e:e3:e0:0e:f0:de:e6:b7:
7d:db:80:d0:5a:4e:07:a2:2e:66:49:31:7a:ad:48:
3f:e9:79:37:56:b7:a9:5f:68:71:31:59:a7:e8:be:
ef:24:ce:e9:03:a4:3f:e1:27:73:98:fa:fa:a4:2a:
9d:ac:ed:af:ce:58:f3:f7:47:4b:5e:bb:8c:38:0d:
d9:b5:2a:af:76:83:72:a7:f9:9c:28:7a:8d:78:73:
d4:2a:f9:d9:29:6f:6f:a4:24:50:9d:30:4d:c6:79:
57:81:8b:80:5a:a1:40:45:e9:9f:c3:61:60:93:98:
83:ab:2d:2b:64:05:3e:3d:b6:6d:cd:95:48:ee:e9:
76:99:44:12:6e:11:7e:9b:c2:3b:a7:9e:46:81:73:
08:b6:01:c3:76:f4:0a:55:eb:83:ce:0d:28:6c:c8:
c6:16:79:41:6c:1e:2d:99:e2:50:2d:4c:96:01:63:
bb:d2:a1:fe:c8:b1:a5:3d:c8:bc:9a:e9:92:fe:b4:
c5:ea:87:3e:68:23:31:76:be:ec:6f:7d:79:55:10:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:30:BE:4D:E8:19:D3:34:F2:EB:61:F8:E6:EB:38:32:3E:42:7D
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:64:f7:16:72:b0:3f:dc:75:0c:6f:d8:fe:21:8c:96:2a:15:
95:b1:c4:6c:b5:54:6b:91:c2:21:3e:8f:f9:39:b3:3d:1d:06:
1b:54:e5:aa:f2:5b:f6:49:e7:b0:6d:59:c0:d9:53:e1:09:cd:
73:dd:cb:5e:cb:64:62:13:57:db:70:af:7d:ea:76:38:5c:c5:
99:1f:03:68:96:f4:5d:15:1b:cf:d2:88:ae:e9:a7:84:c1:70:
56:93:6b:37:b1:f6:b6:1f:95:3d:ad:96:2d:61:54:c5:cc:d8:
2c:81:03:5d:c5:c6:d5:13:19:db:8d:8b:0a:94:25:ff:04:22:
29:65:6d:60:e8:0a:f4:44:a1:20:c3:18:93:a8:de:c1:56:aa:
c9:9b:62:68:86:72:33:23:61:04:81:39:69:28:d9:32:ad:ce:
6f:e5:ec:c5:71:c9:30:06:ed:92:71:29:b8:51:ba:a1:c0:61:
5f:1b:91:ad:6e:b6:11:de:08:ac:cf:f8:0e:e2:66:44:41:f8:
e9:5b:3f:e7:ac:ec:99:0b:5a:51:2a:24:ab:c8:d1:5b:03:4d:
3f:5e:d5:57:ce:b8:dd:b7:94:c5:19:a3:4e:81:eb:67:5d:01:
8f:48:a1:ec:49:00:fb:99:25:2a:94:5f:06:d6:49:3e:35:9b:
72:6d:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:29:22 2025 by rpki-client