Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier: cbDutxgh/oIXsiWsoV5z2zlOdGUvAGH8SaHXbHQokbM=
Subject key identifier: BE:87:1D:A2:57:6A:52:99:AC:BA:7A:AD:71:E6:AA:50:06:0C:7E:59
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 019782EA07668A26C2CF67FC9B3A9B9AA7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 12:01:04 +0000
Manifest this update: Wed 18 Jun 2025 12:01:04 +0000
Manifest next update: Thu 19 Jun 2025 12:01:04 +0000
Files and hashes: 1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: 4HL/lE1erSvcDfSaxQ71Ap1ie/lgX6IRUCaMQvVvcTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:ea:07:66:8a:26:c2:cf:67:fc:9b:3a:9b:9a:a7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Jun 18 12:01:04 2025 GMT
Not After : Jun 19 12:01:04 2025 GMT
Subject: CN=be871da2576a5299acba7aad71e6aa50060c7e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:75:9c:59:4f:83:95:d9:ee:56:c3:f2:b7:
d1:09:e9:d4:0a:09:6c:44:59:a6:c2:61:12:11:99:
77:17:6b:f3:c8:47:a9:fc:9f:65:46:01:27:3a:d7:
cc:c7:3a:57:75:e4:3a:04:c9:f0:05:19:f6:8e:18:
f6:30:7b:0a:6a:19:a9:2d:79:5f:ab:cf:15:12:c4:
b9:ab:3a:81:11:a1:a4:6b:10:e2:c2:05:b4:a5:e4:
aa:18:ed:79:a4:3b:19:64:ed:6a:20:29:7e:98:cd:
6e:5d:5d:47:ed:ef:23:4e:fa:52:a2:09:c2:ad:3b:
2a:35:d9:a0:38:c8:5c:b3:e3:00:e1:da:e7:bf:49:
43:24:1f:a9:b4:a8:27:19:e3:2f:c1:c3:26:fd:75:
c9:da:5f:db:d4:62:0f:6d:7c:ca:fe:09:f2:76:e9:
0b:83:9c:b4:4b:3d:da:04:ca:ad:4f:1b:a4:67:8d:
3e:33:e6:ff:e7:e0:59:2f:75:22:97:71:6b:21:4b:
76:2f:c3:f4:f1:fb:c2:a8:ee:4f:52:8b:e3:e4:55:
37:1d:b2:5d:ad:80:07:46:78:7b:c9:8b:36:d7:32:
fe:14:c9:ed:88:96:a0:ea:d6:4a:be:d9:28:85:5c:
a0:32:17:a3:c2:11:eb:55:82:cf:fe:45:ec:ee:8f:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:1D:A2:57:6A:52:99:AC:BA:7A:AD:71:E6:AA:50:06:0C:7E:59
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:73:80:2b:f0:68:06:86:33:2b:92:8f:78:74:33:39:82:38:
6a:9e:3b:6b:e8:ae:af:e5:22:70:02:b3:42:b8:19:33:c8:ce:
92:4a:4a:5b:af:10:38:d6:85:b9:55:44:17:a1:36:d3:6f:32:
93:8f:2b:73:e6:32:7e:ba:68:64:d2:41:1f:df:bb:d0:9a:93:
5c:56:b6:9c:a1:2b:82:2a:98:4b:cd:81:39:1f:de:39:1e:e7:
0b:e9:f6:62:ba:e0:ef:8a:cb:48:e1:f3:19:c0:27:26:92:45:
32:90:56:79:1e:db:78:a5:51:79:59:2a:72:3d:1c:f4:06:c9:
b0:34:ed:ae:96:51:14:46:0c:be:20:d1:90:2b:eb:eb:e8:2c:
86:0c:23:06:95:62:db:02:b2:2e:a0:94:a6:2e:01:7d:1a:a1:
ff:7e:4b:50:89:59:fa:72:9b:47:98:5b:a2:9b:e8:b1:e2:e4:
bb:f0:33:e1:a2:8c:aa:51:b0:af:aa:f9:ec:d2:8e:13:0c:4c:
f3:1c:f9:28:ba:ac:e0:6d:72:42:3c:96:95:45:4c:b9:e4:a7:
37:77:f8:cf:90:ef:71:f6:3a:63:20:2c:56:cf:fd:cf:24:b4:
88:f8:9b:e6:44:b5:14:fa:33:7c:60:d1:98:e7:aa:b0:06:3a:
32:86:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:55:26 2025 by rpki-client