
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: o0IDJ81fNQQimPapEzXGyc2rDZWxdnsFupc8q9YYD5I=
Subject key identifier: 6A:CC:A4:FF:64:57:61:9D:BA:D7:7E:0A:A7:5D:DE:1C:41:20:D8:53
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 01988B103B4501714650D20A33B29B07C00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 0E27
Signing time: Fri 08 Aug 2025 19:02:33 +0000
Manifest this update: Fri 08 Aug 2025 19:02:33 +0000
Manifest next update: Sat 09 Aug 2025 19:02:33 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: LNTsGpabUirTVV2JPdLVZXojsdg3nN5EINM9IeMBSVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:3b:45:01:71:46:50:d2:0a:33:b2:9b:07:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Aug 8 19:02:33 2025 GMT
Not After : Aug 9 19:02:33 2025 GMT
Subject: CN=6acca4ff6457619dbad77e0aa75dde1c4120d853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:90:6b:15:01:a4:65:b6:68:20:ba:60:ba:
fb:2c:c8:73:fa:98:60:21:33:8c:5a:17:81:67:b5:
e5:d0:00:35:05:86:ea:7c:63:52:6c:34:35:24:18:
38:a4:a9:92:81:46:92:6c:fa:fd:86:7c:14:65:b8:
91:b1:24:15:c5:af:3a:b6:1e:a0:c5:60:25:50:64:
7d:ce:f2:92:c3:fc:2e:4e:46:d0:56:25:df:f4:79:
2f:d3:a1:7e:3d:bc:02:b6:7c:03:41:a5:e1:0e:b1:
46:9a:ff:1b:b5:4b:e6:dd:89:18:36:75:b0:de:52:
84:71:a8:c3:8b:fd:fd:e0:7d:da:a0:11:12:d1:6e:
02:32:be:65:9e:4f:df:ab:25:36:9f:93:33:4c:d3:
20:9e:f9:aa:57:88:09:1c:2f:68:74:8f:8c:c3:ff:
40:de:dc:1f:42:3e:cd:f7:7d:b5:00:d2:a4:82:cc:
ea:96:b3:42:3e:64:f8:37:db:9f:01:b7:b3:32:d9:
d9:0d:c3:3b:d9:69:e1:cd:7c:f7:cb:ef:d4:25:b0:
26:20:b0:7a:6c:a9:31:fc:39:28:d9:84:9d:7f:ea:
27:27:3f:89:5e:cb:1f:9a:2e:b6:ab:11:68:ab:d8:
89:17:52:92:8d:d4:9a:c7:80:aa:07:36:92:2d:2d:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:A4:FF:64:57:61:9D:BA:D7:7E:0A:A7:5D:DE:1C:41:20:D8:53
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:78:66:97:c4:5c:6d:c2:f8:04:cb:cb:24:da:9b:37:73:91:
e9:05:0f:0e:f1:98:f0:28:14:f5:69:4c:01:90:c5:25:b0:b6:
58:73:0b:e2:cb:94:33:84:de:f5:80:95:19:8e:64:6f:b1:0e:
91:6d:c9:e9:c5:0c:3c:03:8a:29:5c:8c:de:14:94:e2:c4:94:
a5:db:f0:ea:b0:98:ae:c1:44:90:93:0f:f9:20:1e:06:52:f2:
b6:32:9a:18:cc:79:3c:37:e8:d1:8c:71:ef:8f:7b:f4:bd:ba:
5e:a4:7f:8a:f4:16:03:82:64:fa:e6:46:b2:d1:70:22:9f:8b:
9d:ba:b4:6f:fa:61:24:53:29:f4:67:d0:7f:71:c2:7a:f0:20:
09:0a:57:9b:f1:55:1b:2b:4b:30:0c:94:21:98:26:d0:16:5c:
37:67:e0:54:58:24:23:dd:60:d6:7d:fe:7f:9a:9b:cb:60:80:
ed:18:02:00:ff:c2:14:54:df:57:ab:8e:7a:ca:74:34:c6:ef:
34:b1:9d:59:a9:dd:1c:53:41:50:2a:aa:15:7e:6e:e7:4e:6c:
a5:60:4f:03:4c:00:f2:4a:77:5d:b4:46:f0:8e:3f:4c:c6:f4:
7e:c4:fb:1c:bf:4c:c0:3c:b9:cd:48:df:1d:fc:ee:ab:21:89:
b5:ca:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:34 2025 by rpki-client