Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: 1qA6XzRHhO3g1w/rpCxMvQpf5Kq875jH02RLHw6CRic=
Subject key identifier: BE:34:4D:71:0C:38:9F:77:7A:78:35:31:38:45:1D:07:21:65:93:3D
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019655382B40E1D3DE5F4B8C376862A878CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 119E
Signing time: Sun 20 Apr 2025 22:01:06 +0000
Manifest this update: Sun 20 Apr 2025 22:01:06 +0000
Manifest next update: Mon 21 Apr 2025 22:01:06 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: FTNkOeFaQrxMyW1SaIPgbgoy52cwJrOI8AGyS7SKsro=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:2b:40:e1:d3:de:5f:4b:8c:37:68:62:a8:78:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Apr 20 22:01:06 2025 GMT
Not After : Apr 21 22:01:06 2025 GMT
Subject: CN=be344d710c389f777a78353138451d072165933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:de:ed:cf:86:99:c6:fa:97:92:ae:41:38:
44:2b:35:98:da:ac:be:7a:6b:d1:c5:c9:f1:17:1f:
37:e1:93:cb:da:06:7c:c0:7a:24:91:f7:2d:da:19:
d3:79:2d:61:df:48:73:6e:a3:ab:19:2e:1f:9c:0f:
89:47:bb:9d:d5:2c:60:55:e6:0a:1a:5c:ce:88:67:
92:97:af:e2:a1:7c:56:70:f0:2d:80:75:f3:cf:80:
0b:97:f9:ef:bc:8e:7a:5a:ed:8c:0c:54:fb:4b:a1:
80:39:04:21:05:04:82:04:bb:80:30:9b:7c:ee:17:
5f:9e:65:18:e8:54:4a:ad:ac:3d:1c:a6:6a:75:e6:
0b:f5:08:d5:a7:0a:23:14:b7:80:1f:f2:3a:88:46:
2f:9c:46:fc:d4:3e:f3:02:69:80:0e:92:e8:5f:3a:
c0:b6:ae:51:b7:ff:99:4e:57:57:93:3b:50:07:cf:
b2:b1:16:53:cb:3f:31:75:c3:e3:63:95:5b:0a:0d:
6d:68:bb:57:e6:3a:cb:4b:34:5b:e8:b7:da:84:9a:
41:34:4b:6f:56:19:0d:b0:f3:ad:7b:ac:03:cc:0a:
03:04:d7:8a:8a:ef:94:11:2a:55:1b:d1:94:28:e2:
95:c0:4e:52:b9:82:59:7d:57:9d:8e:77:00:37:48:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:4D:71:0C:38:9F:77:7A:78:35:31:38:45:1D:07:21:65:93:3D
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ee:bf:d8:ff:6a:c7:b4:98:be:f7:ba:cd:a7:71:67:5c:77:
b3:12:67:47:96:bc:0a:1c:5d:2e:11:be:1b:8b:da:1d:7c:8f:
0a:9d:91:6c:4f:cb:4c:9f:11:ee:5f:52:3f:1f:52:e1:c8:fb:
4d:96:3d:15:8f:9c:26:92:f4:d0:ec:d1:87:72:be:c1:a2:89:
64:b0:d8:0b:bd:65:79:2b:e3:31:1e:c2:6d:85:3b:b3:16:28:
f6:e7:80:c7:28:94:14:bd:44:cd:04:f6:7c:69:2d:de:64:72:
bd:b0:d4:16:6b:2f:19:f5:e4:77:89:c4:40:fb:66:97:80:e6:
db:11:3d:36:64:c7:03:37:d5:f7:b2:95:c4:26:a6:4f:18:20:
6b:51:24:59:5b:c0:1e:48:34:63:22:f5:bc:d9:bc:d0:33:bc:
e0:c7:9c:1c:21:b2:87:2c:96:a1:ca:3e:8e:7b:91:09:50:4b:
e3:59:a9:01:45:ea:ef:c0:8f:a6:8a:3e:e5:cd:77:99:d3:93:
6f:59:c6:a8:16:7e:dc:28:03:b4:e6:70:2b:9e:bb:fd:89:98:
0f:6c:cc:81:8a:82:39:ee:b2:47:de:cf:15:e6:85:e7:06:a0:
08:e6:f7:67:6d:d4:de:8c:fd:98:c4:78:93:e7:58:de:20:56:
e9:b7:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:59 2025 by rpki-client