Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: /AvKHCKiaXzg0z0qLiPwf3XT1jdqOqdeVRtKlgi/CGs=
Subject key identifier: D2:78:F8:CF:A0:5A:20:BE:25:CC:BB:09:9A:F2:22:BE:47:96:DF:A2
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 0198D73BE4289B6646263EE5283FFE49F8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:01:23 +0000
Manifest this update: Sat 23 Aug 2025 14:01:23 +0000
Manifest next update: Sun 24 Aug 2025 14:01:23 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: o9B3PltW96ZJCds6+HuDX4ATCsDU4lmGO5jKnQ1DUd8=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:e4:28:9b:66:46:26:3e:e5:28:3f:fe:49:f8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Aug 23 14:01:23 2025 GMT
Not After : Aug 24 14:01:23 2025 GMT
Subject: CN=d278f8cfa05a20be25ccbb099af222be4796dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:ec:d7:81:80:02:fa:de:fa:9b:49:4e:82:
6e:54:4d:a2:9b:cb:0b:ee:2a:62:e3:0a:ec:97:0a:
85:f4:41:62:11:dd:9f:a5:f7:92:9c:fc:52:ed:5e:
58:f7:eb:db:ac:56:c4:40:b9:5c:86:82:35:f3:7f:
05:05:ca:0a:7a:8d:a5:29:20:be:81:8e:75:bd:4c:
da:21:c1:4c:83:34:63:53:07:fd:e7:d8:fa:fa:55:
d4:d9:2b:45:de:ce:3e:27:e7:9e:3a:1d:9b:6d:02:
c0:93:6a:8b:08:b3:68:70:01:64:22:96:e8:61:74:
0a:77:74:7f:9c:f8:e8:d5:ea:43:05:c3:43:ad:c0:
2b:6d:70:ff:b8:10:fc:c0:53:b0:27:77:39:ed:dd:
98:8a:4d:ea:27:7e:1b:2d:47:6b:64:eb:76:d0:0e:
cf:7d:4f:86:cc:52:e2:d1:ce:90:57:3c:6a:a6:a3:
d0:fe:9f:8c:a3:11:2d:06:99:f4:34:8a:d0:4f:c5:
ea:87:cd:c1:e4:17:91:22:d4:3b:da:66:a0:7c:9d:
c7:4d:2a:4a:80:6d:9a:06:24:d5:81:7c:0a:85:bb:
35:2e:8a:f0:a6:64:9c:1a:3f:7b:f7:1e:ba:18:8b:
d4:81:d8:15:9e:31:69:e4:35:75:29:e4:1d:be:1a:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:F8:CF:A0:5A:20:BE:25:CC:BB:09:9A:F2:22:BE:47:96:DF:A2
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7d:16:6d:ed:10:9f:bc:ab:ee:72:2c:c3:ac:59:83:23:32:
ed:a3:4b:52:fe:99:65:fa:f1:6f:e3:2b:99:ad:f5:b3:cc:46:
a6:ee:d9:72:bf:9b:0f:6b:51:77:02:b6:2a:94:c9:f4:59:bd:
84:1e:62:b7:e4:e9:3e:a8:f6:f5:93:ad:fc:8f:1d:1b:46:9c:
3c:36:60:d4:39:9b:c9:17:ea:80:5b:40:f0:8e:0a:9d:9b:ce:
db:1f:89:7f:05:d9:f9:dd:9a:7c:9d:a4:b7:d5:95:04:aa:61:
1d:c5:3f:d9:f5:4f:41:c4:eb:4a:c4:3b:10:b9:15:75:78:9a:
c1:22:80:59:f9:92:e3:57:09:a5:38:ba:30:57:49:94:ba:37:
3c:11:ef:e9:91:4e:fb:45:25:48:6d:32:8b:9a:42:6c:ab:5f:
c5:d3:b9:e4:0c:12:80:f6:50:2c:bd:e2:0a:3c:43:aa:c4:de:
c2:4b:be:9b:a6:bb:66:2f:f3:32:9f:f7:ef:e0:bd:06:7b:65:
f4:03:2a:22:3e:aa:53:aa:56:e5:8f:af:9a:93:8e:52:07:b5:
3e:71:77:86:60:8f:b3:ec:33:21:ef:8a:01:4d:23:6c:23:43:
2d:53:3c:93:5a:80:9c:06:5b:46:ee:61:94:79:63:af:bc:50:
c5:60:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:34 2025 by rpki-client