Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: IFRxgTPMLWqeZ1z65KBs4vQYkk5Il/pYBb6Jao8uhdE=
Subject key identifier: 9C:4E:DF:50:E3:FB:38:07:77:8A:E7:46:E1:57:53:CD:D3:66:68:37
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 01969ABD5624C7A7AC12F3FAFADD9039FB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0C34
Signing time: Sun 04 May 2025 10:00:21 +0000
Manifest this update: Sun 04 May 2025 10:00:21 +0000
Manifest next update: Mon 05 May 2025 10:00:21 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: /5JFplAiZfqmJDtv7U7F/BRnpDqFP4cEWqPxOEkkTU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bd:56:24:c7:a7:ac:12:f3:fa:fa:dd:90:39:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: May 4 10:00:21 2025 GMT
Not After : May 5 10:00:21 2025 GMT
Subject: CN=9c4edf50e3fb3807778ae746e15753cdd3666837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:f1:e9:0b:ef:c8:72:c4:02:d9:5f:dc:48:
49:6b:e0:30:e4:e5:b4:1d:94:da:6a:fe:4c:80:b9:
05:ff:9e:15:b0:71:89:73:76:79:e3:43:b5:63:a4:
9b:e7:03:34:e2:b6:2d:68:3d:9c:09:1f:bc:30:c2:
5a:38:e4:59:e4:32:86:bc:46:fd:60:81:20:2e:e1:
8a:c4:77:29:ae:6c:44:1c:9c:97:33:9b:f5:63:57:
33:a6:45:56:18:82:bf:5b:31:7e:25:f7:2a:7a:93:
53:d7:44:0a:2c:97:9d:17:af:a4:68:d1:28:8f:c4:
16:a7:90:9b:69:40:5b:78:c6:09:cc:6f:0b:5c:b0:
a2:82:4a:11:ae:eb:c0:58:75:26:50:51:7f:42:ce:
3d:f9:2a:48:2c:37:aa:5b:8f:1d:b9:e8:be:7b:f2:
79:d8:80:e8:ea:59:95:13:0e:0b:68:3a:b0:1e:2d:
bd:eb:10:bc:65:ee:22:ce:d0:56:f3:22:d1:49:c6:
11:86:f9:be:ec:94:f3:de:33:16:0b:06:66:96:64:
e6:a8:86:ad:e7:93:ab:a0:0a:58:22:27:a1:14:08:
9d:10:99:ce:cc:a3:19:dc:2b:6d:25:99:10:79:72:
29:f5:53:e2:cc:75:09:d6:a0:08:a8:d5:3c:cd:75:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:DF:50:E3:FB:38:07:77:8A:E7:46:E1:57:53:CD:D3:66:68:37
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:82:67:ed:f3:4f:bc:a8:58:48:83:34:89:98:1b:9f:92:52:
9f:63:10:b1:2c:98:67:c1:e5:cd:0d:96:6d:67:4a:1f:ea:26:
cd:74:86:bc:94:ab:14:53:ba:e8:fb:9f:3b:3a:14:bb:d4:ca:
cf:af:f2:b3:7f:b0:dd:09:ad:7c:85:db:78:69:49:cb:40:41:
82:ba:aa:e1:17:5d:7b:73:80:7f:d3:ab:00:14:b4:ef:56:64:
b2:d4:9c:85:e5:c7:e2:91:1f:c6:7b:63:44:a8:0e:08:8b:13:
84:13:6d:3f:fb:88:75:ba:bc:15:a8:bb:36:c3:fe:9b:35:76:
fb:a6:bd:e7:10:e7:9c:d7:98:b8:2a:01:36:2a:fc:d2:6f:25:
9c:d4:b3:0f:ec:d9:6c:5b:0c:c4:9e:ab:67:0d:1e:75:e4:27:
bc:9a:d5:f1:c7:53:70:90:86:34:3d:50:e9:fa:33:7c:63:a5:
c6:3a:2a:e6:f4:d1:c6:63:5e:c1:67:dd:c5:0c:c9:30:2b:67:
90:74:d1:53:50:65:da:7a:57:0f:78:69:a8:5f:3d:90:72:38:
30:8e:56:3a:f0:3b:cc:a2:22:5d:27:60:e1:e2:d2:21:0e:7f:
02:9f:25:b1:48:81:d5:59:a4:50:43:53:e1:a9:53:97:ed:71:
d7:4f:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:03:06 2025 by rpki-client