Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: mL8LdFSpMPmCTVWw4CK57saOgU9yXaR9mGdg80yMFGQ=
Subject key identifier: 6A:C2:76:07:53:9A:62:1E:3D:86:CA:A2:67:E8:BA:2D:99:4D:22:E2
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019653B6CF94F6EFE3B679D97D39CDD0DA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0A98
Signing time: Sun 20 Apr 2025 15:00:11 +0000
Manifest this update: Sun 20 Apr 2025 15:00:11 +0000
Manifest next update: Mon 21 Apr 2025 15:00:11 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: 7YbN3DjWkFBUlDg77wrEivFiAOClU2T1CEqMTwoRmJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:cf:94:f6:ef:e3:b6:79:d9:7d:39:cd:d0:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Apr 20 15:00:11 2025 GMT
Not After : Apr 21 15:00:11 2025 GMT
Subject: CN=6ac27607539a621e3d86caa267e8ba2d994d22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:5f:36:dc:47:bd:33:32:c6:72:e9:cf:03:
77:04:d9:9a:e0:5e:29:46:ac:11:fe:6c:85:bf:ed:
a9:a4:76:de:63:c8:be:14:c9:2e:3f:f7:79:8e:be:
e9:9e:7e:82:af:58:f3:ea:d5:bf:fb:ed:8c:c8:d0:
a3:7b:1f:53:2f:24:fc:65:e1:ab:0a:bc:7b:b4:c7:
cc:84:8c:d8:da:05:41:44:5b:2b:40:b3:f7:b8:15:
ef:1d:1f:3e:fe:c6:a4:d2:f7:71:4c:b0:cb:29:b1:
6c:6c:42:9e:e1:4f:f8:61:30:bb:85:41:bb:26:b0:
f2:00:ef:d7:b5:a2:04:47:fc:ee:f0:e1:a1:19:f9:
17:85:1a:0e:95:eb:af:83:af:c3:fe:88:ca:ca:f0:
ec:34:06:68:b9:6f:07:bb:65:0f:48:88:42:fd:a7:
e4:23:d0:5b:01:2e:cb:a4:1a:3e:82:0d:07:1b:ee:
bb:3e:a5:4e:34:14:3a:89:5e:88:20:ec:15:6f:05:
c7:38:eb:26:a6:e0:34:60:65:52:e0:35:bd:7b:47:
0c:a1:01:25:8c:0a:93:58:37:78:bf:1e:55:13:fb:
a8:6b:f6:f6:ea:19:a2:bc:8c:0b:d2:be:50:a3:57:
fe:af:c5:60:02:15:be:99:c7:c3:53:f0:f7:45:d0:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:76:07:53:9A:62:1E:3D:86:CA:A2:67:E8:BA:2D:99:4D:22:E2
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:67:68:d9:a2:0d:75:f3:b5:a3:22:08:ab:f6:97:5c:01:
d0:77:1a:70:b1:02:ec:ae:65:88:3d:05:82:3a:d8:e4:e7:20:
fc:85:6d:19:f3:f4:5e:4a:a4:e0:b3:41:5b:9d:21:49:80:ca:
08:6c:16:a4:74:2d:bc:ee:f1:2a:e4:ef:f4:02:2f:1a:2f:68:
36:25:9e:1f:73:4a:d4:e1:5d:91:c1:d0:6f:4c:4f:8b:bb:b1:
d9:d7:90:e3:e2:43:7a:82:56:ab:88:af:69:bf:60:40:fa:ae:
9e:c3:10:5b:cd:39:2e:d6:9f:22:15:70:9a:f2:3c:f5:20:f6:
26:49:81:82:d4:54:7d:59:d3:10:48:34:d4:16:ff:b9:16:07:
b1:88:4a:f3:1e:dc:b7:99:94:58:38:94:56:8f:65:30:71:c2:
70:c4:67:38:f7:f8:9f:97:f4:8c:91:4c:db:f4:38:7c:e5:ea:
ae:3b:12:32:5e:0f:c3:e8:a7:9a:f1:7d:19:de:0d:0e:9f:52:
b4:5a:36:4c:f3:d8:18:f1:50:4b:02:e0:57:8e:30:f7:aa:0d:
8b:b5:32:3f:6c:1d:03:49:80:96:95:19:ad:9a:46:d6:3b:d8:
23:63:3f:e8:5f:02:16:a4:58:5e:90:82:ca:b9:eb:13:a4:f3:
61:f2:e5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTts+U9u/jtnnZfTnN0No0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjUwNDIwMTUwMDExWhcNMjUwNDIxMTUwMDExWjAzMTEwLwYDVQQD
Eyg2YWMyNzYwNzUzOWE2MjFlM2Q4NmNhYTI2N2U4YmEyZDk5NGQyMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tVfNtxHvTMyxnLpzwN3BNma4F4p
RqwR/myFv+2ppHbeY8i+FMkuP/d5jr7pnn6Cr1jz6tW/++2MyNCjex9TLyT8ZeGr
Crx7tMfMhIzY2gVBRFsrQLP3uBXvHR8+/sak0vdxTLDLKbFsbEKe4U/4YTC7hUG7
JrDyAO/XtaIER/zu8OGhGfkXhRoOleuvg6/D/ojKyvDsNAZouW8Hu2UPSIhC/afk
I9BbAS7LpBo+gg0HG+67PqVONBQ6iV6IIOwVbwXHOOsmpuA0YGVS4DW9e0cMoQEl
jAqTWDd4vx5VE/uoa/b26hmivIwL0r5Qo1f+r8VgAhW+mcfDU/D3RdCuUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrCdgdTmmIePYbKomfoui2ZTSLiMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJVnaNmi
DXXztaMiCKv2l1wB0HcacLEC7K5liD0FgjrY5Ocg/IVtGfP0Xkqk4LNBW50hSYDK
CGwWpHQtvO7xKuTv9AIvGi9oNiWeH3NK1OFdkcHQb0xPi7ux2deQ4+JDeoJWq4iv
ab9gQPqunsMQW805LtafIhVwmvI89SD2JkmBgtRUfVnTEEg01Bb/uRYHsYhK8x7c
t5mUWDiUVo9lMHHCcMRnOPf4n5f0jJFM2/Q4fOXqrjsSMl4Pw+inmvF9Gd4NDp9S
tFo2TPPYGPFQSwLgV44w96oNi7UyP2wdA0mAlpUZrZpG1jvYI2M/6F8CFqRYXpCC
yrnrE6TzYfLlOg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:28 2025 by rpki-client