Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: 2tEIjP3u3h6aKyy2jXfLssnHwfdyoEMTEn+sNzVk5PI=
Subject key identifier: 89:3F:2E:6D:48:80:52:30:D2:85:3F:5E:09:2F:2B:0E:32:51:07:B5
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 01974EC562865DC8E97383094048AF9025BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 147D
Signing time: Sun 08 Jun 2025 09:00:47 +0000
Manifest this update: Sun 08 Jun 2025 09:00:47 +0000
Manifest next update: Mon 09 Jun 2025 09:00:47 +0000
Files and hashes: 1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: bt5noNLXOqx6f6UlJlPmKzSbbC5ZNgZ12wJ8NSMNXIc=)
3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:62:86:5d:c8:e9:73:83:09:40:48:af:90:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jun 8 09:00:47 2025 GMT
Not After : Jun 9 09:00:47 2025 GMT
Subject: CN=893f2e6d48805230d2853f5e092f2b0e325107b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:48:5e:d5:69:8f:4c:52:4d:46:1d:d2:68:
63:2a:d8:ad:b0:2f:aa:a6:13:42:1a:b9:10:ec:1a:
51:7a:fd:cb:25:57:e2:7a:b9:cd:db:3b:37:15:20:
2d:43:46:14:14:81:c9:8a:5f:a5:93:48:03:9b:07:
00:c7:71:68:14:1e:5e:f4:d0:e9:70:64:01:00:f1:
62:a5:e4:cd:fa:5b:25:03:53:da:e4:a8:63:53:60:
a2:35:a1:e7:5a:f6:f7:74:e6:06:09:c3:73:ce:de:
7b:6d:e5:a2:94:a0:9d:8a:95:1f:f1:52:b2:97:16:
b8:e4:96:9a:77:f6:32:e0:92:9e:3d:6a:b3:86:1b:
50:db:73:e3:f5:4e:b4:a9:95:81:b5:3a:2a:19:d9:
f7:f9:b7:a3:35:ca:cc:22:e2:d2:7f:98:18:eb:34:
43:48:6f:0c:31:30:2b:ee:07:c4:8c:36:c0:69:f3:
5e:bd:cc:f3:93:68:51:ee:73:45:c6:dc:fb:04:e8:
e4:b5:d2:91:e9:b7:d6:d1:91:8f:12:03:75:14:3c:
f6:7f:03:a4:0a:db:05:f7:15:4f:ea:58:c3:56:b7:
4f:53:95:ef:8d:60:91:d2:0d:bc:2e:c8:d0:c6:18:
b9:7f:24:a9:6f:bc:63:ec:f6:e6:2a:7a:59:c3:aa:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:2E:6D:48:80:52:30:D2:85:3F:5E:09:2F:2B:0E:32:51:07:B5
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6b:6b:f4:9f:21:86:a2:cc:24:77:1c:26:04:9a:af:39:f6:
bf:58:17:f0:11:a2:16:38:6d:c8:df:74:8c:6b:24:79:96:ea:
90:2a:b2:01:22:bb:74:e6:94:f0:73:08:2d:2c:ee:57:d8:e3:
f7:c2:90:75:6f:8c:53:75:d7:93:86:b6:e1:9a:16:51:2a:5f:
1f:b3:0b:9f:87:7f:86:2b:87:ce:5d:7e:f3:f4:06:d0:97:ba:
99:4f:9e:9a:98:24:74:2a:cc:28:22:7d:28:a7:08:11:7f:25:
d8:eb:b9:ab:41:af:af:f6:5b:72:dd:89:8d:58:47:b2:d2:ae:
98:de:20:ad:4e:ed:6a:7b:e6:e9:8a:22:eb:88:a3:20:bf:d6:
5f:af:7c:d9:3f:09:14:4e:a0:27:f5:6e:7c:4f:0b:cf:73:77:
01:4c:4f:9a:7f:60:4e:b0:ba:38:a8:e8:6d:97:c7:f1:c7:e8:
6a:08:a8:e6:40:a1:1f:81:27:5e:6d:d5:9c:4d:7b:47:de:ba:
71:e4:4e:60:d2:32:8d:1b:a2:7b:4b:c7:44:15:f7:43:f0:68:
fb:05:33:b6:39:cf:cf:c8:2c:e7:17:f8:90:44:ff:36:fd:82:
be:c7:59:1b:81:9a:49:c3:b9:73:3c:5e:74:c4:69:8b:41:b2:
e7:71:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:40:40 2025 by rpki-client