Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: LS8EIB+hO6/6BvdzemU8OvupItxvKA5BnAglR339LSo=
Subject key identifier: D8:0C:CD:7F:F0:26:D0:0D:3F:21:DA:81:54:96:FC:BB:3B:5A:07:35
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 01968DA757E0C8738B5D92D21A94CFD71730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1360
Signing time: Thu 01 May 2025 21:01:16 +0000
Manifest this update: Thu 01 May 2025 21:01:16 +0000
Manifest next update: Fri 02 May 2025 21:01:16 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: 73GL+iNuDmlht8GxwDfZGpxYPdc7lWTGUTIlAP6fe+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a7:57:e0:c8:73:8b:5d:92:d2:1a:94:cf:d7:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: May 1 21:01:16 2025 GMT
Not After : May 2 21:01:16 2025 GMT
Subject: CN=d80ccd7ff026d00d3f21da815496fcbb3b5a0735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:e2:1a:01:bd:dd:45:ce:8f:b3:e5:4e:68:
06:b4:8c:3b:c3:db:92:9d:04:bd:67:4d:6d:9f:bb:
26:e3:f9:8b:44:2b:85:39:b5:d1:6b:5c:e1:41:ae:
21:e7:cf:f9:ac:8e:c1:8d:bb:0f:c0:da:40:4e:d4:
f5:f7:82:fb:a1:7a:00:f5:54:ac:e6:96:d4:8f:e6:
fe:b9:e1:5a:6f:34:2b:8f:21:51:04:eb:b7:2b:d8:
ef:34:f8:37:f4:07:1c:d9:6e:56:f9:3f:98:89:2e:
a3:45:ca:d9:a8:02:32:a1:81:fe:24:36:8f:11:94:
6a:95:d4:ea:6f:e8:d7:3a:f7:1a:6e:96:70:59:39:
8a:8c:38:c7:27:ff:8d:78:ac:e0:37:de:9a:64:dd:
2a:8e:7f:48:7e:f1:2e:21:21:20:77:37:3a:b6:e1:
60:7c:95:eb:ff:b1:16:07:39:5b:8e:56:0b:b2:23:
92:b1:ee:ee:f5:ff:9d:83:6a:e9:b6:fe:c4:30:93:
04:f6:ee:51:a7:d3:48:b8:b0:0d:53:31:a6:50:15:
2d:81:41:7d:10:95:50:5f:85:03:ab:38:b9:52:de:
68:99:5d:cf:1e:ef:d6:05:8b:5c:3a:4b:71:47:0c:
e5:e4:da:7e:3f:dc:04:27:54:1d:31:5c:0f:a2:ed:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0C:CD:7F:F0:26:D0:0D:3F:21:DA:81:54:96:FC:BB:3B:5A:07:35
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:b7:44:e1:1d:b3:04:5f:de:26:7f:0a:66:c5:27:93:00:
ed:4e:da:51:71:ee:85:3a:f7:c9:5b:78:d5:73:7a:bc:19:b9:
9b:0f:ec:ed:85:a4:02:59:3b:7f:7e:40:f8:c9:a8:33:59:7d:
7c:41:22:c3:23:98:4d:3e:48:2f:33:d5:91:c5:8d:89:26:b9:
9c:5f:eb:35:15:1d:92:56:c0:8c:74:2b:4b:12:9a:2c:91:d2:
2d:8d:00:cf:a8:59:54:cd:b6:ca:78:9e:23:c7:d5:54:f0:f2:
7b:a2:da:0d:c1:28:ee:12:cb:1c:2c:87:b5:b7:b7:b0:2d:35:
e8:cc:5a:8e:d3:1d:71:ac:5c:80:ff:c0:76:23:85:0d:2d:46:
d1:0e:9e:17:70:58:de:52:58:b8:b6:04:19:86:62:4c:d9:40:
a0:97:e3:ab:58:7b:e0:64:06:d7:e6:47:1c:b1:aa:c0:35:f3:
14:e1:b6:69:7f:02:34:c9:11:ac:d4:7d:19:1f:0c:df:08:ed:
6e:32:02:c5:53:4d:9b:bf:39:41:91:1e:bb:24:d3:b3:f1:21:
17:b7:c4:6a:5b:42:ea:a4:c5:4b:4b:fb:84:64:1f:87:96:ce:
30:4a:0d:f2:ef:08:47:1c:bf:47:77:f9:05:ff:b1:d2:f4:b6:
62:95:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:26 2025 by rpki-client