
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: eB6yeUrE/k5zecHgs1nRJTMQcjv1+DhfntVTo9P8Omo=
Subject key identifier: A2:9B:8D:F9:84:4F:8C:E1:32:A1:E2:2A:BF:55:E0:AE:22:59:B8:FC
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 0199FB0F1E320355745BC4D79122D45C398C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1528
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: 48HLzEg5hUyysvh2QdFLov5OhmU.roa (hash: bw7hBJRBr+ljNjkA7DMlIt09FqFYCknq6hOA/oTgbSY=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: mwAmFrafUbc0Sz9Ar8jnbU/bNB1vS8IZsjuOdJC+uho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1e:32:03:55:74:5b:c4:d7:91:22:d4:5c:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=a29b8df9844f8ce132a1e22abf55e0ae2259b8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:85:bd:ae:f2:5d:f4:e5:45:da:9b:9e:5c:
84:54:6e:c8:c5:d9:2a:ed:2d:cd:6c:3c:8f:57:b5:
d4:a9:b6:a3:83:d2:24:e5:fd:6e:41:99:53:44:a6:
46:da:87:e4:3a:15:d8:5a:b7:03:a0:00:8c:73:73:
72:bb:ae:ba:1e:cf:ae:bd:ec:fd:75:e8:68:3f:81:
33:d3:03:a8:06:54:e4:b9:99:11:c1:6d:43:02:1d:
84:ff:5d:ec:0c:e3:1a:1e:fa:c8:9a:12:20:34:ad:
65:71:32:66:b9:18:60:3b:64:83:87:e4:76:fd:63:
af:37:de:8f:74:7b:b3:f8:fc:e5:db:2b:ae:37:08:
a1:3f:78:4d:2a:6b:c7:2f:4f:20:a4:2b:0d:1f:15:
69:a1:ac:c8:18:e1:20:65:c3:0c:40:aa:35:e3:a6:
5f:ae:38:07:c7:94:a6:a2:64:e3:04:0b:de:84:d2:
6d:1a:ae:d3:e8:a1:40:ad:91:7d:3c:e8:13:ff:35:
fb:1e:e1:ee:34:a8:d7:32:81:d4:e2:90:06:b0:cd:
b6:70:5d:0a:bf:ff:5a:ce:61:d8:e1:89:93:37:46:
06:99:6a:1c:e9:eb:ea:36:5c:ea:e8:f0:66:a3:90:
91:7e:49:d4:a3:6d:5f:f8:44:59:50:cf:f9:6a:6f:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:8D:F9:84:4F:8C:E1:32:A1:E2:2A:BF:55:E0:AE:22:59:B8:FC
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7d:f7:b8:22:82:70:eb:48:fe:17:ca:ee:53:be:66:49:ba:
ef:c3:04:37:50:2c:48:01:7b:1d:fb:dc:ff:20:25:cb:4a:8b:
e4:1f:1c:22:ea:48:dc:5b:5f:19:1e:95:c3:95:38:74:7a:68:
4a:b1:53:d3:81:82:87:4e:c8:35:43:20:10:9e:bf:01:f1:dc:
65:f8:ed:d3:7a:71:25:5e:51:fc:5d:66:fc:85:62:f3:08:de:
56:d2:b2:c3:71:7d:8f:d4:82:9c:71:a6:d7:85:41:4c:a3:52:
ec:c3:bc:1d:34:be:40:76:f6:7c:79:53:a6:9f:d9:d9:26:44:
f0:45:7d:6d:68:74:2b:02:fd:e1:ff:96:bd:a3:30:ee:b6:d7:
80:18:f4:17:75:25:6a:01:b2:a5:f3:ee:1c:ca:17:d6:79:c1:
10:ce:ae:28:2e:3f:6f:c6:e9:9f:86:12:09:9a:af:3e:ab:1f:
cd:4b:a1:d1:b9:8a:e4:70:cb:71:be:4f:23:3f:7e:60:d0:5f:
77:04:9d:11:f8:58:9b:7b:17:4a:de:90:ed:a0:c3:fd:17:39:
b1:c2:77:f2:57:db:15:25:26:42:82:ee:f3:12:58:8c:b0:96:
a8:e7:96:a0:8c:77:9d:a8:c2:e1:89:33:2f:9d:79:26:7e:82:
3c:b9:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:02 2025 by rpki-client