Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: 3SEO15y1wj/bNSXpi4Oq417qwyk0aS9Vv4IvUtgULJk=
Subject key identifier: 66:A0:13:AC:B1:44:D5:25:2D:51:48:78:6F:11:C5:D4:25:E4:07:81
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 01976D3DEF0BFAD9A3F9421EA0AEA55F15A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 122F
Signing time: Sat 14 Jun 2025 07:01:04 +0000
Manifest this update: Sat 14 Jun 2025 07:01:04 +0000
Manifest next update: Sun 15 Jun 2025 07:01:04 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: Z/qCLQaZKoCzXtW/8Y+uKSf9Xesctxzx0sZYpOot9dE=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ef:0b:fa:d9:a3:f9:42:1e:a0:ae:a5:5f:15:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Jun 14 07:01:04 2025 GMT
Not After : Jun 15 07:01:04 2025 GMT
Subject: CN=66a013acb144d5252d5148786f11c5d425e40781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:f3:8d:a5:8a:2f:42:c5:9f:4f:8d:c8:d9:
67:8e:57:7c:cd:7e:c1:5f:4c:db:c0:3a:5f:70:3c:
67:69:c5:8b:cc:69:38:ed:dd:ae:cc:ba:32:8f:62:
72:c4:5b:78:9c:40:0a:59:07:35:4c:75:0b:f5:f8:
47:e5:d3:3e:a8:ed:7d:d5:69:6d:20:1e:dd:b7:a2:
a0:83:85:b6:20:b6:3a:8a:72:b1:7d:8f:85:27:95:
5c:26:67:28:b5:ef:61:ec:d3:f1:12:c1:31:64:6b:
7c:c7:fc:3a:f4:9c:d1:2b:e9:7a:34:7c:2a:f1:0d:
6c:07:24:8e:48:ef:e4:23:83:8b:cf:e1:ee:a9:05:
5e:91:2f:89:d6:67:c2:92:bf:08:e5:95:bd:2a:99:
52:49:81:71:61:08:ea:40:51:b5:ab:3d:5d:44:41:
e6:77:d9:b5:e6:ea:b4:c1:d1:95:b7:5e:b6:24:77:
5a:79:8e:f8:41:2c:9e:e1:a3:6f:12:82:c2:d4:41:
c5:bf:c1:14:c6:2d:d5:0c:c3:80:7e:a1:ec:c3:af:
32:57:9f:a4:df:45:79:d3:98:29:39:d0:ea:44:70:
8d:dd:50:89:d6:bc:70:26:81:8d:e8:48:ec:25:f9:
73:2d:e1:52:b5:cf:13:74:27:df:0f:c4:fc:c8:29:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A0:13:AC:B1:44:D5:25:2D:51:48:78:6F:11:C5:D4:25:E4:07:81
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:63:61:5e:d1:8a:5e:84:c5:fd:7b:e3:92:e7:7f:8c:59:
e3:fd:e7:09:e7:ea:7c:74:e3:98:a5:02:26:4d:e8:d1:89:29:
0e:f9:77:7e:0c:23:6c:0d:b6:f3:34:70:a1:15:41:15:ab:a3:
02:32:5c:4b:ca:c8:8a:42:c7:16:b3:28:ae:f0:11:0c:03:9f:
23:8f:ee:6d:f2:46:9e:39:6d:28:47:86:94:bb:e8:d3:3b:96:
18:ba:b6:3b:31:c5:02:94:d9:47:80:ee:3c:ec:b5:ce:99:5e:
1c:d8:83:4d:ed:eb:c0:eb:31:8e:fd:2f:bf:61:52:9d:40:11:
5f:0b:fc:fc:f8:5a:76:0b:24:f6:81:86:30:79:92:76:c8:44:
dd:62:86:68:46:32:a2:fa:02:8c:8a:7c:44:bb:dc:ce:da:33:
f2:4d:f1:6f:a2:ea:59:90:3f:37:e0:55:66:44:d1:aa:85:bf:
d8:1e:cd:5f:3e:79:e8:3e:99:43:75:e1:69:d9:d4:32:61:40:
00:74:02:51:8e:92:a0:b8:13:e8:4c:49:e8:8a:9a:37:0e:9d:
f3:da:32:b4:fd:05:82:4b:32:f2:26:c5:fb:eb:29:c0:53:10:
a3:95:2e:f8:9c:a0:b4:de:e1:69:a6:fb:42:03:e7:bb:67:d2:
10:b2:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:31 2025 by rpki-client