Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: rB6C6XEZnWi8sStAmvx7iCuLLdYOtbEJsl7elKf8pMc=
Subject key identifier: 0A:41:F7:D7:43:5A:71:E8:B5:79:FD:D3:08:7F:60:EC:D7:5C:99:55
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019752A2C0C51AEB5B3A8B7E1AD8E3247890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0B1C
Signing time: Mon 09 Jun 2025 03:01:27 +0000
Manifest this update: Mon 09 Jun 2025 03:01:27 +0000
Manifest next update: Tue 10 Jun 2025 03:01:27 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: iqY6QmRS8KY4FTNMLlbxDdAHYnYOYEE6xXd3Gagpw2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:c0:c5:1a:eb:5b:3a:8b:7e:1a:d8:e3:24:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jun 9 03:01:27 2025 GMT
Not After : Jun 10 03:01:27 2025 GMT
Subject: CN=0a41f7d7435a71e8b579fdd3087f60ecd75c9955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:d6:e3:3c:7d:4d:62:11:55:f7:e9:df:55:
45:1f:27:30:3a:18:37:94:a3:6a:c8:9b:46:39:73:
a1:73:f4:bc:34:84:d4:3d:98:e3:d8:1a:ee:58:83:
f7:a0:a1:3d:3b:7b:e3:7f:c7:30:96:d1:51:6d:76:
84:8c:1c:2c:9b:fb:c6:27:4e:40:a4:3f:05:4c:14:
34:85:81:e5:6c:9e:5d:3f:f1:96:4b:b3:3f:df:6f:
12:a3:32:0f:a3:04:be:49:45:88:d7:f9:0a:63:a1:
62:c9:9e:fe:49:f7:32:c1:03:bb:00:1c:54:39:13:
ac:0d:68:59:b2:6e:fe:12:c9:68:85:c6:fe:22:29:
61:d2:a2:b8:ea:a3:03:58:c9:50:ec:f7:d1:fa:b4:
4c:90:f8:d6:eb:b1:2e:88:9d:e4:c8:66:f7:c4:14:
5a:0e:89:a7:5c:72:fa:ff:94:e5:c1:cb:e3:59:b2:
b7:33:0f:d4:e1:d9:d9:98:00:f2:53:1e:58:83:c8:
24:f5:13:24:98:8a:1c:fb:2a:e0:e2:f0:28:35:c2:
21:15:08:f4:62:c3:2d:c3:d7:ad:3d:ae:2c:d7:82:
5a:cb:f4:0c:e4:7c:8d:85:11:95:7b:59:fc:27:bb:
1e:51:32:26:9a:6a:b1:c8:05:88:77:14:dc:f2:94:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:F7:D7:43:5A:71:E8:B5:79:FD:D3:08:7F:60:EC:D7:5C:99:55
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:32:1c:80:62:a2:a9:b1:f0:f8:fd:86:36:d3:41:eb:a2:
fa:44:b2:2c:84:f3:0d:3a:a6:c2:f4:15:37:bf:ad:19:27:49:
37:35:9f:9f:e0:8b:c5:a9:07:8f:74:44:8f:9d:05:72:47:40:
27:08:e3:ad:04:93:16:7a:7d:e4:46:ce:42:0c:a6:8f:0f:43:
76:ae:b7:8f:ec:78:69:79:98:54:4d:72:1b:07:9b:d8:8f:98:
cf:ae:2f:86:6d:dd:e2:2e:e3:70:27:be:a5:71:0c:b8:eb:d3:
a7:8b:21:6b:d1:68:70:05:34:9a:70:f4:1a:0b:ff:41:c1:ad:
84:43:50:76:17:68:45:f5:84:11:c5:82:64:47:b0:c3:cb:6e:
24:f7:e7:d2:bf:c0:0b:df:93:e9:d5:d9:ef:85:dd:ab:94:ab:
1a:75:47:00:dd:db:da:b1:15:76:7e:64:a6:60:60:47:09:5d:
31:e8:8d:f5:86:cc:5a:bc:5c:ca:93:85:ff:6f:b8:4e:92:8b:
b3:7d:b6:6c:2a:ba:ee:81:74:02:09:05:1b:1d:0f:11:9d:83:
b1:61:d8:87:4d:4d:aa:28:96:13:ef:1f:d8:7d:47:45:c2:5c:
e5:68:17:68:b1:b3:c3:50:53:c4:8c:e5:c2:52:94:30:6b:9c:
04:c3:f6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSosDFGutbOot+GtjjJHiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjUwNjA5MDMwMTI3WhcNMjUwNjEwMDMwMTI3WjAzMTEwLwYDVQQD
EygwYTQxZjdkNzQzNWE3MWU4YjU3OWZkZDMwODdmNjBlY2Q3NWM5OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4bW4zx9TWIRVffp31VFHycwOhg3
lKNqyJtGOXOhc/S8NITUPZjj2BruWIP3oKE9O3vjf8cwltFRbXaEjBwsm/vGJ05A
pD8FTBQ0hYHlbJ5dP/GWS7M/328SozIPowS+SUWI1/kKY6FiyZ7+SfcywQO7ABxU
OROsDWhZsm7+Eslohcb+Iilh0qK46qMDWMlQ7PfR+rRMkPjW67EuiJ3kyGb3xBRa
DomnXHL6/5TlwcvjWbK3Mw/U4dnZmADyUx5Yg8gk9RMkmIoc+yrg4vAoNcIhFQj0
YsMtw9etPa4s14Jay/QM5HyNhRGVe1n8J7seUTImmmqxyAWIdxTc8pSYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApB99dDWnHotXn90wh/YOzXXJlVMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYYyHIBi
oqmx8Pj9hjbTQeui+kSyLITzDTqmwvQVN7+tGSdJNzWfn+CLxakHj3REj50FckdA
JwjjrQSTFnp95EbOQgymjw9Ddq63j+x4aXmYVE1yGweb2I+Yz64vhm3d4i7jcCe+
pXEMuOvTp4sha9FocAU0mnD0Ggv/QcGthENQdhdoRfWEEcWCZEeww8tuJPfn0r/A
C9+T6dXZ74Xdq5SrGnVHAN3b2rEVdn5kpmBgRwldMeiN9YbMWrxcypOF/2+4TpKL
s322bCq67oF0AgkFGx0PEZ2DsWHYh01NqiiWE+8f2H1HRcJc5WgXaLGzw1BTxIzl
wlKUMGucBMP2GQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:53:25 2025 by rpki-client