Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: x4eKaqErXcwiiib5Tq4+90Ft3VLQnyJTe4n3h6070QA=
Subject key identifier: A0:E2:24:2F:8A:12:BA:21:BC:53:F5:96:BE:70:92:1A:D7:20:36:80
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 0198D698997287A93F3DAB94ABAFA03558AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 11:03:01 +0000
Manifest this update: Sat 23 Aug 2025 11:03:01 +0000
Manifest next update: Sun 24 Aug 2025 11:03:01 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: Au2Z2/XXuJMHX6wAOlc89VqdBsJsDoOKSNKckXWPys4=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:99:72:87:a9:3f:3d:ab:94:ab:af:a0:35:58:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Aug 23 11:03:01 2025 GMT
Not After : Aug 24 11:03:01 2025 GMT
Subject: CN=a0e2242f8a12ba21bc53f596be70921ad7203680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:4c:8b:fb:91:e4:07:a7:c3:eb:95:c0:40:
0f:a5:30:20:1c:2f:d6:47:d3:2f:47:60:e0:e7:25:
3e:2e:b8:02:78:bd:6b:d0:f3:a8:77:0d:8d:5e:d5:
2e:b3:62:15:1d:d8:1e:f3:cb:07:1a:95:4f:2f:f7:
ff:b2:6e:04:8a:c4:be:7b:fc:21:6f:43:f5:fb:8b:
79:dc:0a:05:01:a3:bf:01:07:7f:5e:ec:60:23:ab:
d2:1a:b0:e2:5a:e6:09:d7:7c:ef:b6:9b:4f:78:72:
d0:5a:ff:76:b3:7c:7b:76:7b:bf:de:4e:6f:e4:b7:
e2:31:b1:02:0d:25:66:40:62:90:da:df:ef:a5:12:
97:8b:20:ba:07:7e:03:cb:74:fa:60:80:b4:9a:04:
94:b5:88:82:86:e1:fe:e1:e0:9c:5b:7d:88:61:2c:
4d:af:cd:3e:9e:00:42:74:89:63:69:96:a1:37:5d:
33:f6:7a:b8:0f:dd:2b:f1:aa:56:3b:02:8b:9e:77:
15:12:13:0d:31:ac:12:37:0a:58:e9:3d:1e:d7:21:
e9:7b:0b:ac:1e:fb:a4:36:5d:90:47:96:e1:69:b0:
47:46:e4:42:31:df:d7:3c:86:e7:4e:cf:b5:ba:21:
0d:a2:67:6f:c7:22:96:8d:a8:09:69:c6:1f:50:ab:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E2:24:2F:8A:12:BA:21:BC:53:F5:96:BE:70:92:1A:D7:20:36:80
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:36:32:a8:40:ef:9d:3d:f3:99:16:fc:d3:bd:a1:89:60:7c:
8f:96:c9:e5:67:c2:ea:b4:db:67:1c:82:57:dc:ef:76:93:38:
29:a0:c2:42:ea:ae:7a:b6:8d:2e:f8:71:89:e9:31:f8:5e:e4:
ec:b1:68:57:ec:95:46:9f:16:70:6d:75:25:bb:28:40:56:7e:
c2:75:a7:62:50:39:a0:69:09:df:57:46:b7:ba:5a:fb:9f:8c:
cb:dc:6d:68:a1:e1:6a:db:fd:63:07:63:9d:0e:01:d1:e0:8e:
69:8b:98:fd:ae:b2:8b:f5:0b:6e:15:fd:e1:72:06:f2:f4:7a:
08:f8:ee:da:86:09:05:ef:6f:8a:f0:c1:81:2a:4a:38:27:f0:
3d:05:ed:0d:e0:c7:96:73:15:a1:f4:13:09:ab:db:17:93:15:
42:5d:f6:02:3e:be:31:2c:8b:88:5a:84:5c:11:5e:b5:25:29:
f4:93:15:2e:44:7f:6b:59:78:6e:dd:63:18:4d:e0:1f:4f:30:
83:d1:8f:d5:71:0c:2a:2b:af:a5:93:09:61:c7:24:43:55:6b:
8e:63:40:25:42:e7:6e:a4:f3:1b:b2:e9:2b:10:15:9a:5f:1f:
e6:98:33:61:40:46:0b:ca:a2:31:3b:f9:6e:fc:ea:a4:16:ad:
54:54:2a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmJlyh6k/PauUq6+gNViuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTVlZDBmYTYyMGM4MDFhYWE5YTZmMTRmNjU5NmQ3ZWM5
NzUwYTEwHhcNMjUwODIzMTEwMzAxWhcNMjUwODI0MTEwMzAxWjAzMTEwLwYDVQQD
EyhhMGUyMjQyZjhhMTJiYTIxYmM1M2Y1OTZiZTcwOTIxYWQ3MjAzNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY5Mi/uR5Aenw+uVwEAPpTAgHC/W
R9MvR2Dg5yU+LrgCeL1r0POodw2NXtUus2IVHdge88sHGpVPL/f/sm4EisS+e/wh
b0P1+4t53AoFAaO/AQd/XuxgI6vSGrDiWuYJ13zvtptPeHLQWv92s3x7dnu/3k5v
5LfiMbECDSVmQGKQ2t/vpRKXiyC6B34Dy3T6YIC0mgSUtYiChuH+4eCcW32IYSxN
r80+ngBCdIljaZahN10z9nq4D90r8apWOwKLnncVEhMNMawSNwpY6T0e1yHpewus
HvukNl2QR5bhabBHRuRCMd/XPIbnTs+1uiENomdvxyKWjagJacYfUKs0SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDiJC+KErohvFP1lr5wkhrXIDaAMB8GA1UdIwQY
MBaAFDgV7Q+mIMgBqqmm8U9lltfsl1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQt
ZjM1YTQ0NTYzNWNhLzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zMmRhNDAtMGNiZi00MjQ0LWIxYTQtZjM1YTQ0NTYzNWNh
LzEvT0JYdEQ2WWd5QUdxcWFieFQyV1cxLXlYVUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDYyqEDv
nT3zmRb8072hiWB8j5bJ5WfC6rTbZxyCV9zvdpM4KaDCQuqueraNLvhxiekx+F7k
7LFoV+yVRp8WcG11JbsoQFZ+wnWnYlA5oGkJ31dGt7pa+5+My9xtaKHhatv9Ywdj
nQ4B0eCOaYuY/a6yi/ULbhX94XIG8vR6CPju2oYJBe9vivDBgSpKOCfwPQXtDeDH
lnMVofQTCavbF5MVQl32Aj6+MSyLiFqEXBFetSUp9JMVLkR/a1l4bt1jGE3gH08w
g9GP1XEMKiuvpZMJYcckQ1VrjmNAJULnbqTzG7LpKxAVml8f5pgzYUBGC8qiMTv5
bvzqpBatVFQqiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:12:18 2025 by rpki-client