Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: oLMqnssX3WtQJoP+DXtHhjuvBRKllG2IAxpThAPG6ek=
Subject key identifier: 82:8D:EC:F3:F2:CE:03:4D:30:EC:03:A3:12:1C:D6:7E:FC:B1:1B:04
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 0196297217CFCF4252F3E71A045AEC8F9D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 09C6
Signing time: Sat 12 Apr 2025 10:01:05 +0000
Manifest this update: Sat 12 Apr 2025 10:01:05 +0000
Manifest next update: Sun 13 Apr 2025 10:01:05 +0000
Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
2: jYkkOan7rTEgW-xkhgkb5i-JxFw.roa (hash: poFVw3UULivKuh4VYtXegnU+ipzV9NTFXG8a9hkIz1A=)
3: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: vViLNfGK51EKeM90KdnK5c343gd1LdQVRralr70U7pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:17:cf:cf:42:52:f3:e7:1a:04:5a:ec:8f:9d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Apr 12 10:01:05 2025 GMT
Not After : Apr 13 10:01:05 2025 GMT
Subject: CN=828decf3f2ce034d30ec03a3121cd67efcb11b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:ab:87:1f:e1:fa:17:ec:e5:b5:d8:97:41:
f8:76:32:2f:3e:2c:c4:ac:65:a6:fc:bf:a2:f7:e2:
92:de:60:fa:2c:69:10:69:3a:8d:3d:31:ac:44:ce:
fc:ed:24:b0:23:87:cf:f4:21:fa:7f:8d:21:d6:ad:
1c:3b:e6:6b:6e:0e:c5:58:43:b1:77:de:8e:58:80:
fd:c9:36:da:9f:b3:1f:c0:99:1d:3d:b4:c9:2b:da:
ad:87:7f:b3:51:82:0e:e1:de:8b:9f:0f:00:54:7b:
3f:6c:86:7a:fb:2d:95:b3:8a:fa:25:ea:cd:9c:59:
f6:7f:e7:25:57:c3:ba:78:6b:32:ad:6e:ec:53:57:
f7:12:1e:c7:78:c5:4c:62:54:06:98:44:2d:fe:b2:
84:c9:ef:0b:09:16:05:d0:88:c9:89:57:32:72:33:
43:d6:db:2d:08:82:1c:ac:6a:20:58:ff:24:67:bc:
f7:4a:78:b6:bc:37:2c:b1:19:f6:dd:bf:ad:6d:f8:
b2:cb:d5:d9:a5:67:3a:dc:4c:83:d8:01:fc:fb:d4:
90:31:33:9c:72:23:75:7b:d8:e7:18:c7:a8:5d:2b:
6a:70:80:97:60:6a:95:45:c8:d9:07:bc:47:b8:aa:
cf:36:86:37:91:95:78:b8:db:39:36:df:43:da:06:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:EC:F3:F2:CE:03:4D:30:EC:03:A3:12:1C:D6:7E:FC:B1:1B:04
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:75:37:c1:19:86:fe:e1:8c:4d:7f:a4:48:62:ba:4a:60:f5:
c9:59:77:3a:c4:73:58:a2:fc:31:79:9d:2c:ce:fd:cf:e8:18:
10:3c:ac:f4:6d:2f:15:c3:a2:1a:d0:2a:31:ae:de:27:8b:a2:
8d:21:e8:10:17:39:45:e3:ee:e3:c2:be:28:41:29:e4:d5:95:
81:16:87:a0:eb:04:ae:ef:9f:56:2f:b3:55:27:01:b3:7d:a2:
e9:7e:9c:f5:26:30:91:89:04:ec:83:9e:4b:93:e4:c1:18:9b:
99:e2:b4:a4:19:57:63:ca:fb:c2:fe:4e:a4:38:c2:ec:9c:d0:
79:fa:d5:28:f5:1e:79:41:98:d9:68:86:af:30:18:f7:9b:70:
5c:ef:67:cf:37:01:e1:4f:dc:08:5c:fa:38:fe:54:08:4c:dd:
10:7a:60:28:73:d7:17:f3:b2:22:43:e4:7d:a8:7a:71:05:ad:
b4:bc:d5:43:8b:17:f8:a0:5c:52:6a:61:66:2f:96:3a:62:c5:
a9:0d:af:45:07:bb:e3:16:a3:02:74:52:30:91:fd:90:e4:02:
ce:bb:f2:b2:67:9a:2a:e4:a7:e5:a0:95:9c:0d:0f:d4:bc:77:
ef:88:a3:eb:81:e8:5e:a9:36:b4:fc:5c:bf:ee:28:67:62:25:
77:82:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:32:55 2025 by rpki-client