Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: L3Oez9X4YCGmykjBsKsw53WF8EJni394lTzy7i9Qvxs=
Subject key identifier: EC:FC:56:BC:8D:5C:97:65:F8:81:D0:16:64:6C:00:00:48:DD:BC:86
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 01984965C46E57EFA18B35FCE10EDB9B9A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0D13
Signing time: Sun 27 Jul 2025 01:01:02 +0000
Manifest this update: Sun 27 Jul 2025 01:01:02 +0000
Manifest next update: Mon 28 Jul 2025 01:01:02 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: +RM2PaEkrweULi7+UcApDcXpUzlsQV6dBZEtJxe8zxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c4:6e:57:ef:a1:8b:35:fc:e1:0e:db:9b:9a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Jul 27 01:01:02 2025 GMT
Not After : Jul 28 01:01:02 2025 GMT
Subject: CN=ecfc56bc8d5c9765f881d016646c000048ddbc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:2c:9c:d6:65:74:29:64:49:c5:ca:fc:58:
25:1c:cf:37:33:9b:a1:c8:e2:d8:2b:d4:19:b1:72:
26:56:f8:bd:b9:44:73:6c:a1:56:e0:cb:54:f0:02:
e5:d2:4f:65:b2:ba:6e:9a:2a:a9:a6:6c:9f:68:5f:
7a:bc:38:6e:b9:fa:a8:e8:22:f2:d7:0a:d8:42:bb:
7a:a0:6f:83:5d:55:b5:92:ae:9f:8a:6a:7e:00:a4:
42:08:34:75:10:d9:4a:d1:8e:44:10:1f:23:78:6a:
47:b2:c3:70:4f:93:ec:24:64:e4:eb:85:4c:84:bf:
22:5b:70:45:e8:1d:99:06:ea:29:41:07:f4:34:25:
e0:0e:b3:09:0a:21:33:8e:26:55:7a:8b:ed:ba:4b:
b5:59:43:9b:8f:97:33:56:74:ce:2a:66:29:ff:d5:
63:e3:28:f3:2a:8d:4f:87:76:2d:9d:27:e2:a9:b0:
09:6c:f2:5b:b1:1e:35:fd:fa:6b:25:11:92:34:af:
38:e5:de:e8:f8:91:bf:a4:28:b9:ff:8b:da:cc:44:
56:c9:c8:d4:d0:7a:27:54:c9:f5:8f:20:74:35:20:
47:d4:05:8f:d9:fc:31:bc:79:9f:7f:e7:4c:7c:61:
ed:2c:87:52:3d:66:d4:e1:63:24:70:9e:a7:bc:08:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:56:BC:8D:5C:97:65:F8:81:D0:16:64:6C:00:00:48:DD:BC:86
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d7:f4:89:17:b5:27:6f:c6:80:b8:ab:70:29:da:5d:73:dd:
ac:69:90:20:dc:c7:1e:a1:e7:f1:30:85:2b:ef:b9:da:b4:16:
c7:e9:10:ed:4e:f7:1a:5f:b0:1a:54:ae:5f:6c:77:f8:27:27:
41:41:49:b4:9d:8a:8e:36:4c:c2:dc:28:4a:ed:54:63:ce:39:
ae:ac:cc:23:17:cf:e9:dd:21:a3:9c:74:0f:68:8c:45:c6:3e:
b8:20:84:1c:15:23:10:10:36:0c:30:ca:91:86:96:af:4b:a2:
11:41:c8:16:56:40:71:3f:7b:48:9a:66:a7:28:27:87:07:44:
d6:62:f7:f3:55:2b:29:52:ed:6b:c1:3e:34:9e:34:9b:00:30:
89:6d:03:33:65:50:89:ab:45:84:15:41:04:29:ee:0f:39:d0:
94:43:23:fd:1e:6c:99:15:7a:f7:b8:75:cc:9b:bb:b6:17:57:
ec:7c:7f:7d:22:dd:46:b8:7d:ae:38:fd:c7:06:17:87:0e:22:
28:97:89:d4:eb:08:a3:23:24:61:40:e5:06:f0:c8:1e:5c:2c:
97:04:c2:1a:b8:5c:31:3a:d0:56:a5:d7:8a:31:e2:b2:bb:2a:
b1:92:bf:23:f7:bf:42:02:32:8a:9d:1e:2c:a3:07:18:13:ce:
90:aa:24:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZcRuV++hizX84Q7bm5p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODZjMzM5YWFjODhkZGYzMzQzMGU0NmJjOWY1ZTA3ZWZj
ZGFlYTgwHhcNMjUwNzI3MDEwMTAyWhcNMjUwNzI4MDEwMTAyWjAzMTEwLwYDVQQD
EyhlY2ZjNTZiYzhkNWM5NzY1Zjg4MWQwMTY2NDZjMDAwMDQ4ZGRiYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDosnNZldClkScXK/FglHM83M5uh
yOLYK9QZsXImVvi9uURzbKFW4MtU8ALl0k9lsrpumiqppmyfaF96vDhuufqo6CLy
1wrYQrt6oG+DXVW1kq6fimp+AKRCCDR1ENlK0Y5EEB8jeGpHssNwT5PsJGTk64VM
hL8iW3BF6B2ZBuopQQf0NCXgDrMJCiEzjiZVeovtuku1WUObj5czVnTOKmYp/9Vj
4yjzKo1Ph3YtnSfiqbAJbPJbsR41/fprJRGSNK845d7o+JG/pCi5/4vazERWycjU
0HonVMn1jyB0NSBH1AWP2fwxvHmff+dMfGHtLIdSPWbU4WMkcJ6nvAhC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz8VryNXJdl+IHQFmRsAABI3byGMB8GA1UdIwQY
MBaAFNKGwzmqyI3fM0MORryfXgfvza6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMTY2ZjgtNjMzYy00YjNiLTljNzAt
NGE2NWFlMjVjN2RiLzEvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMTY2ZjgtNjMzYy00YjNiLTljNzAtNGE2NWFlMjVjN2Ri
LzEvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNf0iRe1
J2/GgLircCnaXXPdrGmQINzHHqHn8TCFK++52rQWx+kQ7U73Gl+wGlSuX2x3+Ccn
QUFJtJ2KjjZMwtwoSu1UY845rqzMIxfP6d0ho5x0D2iMRcY+uCCEHBUjEBA2DDDK
kYaWr0uiEUHIFlZAcT97SJpmpygnhwdE1mL381UrKVLta8E+NJ40mwAwiW0DM2VQ
iatFhBVBBCnuDznQlEMj/R5smRV697h1zJu7thdX7Hx/fSLdRrh9rjj9xwYXhw4i
KJeJ1OsIoyMkYUDlBvDIHlwslwTCGrhcMTrQVqXXijHisrsqsZK/I/e/QgIyip0e
LKMHGBPOkKokgg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:52 2025 by rpki-client