Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json)
Hash identifier: 0errsDKMKNT3Vk7rEARLdQgH7Q+vwmzyurUZ6cZ9bbQ=
Subject key identifier: 47:A4:0A:ED:CF:2F:60:EE:A2:1B:34:E5:E9:B5:D6:56:85:FD:0D:30
Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Certificate serial: 01974C69601C00D9CEBFF50D394327789580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
Manifest number: 0D82
Signing time: Sat 07 Jun 2025 22:01:03 +0000
Manifest this update: Sat 07 Jun 2025 22:01:03 +0000
Manifest next update: Sun 08 Jun 2025 22:01:03 +0000
Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: GppJN0URO8jlbNKNBrEJ54uWYYfPUTAqLgSYVIFtZ8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:60:1c:00:d9:ce:bf:f5:0d:39:43:27:78:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562
Validity
Not Before: Jun 7 22:01:03 2025 GMT
Not After : Jun 8 22:01:03 2025 GMT
Subject: CN=47a40aedcf2f60eea21b34e5e9b5d65685fd0d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:10:33:26:59:80:73:af:19:d4:98:e9:3f:
d4:71:18:02:38:69:e0:6f:7f:e1:4e:00:08:0b:67:
6a:0e:0b:ec:28:54:2b:55:85:f4:9b:f0:d0:6a:67:
79:f0:b3:c6:fb:55:c2:c7:f2:40:b2:98:3f:a0:91:
dc:5d:f2:54:4d:ca:10:51:ec:24:89:be:d7:cf:1b:
96:e0:e1:c9:a3:72:f3:d0:af:8e:dc:0d:39:a3:a1:
f6:e5:f0:2e:a2:32:a7:34:e0:d0:2a:e5:e6:c9:f5:
68:90:2c:e4:44:f6:36:ca:80:88:b3:c0:fb:5c:f2:
b4:36:9f:6d:19:ce:ca:8f:ba:8b:80:01:a9:ad:ff:
ec:82:7e:c5:21:e7:30:60:b7:e7:56:48:34:21:02:
5b:dd:4c:20:03:a9:bc:90:b2:f1:83:27:a9:47:a1:
aa:e7:48:79:be:52:c2:31:eb:ca:35:d2:56:47:2a:
a3:a6:9c:69:13:3e:e2:77:27:f8:8b:9f:64:8c:ba:
dc:b1:cf:d1:7b:cb:26:a6:2e:57:d3:fc:a5:9d:61:
3d:c8:34:f4:ab:68:3e:dd:43:16:36:70:a6:37:05:
ad:60:c4:59:e6:20:40:41:7f:5b:be:12:39:f9:b4:
e9:06:4d:ca:ca:c5:24:88:82:11:10:95:12:3f:30:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A4:0A:ED:CF:2F:60:EE:A2:1B:34:E5:E9:B5:D6:56:85:FD:0D:30
X509v3 Authority Key Identifier:
keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0e:44:83:08:67:6a:e1:79:97:ab:67:25:29:d4:15:3f:d3:
e7:77:f9:87:d3:24:9c:98:b4:4f:21:77:68:64:bf:ff:ce:18:
05:37:d5:77:56:5f:46:19:63:83:d9:1e:52:b8:97:fd:41:f4:
47:fa:6d:3c:06:d7:71:46:6f:3c:fd:e9:f2:66:5e:9d:0a:2a:
8c:06:4c:85:93:5c:d0:0e:0e:2b:f6:16:3e:63:55:9b:e5:c6:
f5:6a:f2:ec:18:47:1d:37:70:75:0e:1e:1e:ab:cb:18:9e:62:
10:bb:2d:ff:71:91:30:79:da:24:f6:21:80:1d:d6:aa:46:8e:
62:2d:7d:23:db:bb:ee:67:84:6c:2c:a8:68:42:f4:9e:d1:8a:
0c:83:85:7d:90:ea:71:d6:23:0a:1b:2c:e0:cb:43:ea:c4:7f:
27:aa:fb:f2:22:51:91:5d:b4:1d:89:5c:54:1c:55:bf:2b:8a:
3f:73:f5:67:e1:57:d1:de:f8:53:ea:15:d8:ad:8c:b1:d3:ec:
00:cf:91:69:a5:e4:f3:95:b7:2a:7a:bc:e8:0c:1c:8a:2e:60:
d4:36:38:e9:a3:75:e4:91:66:ab:a5:c6:64:18:c3:29:ec:70:
c1:b1:45:f2:09:52:a7:84:92:78:d8:f6:0b:21:f9:40:f1:ba:
1e:ec:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:35 2025 by rpki-client