Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: u7ywI0lcx1VtWujgzRtYOGv6ZhbtAMwQvTF0JvlfnjA=
Subject key identifier: 11:AD:B8:93:F8:70:59:48:C5:BF:0D:49:E5:F4:A0:6E:6A:87:6E:FA
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 01968F95B4C581015655B1811F2FE9CE51DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1361
Signing time: Fri 02 May 2025 06:01:15 +0000
Manifest this update: Fri 02 May 2025 06:01:15 +0000
Manifest next update: Sat 03 May 2025 06:01:15 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: g9yHyQSG5oWLK893CnMatm1yo9qW3mdCKzyND+xDdBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:b4:c5:81:01:56:55:b1:81:1f:2f:e9:ce:51:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: May 2 06:01:15 2025 GMT
Not After : May 3 06:01:15 2025 GMT
Subject: CN=11adb893f8705948c5bf0d49e5f4a06e6a876efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:a0:a3:50:69:1f:32:61:ae:a3:06:d5:55:
7b:f0:ae:66:48:93:15:0d:94:f4:2f:d3:d3:e9:9d:
bc:5d:a5:c5:7a:ab:86:5b:d6:a1:e5:84:f4:22:ce:
1c:ac:ac:7c:3e:27:da:c2:58:ba:81:68:c3:ef:e9:
c0:85:77:58:54:94:6d:53:94:d8:a4:e5:eb:61:18:
83:03:80:68:ba:a5:27:3d:1a:58:90:71:dc:44:e2:
47:ce:4c:e2:c3:82:5d:c0:ed:73:9a:61:60:ec:79:
25:9c:df:e8:8d:6b:47:9e:4e:95:8c:df:87:48:3a:
bd:fe:3e:05:ec:34:0b:41:aa:86:83:e2:68:5e:f7:
46:ee:29:ec:9d:0b:c0:0f:86:8e:a2:0e:be:16:36:
0d:fc:a0:a2:c0:91:f0:54:01:f7:8b:93:ed:93:ca:
1a:78:30:24:6e:10:ac:f7:59:a1:ff:32:14:29:91:
47:8e:a0:56:66:50:91:00:87:64:a3:06:72:c4:95:
20:b2:e3:39:65:53:64:e9:ac:f0:9b:21:7b:ed:6c:
a9:18:f7:24:05:46:ad:ed:a6:e0:40:96:16:1d:d4:
9d:59:47:5c:66:15:f7:1e:26:f3:f5:1b:7d:29:8e:
2a:68:38:85:98:60:df:5a:76:62:13:2d:10:38:7c:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AD:B8:93:F8:70:59:48:C5:BF:0D:49:E5:F4:A0:6E:6A:87:6E:FA
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:68:93:1c:a6:56:84:b3:8f:16:8f:4d:f3:d8:36:4b:04:
04:3f:d1:cb:26:e1:eb:7a:63:ff:59:fd:cb:3f:4b:86:05:3d:
c2:1c:ea:bf:87:e4:24:25:8d:40:c0:0f:d2:4b:65:ab:b3:e6:
95:15:ee:42:d7:f8:bd:2a:1d:71:5c:06:c2:2a:41:71:eb:6e:
d0:53:a1:e5:34:5b:4e:0a:3f:e3:5d:f0:25:22:34:c5:58:15:
1c:44:41:2f:69:36:2c:8d:b7:ba:3c:3f:0f:29:3e:33:19:04:
8d:0a:5d:bb:a5:8f:d4:b3:8e:a3:70:60:cd:e7:69:42:ff:e3:
fd:0a:9a:31:b8:e9:f0:1c:91:eb:68:c5:19:5a:ec:dd:2b:f1:
1d:35:1b:23:3b:ad:aa:7c:c6:4c:a6:26:0b:16:be:bc:4a:8c:
fc:b9:60:4e:c8:1c:b5:16:a1:14:b3:fc:b6:55:a7:fd:c8:62:
70:91:8c:39:3a:ba:22:04:a2:f3:db:d4:ea:0b:da:bb:c9:8a:
9a:80:f6:c4:57:a6:dd:94:b8:7d:d8:78:a1:a8:07:b5:ff:49:
94:be:2d:6e:d4:af:ec:a0:15:29:8f:21:a9:39:1d:db:9f:da:
2d:e0:33:37:fd:db:a5:63:8b:5e:52:f1:ec:d3:fb:5f:89:9a:
26:17:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:35:17 2025 by rpki-client