Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: 2ZpJjfRT8Kd+VfXdhn3w9NPzoLWn2spp35ABthnIQpE=
Subject key identifier: 1C:C6:CA:BB:07:69:08:A4:9C:0B:CF:DC:09:A3:C2:16:A7:3E:A8:2E
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 01963FFA31682B6F07FA2DB21EDB65E0EB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 1238
Signing time: Wed 16 Apr 2025 19:01:23 +0000
Manifest this update: Wed 16 Apr 2025 19:01:23 +0000
Manifest next update: Thu 17 Apr 2025 19:01:23 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: MkD498V7qIpVuba/dGogOVWwLPM2+TGZV4XL6IhGRm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:31:68:2b:6f:07:fa:2d:b2:1e:db:65:e0:eb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Apr 16 19:01:23 2025 GMT
Not After : Apr 17 19:01:23 2025 GMT
Subject: CN=1cc6cabb076908a49c0bcfdc09a3c216a73ea82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:4d:15:87:5c:6f:db:ce:31:f7:13:32:30:
de:0a:1b:04:5b:2b:28:51:e8:25:45:e7:6f:ad:dc:
47:b0:77:1c:16:72:34:a2:34:4f:9d:61:9a:37:71:
95:6f:f6:8d:c0:7e:60:2e:25:b9:89:f6:64:31:83:
b2:56:dc:68:6f:f5:8b:03:fd:ae:a9:a3:fb:de:a0:
19:81:59:87:cf:71:ec:6a:01:01:3e:6a:74:09:40:
97:08:f1:08:31:e8:0b:00:9d:cc:ec:1f:d8:cd:7e:
fd:c6:47:3e:a9:cc:5e:58:4e:9a:48:c2:3a:ae:ed:
c8:8b:eb:fa:26:95:59:81:a6:b8:02:b0:ed:42:4c:
43:9a:ac:ef:09:d7:c7:53:dd:5c:4d:a0:0f:23:4b:
29:eb:36:d6:ff:8a:3c:00:6a:27:7c:c9:74:fd:1e:
36:89:87:0b:61:2f:64:36:cc:07:2d:57:f5:f0:7e:
cf:75:d4:31:1d:bf:c8:8f:32:44:07:27:3a:ff:05:
58:79:6f:5c:02:4e:86:c4:44:17:af:5c:fc:02:de:
5f:dd:40:a8:06:20:30:6f:17:67:d8:ba:8a:50:38:
6e:83:d7:19:8d:fc:9d:30:99:55:1a:ea:87:01:56:
b1:3c:c3:24:e7:33:e7:b1:f4:ce:e9:3c:a0:24:3f:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:CA:BB:07:69:08:A4:9C:0B:CF:DC:09:A3:C2:16:A7:3E:A8:2E
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:b5:da:72:92:71:51:4b:a3:70:52:7e:e3:12:5d:fb:6a:
4e:b7:dd:87:be:84:e8:0a:97:b6:d1:aa:41:2b:e1:37:aa:a1:
30:09:52:b7:bd:2a:cb:c9:4f:26:dd:1c:72:10:1f:64:12:6a:
76:e0:de:dc:a6:1f:9a:a6:2a:1f:c2:31:24:1f:3c:3d:63:78:
3e:66:63:10:4f:69:f0:f2:ee:e5:e5:a7:a7:f6:77:0e:8a:b1:
4e:5c:2b:26:e7:61:60:e7:3f:11:b0:77:61:92:4e:e5:a1:37:
61:17:64:7a:57:4b:9f:cb:50:dd:a5:f8:6f:d1:a3:7e:7f:f2:
d7:9f:f3:19:d3:cd:5c:b0:c2:bb:ba:06:13:92:04:89:17:38:
d6:53:95:6f:2d:85:77:13:dc:f3:aa:82:1b:cf:ef:f8:0f:a1:
82:47:3e:d7:fa:cd:a1:70:19:43:93:0a:79:a6:90:28:8b:9a:
90:e7:36:2d:78:f7:a6:b8:d3:55:a3:5f:e1:7b:35:bf:2e:b9:
ed:fe:cf:8e:ac:1e:27:17:a1:40:3d:34:c7:e7:9f:a8:03:25:
4d:12:35:79:a9:6f:0b:47:d4:28:1e:76:7a:c9:61:50:1e:01:
42:22:e1:93:51:b6:d5:ba:36:da:1d:41:db:29:0c:a7:b8:19:
89:b8:18:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+jFoK28H+i2yHttl4Ot9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTJjOTdkYmQzMjE5NWI2YWZhOTExNDBiNTUyMGI1ZTBj
MmM1YmUwHhcNMjUwNDE2MTkwMTIzWhcNMjUwNDE3MTkwMTIzWjAzMTEwLwYDVQQD
EygxY2M2Y2FiYjA3NjkwOGE0OWMwYmNmZGMwOWEzYzIxNmE3M2VhODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6RNFYdcb9vOMfcTMjDeChsEWyso
UeglRedvrdxHsHccFnI0ojRPnWGaN3GVb/aNwH5gLiW5ifZkMYOyVtxob/WLA/2u
qaP73qAZgVmHz3HsagEBPmp0CUCXCPEIMegLAJ3M7B/YzX79xkc+qcxeWE6aSMI6
ru3Ii+v6JpVZgaa4ArDtQkxDmqzvCdfHU91cTaAPI0sp6zbW/4o8AGonfMl0/R42
iYcLYS9kNswHLVf18H7PddQxHb/IjzJEByc6/wVYeW9cAk6GxEQXr1z8At5f3UCo
BiAwbxdn2LqKUDhug9cZjfydMJlVGuqHAVaxPMMk5zPnsfTO6TygJD8v7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzGyrsHaQiknAvP3AmjwhanPqguMB8GA1UdIwQY
MBaAFDgSyX29MhlbavqRFAtVILXgwsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEt
ZDkyNzg1YTYxMjE5LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEtZDkyNzg1YTYxMjE5
LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArq612nKS
cVFLo3BSfuMSXftqTrfdh76E6AqXttGqQSvhN6qhMAlSt70qy8lPJt0cchAfZBJq
duDe3KYfmqYqH8IxJB88PWN4PmZjEE9p8PLu5eWnp/Z3DoqxTlwrJudhYOc/EbB3
YZJO5aE3YRdkeldLn8tQ3aX4b9Gjfn/y15/zGdPNXLDCu7oGE5IEiRc41lOVby2F
dxPc86qCG8/v+A+hgkc+1/rNoXAZQ5MKeaaQKIuakOc2LXj3prjTVaNf4Xs1vy65
7f7PjqweJxehQD00x+efqAMlTRI1ealvC0fUKB52eslhUB4BQiLhk1G21bo22h1B
2ykMp7gZibgY1A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:31 2025 by rpki-client