Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier: FYlodtlPmTxDS4Q7ROc17tKmWTQmAVIuOX65Dcuoji0=
Subject key identifier: 33:D9:42:C4:CF:14:1F:E4:77:EA:90:D1:B3:71:58:4A:C8:3E:E2:23
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 01975C4A2EB4835230C53CECB4CDAE8C23FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 00:00:54 +0000
Manifest this update: Wed 11 Jun 2025 00:00:54 +0000
Manifest next update: Thu 12 Jun 2025 00:00:54 +0000
Files and hashes: 1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: WR2pSMYLU65ZEGWxCUWj9y2fgjHn6+S0vdBqDQB6eIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:2e:b4:83:52:30:c5:3c:ec:b4:cd:ae:8c:23:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Jun 11 00:00:54 2025 GMT
Not After : Jun 12 00:00:54 2025 GMT
Subject: CN=33d942c4cf141fe477ea90d1b371584ac83ee223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:d3:08:a7:33:a0:43:bd:e9:20:d8:34:4f:
53:c8:62:07:aa:7a:55:11:27:93:30:14:be:05:8a:
a7:b3:3d:30:93:68:62:82:7a:81:bc:9d:22:c7:c4:
30:36:e4:f3:68:b8:99:25:c7:8a:b2:f1:cc:00:15:
2f:7c:b9:2c:b6:3e:06:7d:0d:56:51:67:0d:8d:26:
89:8f:42:d7:7d:55:52:95:fb:5e:a9:3b:9f:d0:f8:
0e:eb:b1:a6:73:8b:1c:3d:1e:67:82:7a:18:4f:5e:
d5:e9:8d:04:4a:99:d8:dd:2c:66:73:d6:17:c8:5e:
13:51:91:f1:06:7b:fb:eb:ce:66:ac:ed:b8:8e:29:
a6:76:4f:70:91:81:4e:bc:ef:85:da:11:ad:95:95:
8e:09:16:b9:2c:fe:b8:ef:ed:db:db:b7:44:37:a0:
8f:54:1b:ca:35:5c:b9:ad:8c:39:ff:5e:77:4e:c5:
ae:76:2f:e2:05:66:b5:de:26:20:d8:c9:44:da:17:
02:41:7a:20:c9:08:ee:a4:f3:bb:6b:78:47:37:2e:
bf:90:c2:c5:30:3f:55:24:94:e2:fb:df:49:6a:ef:
d5:1b:96:84:f3:27:7a:c1:94:c5:6f:f8:85:e8:ce:
62:d0:c6:4f:0e:ef:06:28:19:fe:c5:6e:58:b5:c7:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:42:C4:CF:14:1F:E4:77:EA:90:D1:B3:71:58:4A:C8:3E:E2:23
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:0e:91:ae:a4:d9:3c:48:b0:2c:e8:5e:3c:b7:a5:05:53:
66:c1:67:b2:3a:87:ea:e5:40:c9:bd:9a:57:46:c6:25:51:90:
dd:9f:da:4a:eb:c0:65:05:95:11:64:82:9d:57:be:66:f7:c8:
c5:3e:d5:61:b8:53:9d:9f:ea:b2:82:cc:7b:ab:70:70:50:4e:
c2:99:b2:2f:19:88:d8:6d:43:61:00:6c:f6:06:d5:1f:10:01:
6a:04:1a:dc:a6:0b:46:0c:19:c2:bf:2a:53:21:f9:45:19:ea:
3a:70:be:69:3b:f6:51:04:13:d4:36:6e:7b:3d:61:8c:4c:9d:
fa:58:26:e4:31:4f:29:95:93:5d:7a:01:91:1b:aa:9e:88:64:
5b:23:bf:b5:7b:74:30:8a:0f:04:0f:33:91:ff:08:fb:2c:87:
5e:83:15:7d:45:bb:19:44:36:58:0e:9d:a8:fb:81:51:6a:e3:
f0:7d:96:31:34:57:f2:41:67:3d:59:48:71:2a:e9:3c:75:4e:
fd:e6:e8:ec:f2:3f:71:0c:c0:09:59:bd:6e:95:20:08:b4:61:
33:e3:9f:a0:54:84:03:94:b9:89:db:76:2c:a0:71:5b:35:11:
df:fc:16:8d:e1:d0:17:f5:4d:32:aa:33:ce:20:c8:9e:78:e4:
dd:83:38:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:22:36 2025 by rpki-client