
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: r7C2NzIuGQvlO5QzZ0PYizhyA1xJBb54wXQN5GSrRSE=
Subject key identifier: 1A:4F:8C:50:C8:6F:10:35:E8:AD:3C:32:C5:82:CC:59:83:AF:6F:36
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 0199FAD81730A7A832B49392B7D82455EC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:29 +0000
Manifest this update: Sun 19 Oct 2025 05:01:29 +0000
Manifest next update: Mon 20 Oct 2025 05:01:29 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: cDkRBiPl8qQWIH06MX2LUMGBTrMkCU6cYtHQ3yhbiuA=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:17:30:a7:a8:32:b4:93:92:b7:d8:24:55:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Oct 19 05:01:29 2025 GMT
Not After : Oct 20 05:01:29 2025 GMT
Subject: CN=1a4f8c50c86f1035e8ad3c32c582cc5983af6f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:70:4e:8e:ed:8b:ef:7a:99:f9:ae:25:25:
54:35:c8:6b:b7:a8:b8:9c:61:c5:56:5c:72:54:aa:
74:f0:d7:65:6d:46:c6:04:f4:0c:c3:33:fb:28:68:
f7:f2:ee:58:95:e6:9d:3f:f2:e2:35:bb:76:d7:1d:
6e:22:94:4a:a8:aa:0a:4c:dd:99:0c:05:d1:7d:2c:
33:2b:7d:42:20:3f:b6:04:a6:c9:61:30:11:da:59:
9d:84:3d:9b:0f:fa:26:55:47:fb:67:7f:df:69:24:
bf:99:de:dc:a3:1b:6e:4f:7b:36:c1:1d:2e:db:e8:
c7:ac:44:4f:c7:3d:80:2c:7f:d2:3f:1c:2c:98:9b:
5f:ff:23:b2:c9:f5:b6:d3:b0:03:26:c6:12:91:ef:
64:61:2e:e9:73:35:5f:57:43:21:90:34:84:08:9e:
0c:d0:d6:44:5b:21:a6:25:c8:45:3c:6c:8c:18:8e:
3e:50:c8:ae:e0:2c:f7:86:3f:ef:08:46:fb:96:f0:
6c:12:b8:77:6f:77:16:4b:44:d3:1d:73:31:78:ca:
72:8a:87:e8:10:29:ac:4d:57:2f:94:da:1b:39:74:
3a:5e:55:e7:0e:73:28:34:ec:d5:8c:e4:ad:8e:bd:
d7:7c:09:a3:f0:b4:12:3d:f3:ff:f1:dc:53:2c:26:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4F:8C:50:C8:6F:10:35:E8:AD:3C:32:C5:82:CC:59:83:AF:6F:36
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:87:b4:f7:65:66:50:7a:25:4e:96:9b:99:a4:ff:2a:dc:c5:
40:5f:7b:03:7f:25:d3:f3:b6:df:b6:d3:70:b3:2c:42:2a:97:
9a:88:6f:72:8a:85:b3:e4:0b:dd:62:21:b6:09:ec:52:f9:59:
93:ba:50:5f:92:f0:a3:a3:cc:73:41:4d:ce:0c:83:10:0a:64:
b0:f9:36:ca:d4:ca:fc:0b:40:36:39:b5:20:cf:51:4d:90:e6:
12:c3:d1:e2:ca:88:7a:2b:f1:81:5a:da:c7:e8:10:a3:ad:19:
d4:6f:3e:73:9b:c0:58:5e:0a:9d:4b:f6:02:2c:a4:46:dc:08:
8d:d8:16:d6:c8:f8:65:de:03:38:1c:dc:80:2b:1a:e1:bd:27:
2a:28:93:93:a9:db:a8:3c:3e:0f:0f:6a:e4:06:ee:ff:58:6a:
cb:2b:26:6f:3c:57:fe:54:64:63:06:ae:6a:98:f5:6d:b3:87:
6a:3d:cf:ea:1a:6e:19:54:f9:68:b2:0e:57:a7:b4:e9:2b:76:
75:2b:73:47:97:d8:2d:b7:3b:a9:24:ee:3c:cf:bc:43:76:01:
e7:db:11:b5:f0:aa:ce:2e:af:28:f0:f2:31:4b:a6:9e:88:01:
a4:5f:fa:40:2c:14:89:e9:1a:31:1d:d1:fe:e7:e2:ea:58:f6:
18:c4:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:27 2025 by rpki-client