Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: PMmyazPD0oJvDUmgalozTINy9t09Q1WbY2JXpqyQK/c=
Subject key identifier: 80:31:B8:CF:F7:C0:C6:51:1C:B0:CA:92:EE:2F:64:4D:3A:AB:81:49
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 01964A0FFCF5B3B6B322249CEDAE5372A7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 133D
Signing time: Fri 18 Apr 2025 18:01:23 +0000
Manifest this update: Fri 18 Apr 2025 18:01:23 +0000
Manifest next update: Sat 19 Apr 2025 18:01:23 +0000
Files and hashes: 1: 5vBO9ldNAgQorlXIjJJIuksBB3E.roa (hash: ySv9QcbHKkFQxdG6EN90SAbcPMFf6P8uzGjssVVfzx0=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: vQvARMYJNXun7ujfiOqC9RzUHYC2C/Rn8IKLwjsxENs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:fc:f5:b3:b6:b3:22:24:9c:ed:ae:53:72:a7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Apr 18 18:01:23 2025 GMT
Not After : Apr 19 18:01:23 2025 GMT
Subject: CN=8031b8cff7c0c6511cb0ca92ee2f644d3aab8149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:31:6f:b1:e8:60:b8:13:51:14:5b:de:11:
0e:c2:4f:e7:b2:4c:4b:a0:cc:c6:04:24:b8:35:81:
20:db:3e:83:8c:42:d7:c0:37:f9:c3:ce:2b:90:fd:
ca:d9:b3:19:d4:db:47:64:bc:ad:3f:c0:bc:84:4a:
84:a9:a1:f4:7a:da:eb:30:9e:d4:0a:76:48:c2:01:
9c:64:1d:7b:a2:4c:f4:09:1d:78:0e:44:9a:e0:e0:
ff:4b:ec:94:4b:ef:6d:56:b5:53:cc:d1:bc:8f:05:
d1:e8:6f:14:f9:7b:bc:3c:13:14:85:c3:d2:fb:1e:
f7:10:06:a4:06:49:c8:7b:e8:48:8a:25:c5:cd:6e:
7f:a2:a2:84:6c:12:2b:7c:3b:8c:7d:81:17:ac:d5:
65:33:f2:dd:52:0d:93:8a:3b:d0:6e:d6:34:7e:9e:
5c:15:c1:47:44:f3:bd:d9:b3:87:d4:e9:33:d6:a7:
3b:23:68:92:f5:62:06:ca:2e:77:cc:7f:a0:d3:01:
66:ed:d8:6c:97:f7:31:c2:18:99:52:90:42:a6:d2:
ab:9c:60:6a:7a:a1:9f:2a:e5:7f:04:6a:23:fc:de:
a7:70:4e:53:19:bd:b6:aa:03:20:b6:4d:78:23:bf:
36:c4:91:a6:95:0e:4f:50:d2:2e:a0:ba:2d:ee:e3:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:B8:CF:F7:C0:C6:51:1C:B0:CA:92:EE:2F:64:4D:3A:AB:81:49
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:93:3c:9a:40:d6:7c:70:03:f8:05:26:23:0a:24:72:f1:
08:ac:2e:4b:f8:63:3b:2b:d6:55:11:c7:5d:b1:5d:11:c5:c1:
45:84:2d:53:c6:49:15:87:ae:cb:9a:d1:42:2a:2d:fe:3f:06:
cf:22:fd:1e:a0:93:9f:89:f1:e3:cd:7e:34:bf:cc:7f:cc:38:
20:bb:09:ac:31:06:ab:15:4c:9b:a4:7b:b8:f4:1f:3f:81:70:
91:c9:54:3f:c4:e1:86:37:bf:c8:35:37:d7:e4:26:f7:e3:52:
8a:be:83:ed:49:4e:da:78:63:4f:b6:bc:ca:21:3d:e2:2c:f7:
91:cf:32:cb:c4:e0:89:60:96:13:0a:eb:ed:a0:52:df:1e:09:
00:39:25:0c:bb:f7:20:66:6c:b1:0a:d7:8e:1a:84:fd:76:8a:
a0:99:36:4c:aa:c6:49:d9:2b:3a:21:a4:3e:18:bd:b4:d1:7b:
e4:d5:39:34:9e:13:2d:dc:ab:d0:41:df:10:c2:90:b4:a1:e3:
d5:84:b8:73:42:fb:2f:a4:73:1a:b5:49:b4:59:40:3a:4f:4c:
6c:74:9f:20:44:ca:95:b9:4b:14:fd:ae:8b:21:f6:ee:c3:81:
95:1a:c8:be:ad:40:63:7e:e6:dd:e4:23:73:18:20:5c:b6:61:
d0:ae:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:54 2025 by rpki-client