
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: SEDbbQL7OY6Abf9EMYiyGTjMb8YkvxHvdoQ564BZW54=
Subject key identifier: 84:CC:46:7A:36:B1:DA:80:01:CF:49:90:4A:27:EB:72:19:F1:48:AA
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 0198D4E0718320A671523C7E75D389A5D65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1547
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: 8x/eQrlC9GPsWm1SN9J9L6zN0udOIMrKKZ0QXq6SYxE=)
3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:71:83:20:a6:71:52:3c:7e:75:d3:89:a5:d6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=84cc467a36b1da8001cf49904a27eb7219f148aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:ea:2e:18:47:71:e9:d3:ac:df:bb:0d:84:
ac:9e:75:96:bd:49:43:c1:bd:10:6c:d5:b8:cd:c8:
bf:7f:3d:9c:0b:01:88:a0:d8:94:78:94:c0:ab:6f:
d4:b7:5c:2c:f1:8c:5c:1b:8a:e7:0b:e5:a4:f9:1d:
ce:52:a7:cf:31:fd:be:6f:c3:d1:52:20:08:67:86:
0c:61:f7:64:25:c1:0f:f9:68:61:f5:d3:0f:96:27:
4a:8e:07:6f:e5:78:41:ae:f0:d0:76:ec:83:3c:a8:
67:9c:31:7c:87:5a:8b:c2:17:c7:40:e7:f5:35:fc:
f3:4c:da:d9:6c:5c:30:c4:ce:9b:c4:28:70:68:1e:
8f:d5:b3:4b:71:93:6b:67:87:a6:44:7d:47:14:92:
55:a7:bf:44:bc:57:91:db:66:00:c9:da:dc:a7:cd:
63:85:37:45:dc:aa:08:57:ac:46:7a:a9:51:94:67:
01:6c:96:ad:df:69:11:bd:99:73:de:ca:0e:fc:f2:
bb:07:d3:84:ae:69:a1:d9:36:b8:fd:76:0e:be:be:
a2:77:48:3f:7a:71:9d:b5:1c:40:7b:d1:24:82:7b:
1e:22:32:de:53:f2:00:6c:ad:1e:4d:26:12:e8:b4:
7d:0d:17:cf:03:9a:6d:6a:84:fd:ca:ec:40:d7:e1:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CC:46:7A:36:B1:DA:80:01:CF:49:90:4A:27:EB:72:19:F1:48:AA
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:58:ae:2c:b5:58:a6:df:3b:4f:de:d7:49:20:c2:a6:7e:45:
bd:aa:5a:bd:3b:3e:05:46:5b:88:33:8f:f6:c8:94:8e:39:77:
04:47:2b:3d:e0:03:9d:76:40:63:90:2a:aa:2a:6f:d8:4f:55:
2e:c5:be:8f:e5:af:0b:db:c7:d5:ab:aa:d0:d7:9c:83:04:f2:
a2:de:5a:2f:7f:1d:eb:8a:90:35:3f:63:3b:38:08:05:fe:71:
89:76:09:b7:d0:6d:98:b1:c0:bc:84:86:18:69:e7:94:fe:ce:
ff:6b:12:6f:dc:f5:5d:b8:85:ba:0b:bc:09:fa:c9:74:11:c9:
dd:b2:4c:eb:7b:55:05:47:85:fe:0f:30:23:e4:fa:67:b0:34:
cc:48:1d:da:b5:dd:90:11:9d:72:1a:83:33:ba:55:3c:18:c3:
38:07:95:15:ac:5d:01:27:d7:bd:5c:d2:9b:c7:4b:9e:46:bf:
b5:71:87:9f:2d:2e:e8:1b:6e:3f:cb:cb:d4:c6:00:1f:5f:8c:
5b:cf:c2:b1:0d:68:4a:33:74:1a:c1:49:9e:1c:fe:56:9d:76:
91:8a:96:e8:b6:32:f0:20:c8:45:ed:9c:0d:71:7f:0b:01:08:
83:61:52:cf:44:92:c6:47:b4:ce:92:d6:64:ef:ad:94:52:9b:
87:ff:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:42 2025 by rpki-client