Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: VW8ILirfyQKSxOFxh+GqqJi51LzPN/jAwcvJgIF9S7k=
Subject key identifier: 9A:61:94:8A:11:BE:5F:15:70:7C:86:CC:56:F2:87:03:0C:51:8F:1C
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 019776E5E0EE9AED226B21E5A45F3DD13056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 0D98
Signing time: Mon 16 Jun 2025 04:01:06 +0000
Manifest this update: Mon 16 Jun 2025 04:01:06 +0000
Manifest next update: Tue 17 Jun 2025 04:01:06 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: tP/9OTdC0m7GfxRWmwrgHwYoHyAmCJsYzZapEqQyKzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:e0:ee:9a:ed:22:6b:21:e5:a4:5f:3d:d1:30:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Jun 16 04:01:06 2025 GMT
Not After : Jun 17 04:01:06 2025 GMT
Subject: CN=9a61948a11be5f15707c86cc56f287030c518f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:c3:44:de:0b:6f:a5:b7:e9:2a:fd:1a:1e:
99:0c:9d:2c:bf:0e:0e:d6:ce:33:1f:69:20:da:f0:
a8:94:4f:5d:04:2b:11:d0:35:97:4f:33:7d:93:2b:
dd:c0:5c:71:57:7a:06:8d:10:c2:fe:b1:26:35:5f:
6e:d2:60:38:bb:3b:89:8d:1e:06:92:06:3d:8d:21:
6e:86:89:6a:0f:77:3c:eb:e5:1e:24:86:e3:68:4f:
75:80:45:34:18:98:70:65:38:7c:39:86:c5:dd:3a:
bd:57:f9:1f:d0:ae:b3:2a:79:a0:ab:6a:6d:e6:39:
7f:99:01:4e:e6:6e:e5:c6:72:e0:4f:b1:9f:c6:0e:
f8:45:8d:44:d4:3b:83:7c:22:06:24:a8:0e:1e:13:
99:51:53:d8:93:8f:9a:99:b6:2d:d3:d1:81:a2:8e:
04:a8:8b:e1:eb:97:d9:c4:13:5f:ed:47:aa:47:49:
93:ed:65:aa:df:0e:c0:32:1c:65:ef:4a:c6:69:f2:
57:1f:d7:c4:91:99:10:e4:16:45:97:6c:cd:3c:20:
47:d1:3a:bb:fc:21:97:b8:7d:f0:7e:ed:7e:28:70:
6a:c9:e8:e3:37:d7:33:73:34:90:f8:08:e0:1f:2c:
57:f2:84:20:69:f7:31:f5:e3:89:85:0a:5c:0f:6a:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:94:8A:11:BE:5F:15:70:7C:86:CC:56:F2:87:03:0C:51:8F:1C
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e1:80:fe:49:98:b3:f9:25:44:77:2c:dc:c3:be:f7:14:01:
6f:de:04:3d:d3:c0:e0:3c:1e:ff:03:6d:8c:37:9c:7d:9a:37:
55:ff:f5:48:2e:45:5b:06:85:87:13:40:ca:e6:7b:7a:ce:90:
7f:66:6b:35:9f:d8:d9:7d:24:a9:20:a1:94:3f:29:73:43:96:
ec:df:48:8f:4c:ce:49:03:83:66:a0:08:7b:2b:9a:d6:f2:67:
1c:53:35:52:b7:35:95:90:45:26:ed:e1:f8:46:48:53:8b:54:
5a:af:9f:b3:47:78:bf:60:48:03:55:21:66:5a:48:18:fe:66:
97:c4:62:0e:b5:e1:48:40:f5:51:a7:22:8d:79:5d:82:66:05:
fc:63:a1:fd:d9:6d:3a:ba:ed:b9:75:01:c2:e9:9c:9b:dd:5e:
1d:8e:81:75:a2:1a:93:8f:3b:b2:b0:f2:96:d2:17:f6:b2:98:
c3:61:32:c9:b7:f3:a4:8b:24:9c:cf:04:84:22:c2:df:04:00:
9e:8e:19:05:1b:88:8c:74:c4:33:aa:c7:11:3b:e5:60:cc:8d:
9f:24:16:bc:57:75:6f:08:d8:ef:48:6e:ad:41:98:6a:c1:4d:
4d:e2:67:f6:5a:d6:72:d5:e6:81:de:41:f1:a0:00:c3:68:73:
f3:2b:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:33:01 2025 by rpki-client