Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: 7JGZpw/b5MllL+tJJIExiT+p3AAyiSBUuhzgsaGazmA=
Subject key identifier: AD:74:3B:C6:FB:8D:72:CB:10:EB:B1:B0:1B:B5:D5:A9:56:27:E9:3F
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 0198A04D9A00858850D599AB8A3078089E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0D40
Signing time: Tue 12 Aug 2025 22:01:36 +0000
Manifest this update: Tue 12 Aug 2025 22:01:36 +0000
Manifest next update: Wed 13 Aug 2025 22:01:36 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: 8gv5q0Pg6y7/O8a/RepwFsSTYd7wVUG5ZMbQekLuHVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:9a:00:85:88:50:d5:99:ab:8a:30:78:08:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Aug 12 22:01:36 2025 GMT
Not After : Aug 13 22:01:36 2025 GMT
Subject: CN=ad743bc6fb8d72cb10ebb1b01bb5d5a95627e93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:ed:df:40:b5:4c:20:40:32:00:5b:50:da:
e5:79:78:40:f7:83:2a:74:6e:37:2c:33:ea:e5:66:
fa:4f:f3:84:b9:93:2a:c4:48:2f:00:5e:3a:52:15:
db:e2:1d:07:56:da:c8:a3:9c:25:2f:f7:94:c1:69:
08:d8:80:a3:46:a5:fd:45:11:2b:5b:53:9c:85:50:
7f:a5:4a:85:6e:a9:c3:89:cf:11:50:e9:0f:99:7b:
82:cf:89:56:10:f4:a3:09:97:8a:17:80:a3:b7:d9:
b9:9d:80:cb:0e:63:2b:6c:7f:42:9b:0d:f7:93:a2:
1f:70:1e:46:0f:05:43:2b:33:43:c9:00:2d:56:f0:
83:25:75:9d:3c:52:07:12:3c:22:c2:4e:84:d7:a4:
57:eb:c2:ae:e8:5f:34:15:3a:93:c5:b1:4f:20:70:
03:81:f3:7e:74:5b:8f:6b:38:a9:31:49:9b:80:51:
4a:9f:4e:71:4e:59:cb:9b:cd:97:fb:73:e5:24:a8:
11:a6:bb:b3:03:7f:4f:ad:3e:d3:32:e6:b9:2b:9c:
39:46:ad:31:d0:19:07:8a:1e:7c:48:87:b9:7d:a2:
07:99:9b:c4:0f:ad:7f:1f:bc:63:54:48:06:fc:55:
83:d3:c0:8a:cc:e5:03:53:fb:af:1a:5b:de:50:27:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:3B:C6:FB:8D:72:CB:10:EB:B1:B0:1B:B5:D5:A9:56:27:E9:3F
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:03:e4:48:55:04:19:7e:37:4b:12:3e:2a:44:4d:dc:69:
64:af:a0:53:38:45:b4:2a:11:e3:57:0a:86:a3:4a:ee:9d:fd:
d4:07:75:8c:fc:33:1d:b7:30:b4:18:e1:04:9e:55:6c:63:0d:
63:18:8e:c0:bb:cf:43:cc:d4:2b:e3:60:ff:bd:9b:85:3e:e6:
5e:38:44:cf:ee:aa:a0:ba:0f:c9:3b:6a:55:82:2b:d1:30:3f:
ff:55:10:7a:c0:d9:ac:ee:b0:88:6b:37:ca:79:4d:08:b6:cf:
8b:73:04:d4:0c:41:d1:06:12:98:c0:ec:5f:6a:8d:f0:da:b6:
08:ba:42:67:10:a7:19:af:64:d9:1f:ee:ac:d4:6b:30:3d:05:
5d:ba:99:35:52:49:47:9f:88:5a:fe:a9:11:21:8f:ff:0b:63:
72:b1:a5:aa:eb:ed:18:91:06:14:30:9d:37:a6:0a:7e:4e:e9:
46:7c:55:20:39:a8:50:38:9e:fe:8b:cd:d3:fa:32:78:a0:d7:
d5:48:22:fc:64:a4:4e:45:29:41:53:6e:14:7f:86:77:0e:9e:
1f:f8:41:24:a7:d7:e9:17:b1:54:62:83:ee:31:d2:3d:f1:36:
a1:b5:3d:75:0b:40:54:57:72:cc:e6:16:5c:7e:bd:03:29:f0:
b1:6b:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:38 2025 by rpki-client