Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: P9zXTwNQ5TlDsLsNZ8lm9avy6mEulYG0eKsGZBt1XWY=
Subject key identifier: EE:56:F7:33:23:7D:96:4C:21:37:C6:88:C6:9F:AF:E3:AF:38:41:94
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019695605174735BD308921578B2C4C8357B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0ABA
Signing time: Sat 03 May 2025 09:00:39 +0000
Manifest this update: Sat 03 May 2025 09:00:39 +0000
Manifest next update: Sun 04 May 2025 09:00:39 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: Fzg5j0ON+jHD1ld347mr2NUTCnjFwdMM4XD5LCYwaWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:51:74:73:5b:d3:08:92:15:78:b2:c4:c8:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: May 3 09:00:39 2025 GMT
Not After : May 4 09:00:39 2025 GMT
Subject: CN=ee56f733237d964c2137c688c69fafe3af384194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:48:7b:47:fe:15:eb:85:2a:ed:71:99:c0:
f5:ca:15:a1:08:43:2f:9a:1f:4c:90:1d:9a:10:dc:
76:73:be:ec:81:3c:4a:99:b7:4f:1b:90:a3:47:bc:
32:71:cd:ae:7d:83:ed:ba:8d:ee:ec:8a:af:5b:80:
84:3b:ba:1b:08:c1:36:d1:21:72:8f:b6:7f:0f:50:
4f:4c:01:93:7b:a6:24:0c:b0:14:d0:4e:3d:58:77:
c7:eb:9b:28:dc:44:90:94:68:ae:d3:49:01:a5:63:
fd:24:19:92:c5:ba:59:5c:82:79:d6:85:c7:e4:44:
4e:f6:c9:fd:9e:57:fa:f2:da:2a:53:0d:60:f2:1f:
f7:06:01:91:ab:5f:b1:8c:7f:a4:99:88:67:d9:dc:
64:cd:9c:65:8f:09:4b:43:77:20:a1:dc:3b:0c:19:
0d:83:bd:94:72:30:17:3e:7d:29:95:52:4b:81:cb:
86:d3:12:7d:bf:47:ff:fa:82:5d:ed:97:d2:84:8b:
73:88:4f:7d:58:a3:b1:50:1b:b1:44:04:b2:20:29:
75:89:52:86:e9:c7:3c:f1:62:d1:23:51:52:1d:c9:
4b:4b:4f:0b:cc:8b:6c:1d:33:e7:e7:74:75:12:51:
06:5a:cf:0b:c7:d5:ad:53:40:47:16:45:1a:a5:fd:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:56:F7:33:23:7D:96:4C:21:37:C6:88:C6:9F:AF:E3:AF:38:41:94
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a7:4d:2f:22:57:7f:be:94:8d:37:5c:ce:27:bd:f3:e8:cc:
62:ea:ea:9e:6b:f0:a3:97:28:72:f3:49:c8:60:b3:4f:af:3b:
48:d8:58:74:e7:ba:9f:73:66:0f:ad:b7:c2:a3:de:26:77:cb:
2a:48:1a:61:11:a9:5b:4e:69:73:54:d4:61:ff:73:4f:7f:dc:
59:c1:7d:3e:e7:b7:db:98:85:bb:f8:c1:0e:a3:73:3f:95:62:
84:bc:de:1f:cc:4b:19:a7:4b:5e:55:9b:6a:89:81:43:cc:f7:
ba:f8:ba:1a:c0:5d:d9:53:c8:47:db:d0:10:ca:ea:e3:0c:48:
f8:79:df:c6:e4:f0:e6:84:53:f3:14:e8:ed:58:a3:27:8c:fc:
7f:00:4f:9f:b3:2f:c1:cd:bd:4d:00:b2:80:45:71:98:c8:f1:
21:20:2c:42:f9:d3:11:4c:ab:40:ce:2f:ef:69:14:60:27:64:
19:2e:24:0e:5e:9d:c8:99:a2:c0:f3:64:3c:96:6b:02:58:7b:
69:22:6a:0f:ca:47:80:d8:b3:a7:82:52:8a:6b:d0:33:d9:4f:
79:52:2b:ca:76:17:52:00:a9:69:62:21:72:93:14:8e:7f:7c:
f5:35:74:1d:f5:ca:af:b8:9b:e8:8d:52:87:d2:a8:c7:5f:e5:
ba:fc:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:13:47 2025 by rpki-client