Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: T3oveR9INYaTn1EnJQHkFsnzC6+fnbeLHnKUGLdMJPI=
Subject key identifier: F6:D9:E8:B3:65:FD:9A:73:2F:65:C8:E6:4F:1F:F2:16:0A:D7:A0:55
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01968F5E4BB0A421AAECBD1C645D5F2A25C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 05:00:43 +0000
Manifest this update: Fri 02 May 2025 05:00:43 +0000
Manifest next update: Sat 03 May 2025 05:00:43 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: trM17F0twIuB6AAOkhU/wTAeuyoSJLEBH4NkJ4+SQYk=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:4b:b0:a4:21:aa:ec:bd:1c:64:5d:5f:2a:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: May 2 05:00:43 2025 GMT
Not After : May 3 05:00:43 2025 GMT
Subject: CN=f6d9e8b365fd9a732f65c8e64f1ff2160ad7a055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3b:94:1a:7c:65:b2:a0:4a:ac:48:d8:e7:c1:
aa:da:a9:37:d9:5b:33:3d:84:31:39:27:fa:43:0b:
af:10:01:b0:1e:28:cf:05:8c:da:00:43:40:47:d1:
88:65:de:69:68:de:e0:a6:5e:6a:a7:50:c2:46:05:
02:35:41:e5:8d:f6:32:54:ca:c3:cd:86:36:ce:5f:
12:ec:21:59:b5:76:e7:5b:61:63:41:d4:29:b3:56:
ab:a2:4b:b1:bb:b3:1d:2f:c7:37:02:0c:16:81:28:
b3:55:fb:09:73:13:30:3f:49:5a:c1:78:17:53:9b:
ef:de:6a:94:bd:e1:13:a0:3b:c1:b1:b5:a0:ec:0f:
aa:f7:b8:1e:1f:b1:f8:38:ac:67:8f:1f:8a:e9:63:
69:9e:67:b7:cf:41:d6:0b:ae:af:52:8b:6f:cb:b8:
a7:58:d8:57:aa:cc:be:99:49:8f:53:e7:ed:9b:c2:
05:01:8c:35:5f:fe:73:4c:0e:77:a3:21:e3:71:41:
98:77:9f:e1:e0:c8:39:13:dd:af:8b:ec:ac:31:6d:
35:f9:39:5e:9f:d0:4a:03:9c:41:3e:d3:ec:0d:17:
3d:63:e9:52:a1:b6:cb:35:9f:f8:30:08:0c:18:5b:
92:94:50:3a:04:e9:9b:23:3f:4e:26:09:33:af:a2:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D9:E8:B3:65:FD:9A:73:2F:65:C8:E6:4F:1F:F2:16:0A:D7:A0:55
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bc:e3:27:fd:11:be:bd:c7:64:ee:ad:b4:d9:8b:cf:58:d4:
66:90:5d:36:0a:aa:10:b3:39:7d:48:5d:5f:d7:21:fd:7f:98:
98:8d:d1:8a:7f:2a:82:37:a2:0d:c2:cd:e1:11:c1:ba:e2:46:
62:11:ba:b5:8a:11:ed:52:90:22:49:c1:5c:2c:c8:e1:3e:e9:
6d:9a:8f:4c:a0:4d:e0:10:72:63:77:04:b7:22:0d:30:27:3b:
d6:0b:7a:30:ca:36:e4:44:f4:4b:6e:be:83:a3:03:08:f8:4b:
de:07:bf:d2:e2:f6:dd:ad:64:86:07:7b:b2:09:ae:38:0d:23:
5f:45:d5:87:38:39:16:aa:46:56:8b:c1:b6:3c:f4:60:67:56:
f9:e2:88:76:90:9f:59:4c:d3:e7:95:af:f8:8a:23:59:9c:a7:
8b:2f:b7:c1:fd:1f:08:36:6f:eb:65:07:c5:c7:0c:50:1c:60:
d6:7d:a5:1d:72:23:1c:c9:77:a3:56:d9:55:73:d0:78:38:c5:
df:c3:39:24:e4:40:14:f0:69:74:2e:97:52:37:2e:7b:c2:4d:
9f:00:03:2e:38:0f:55:04:89:ec:66:34:f9:56:70:ae:4d:a1:
39:d2:b4:53:e0:c2:d3:20:e2:00:09:d0:15:81:b2:26:c7:19:
26:4c:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:37:01 2025 by rpki-client