Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: WM3cKNuO+saE5og6L9tNzbMDIdKtdWyQjTxSnm7Y36k=
Subject key identifier: 5C:80:BA:A5:C1:16:7D:1D:CD:C6:C4:F5:68:6C:B8:FB:6F:2D:50:81
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 0199FC21851DA877C713F24F8705EBD91B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: zS4LvJd2KIr5uTlj9rq5fLEKJGK1b2davUdmN2FRqpA=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:85:1d:a8:77:c7:13:f2:4f:87:05:eb:d9:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=5c80baa5c1167d1dcdc6c4f5686cb8fb6f2d5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:b9:75:5d:0f:8e:55:c7:1b:73:16:0d:03:
f9:a6:ec:07:92:d1:a5:d0:92:f4:74:70:67:dd:3d:
0b:fd:f7:15:a5:b4:d9:79:bf:76:a3:6e:f3:72:c6:
5a:4e:22:d0:41:c8:a5:d9:f3:30:65:03:cd:b7:98:
57:09:0f:d8:4d:1d:0d:9d:05:b9:ca:96:46:70:2e:
96:f6:fc:e4:f2:72:26:7c:80:e2:58:be:a0:31:31:
90:ac:e3:40:05:79:52:55:e2:8c:89:f3:3b:d0:1e:
77:dd:7e:4a:21:e4:16:03:0c:a1:ec:1e:57:0a:25:
24:49:d2:87:ad:97:6a:87:40:ab:6d:d0:81:e5:06:
82:25:23:0d:55:0d:79:f9:87:ca:c4:12:f2:b9:5a:
7f:15:be:d2:f8:e8:5d:c3:fe:72:c6:52:46:05:5f:
8e:b8:62:5e:0f:32:62:74:8b:73:06:1f:79:e8:83:
22:42:52:a1:be:04:d6:5e:60:80:79:c6:3b:e6:a1:
83:98:fb:fc:f5:c7:03:a7:71:d9:63:6c:91:e6:8e:
f8:7d:5d:7c:62:ec:32:d0:6f:ee:24:cf:95:33:af:
f8:ec:bd:71:ab:98:bb:e2:4f:27:6c:3a:4e:b5:0b:
40:f0:05:35:0c:67:cd:ea:93:d2:89:0c:8f:4d:15:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:BA:A5:C1:16:7D:1D:CD:C6:C4:F5:68:6C:B8:FB:6F:2D:50:81
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e9:0b:59:30:ed:43:c6:37:a2:60:d6:f9:6d:83:c5:16:17:
0f:de:4a:da:d3:06:b8:07:48:93:f3:dc:d5:7c:fc:4f:f1:b5:
45:03:ea:7a:e7:ea:55:9f:27:01:17:9f:00:c6:40:ec:64:12:
4a:2f:6d:c6:1b:4a:74:14:25:f2:8e:68:c7:b1:0a:71:cc:3a:
14:36:1b:c6:24:0b:bc:bc:32:89:46:d5:bc:99:ab:b9:5d:03:
db:99:07:60:24:a4:1d:9e:61:66:4c:c8:86:15:b1:35:ad:b7:
c4:2d:59:28:1b:d8:5a:3b:42:ca:9e:1d:79:94:3a:43:b2:64:
0c:90:1f:b6:a0:33:70:04:71:d9:38:5a:b3:d7:f7:02:4f:13:
b3:4f:ea:13:49:31:82:4c:8e:23:26:5f:be:70:6b:3b:6e:d7:
33:13:01:2b:89:da:fa:05:f0:a9:90:57:89:1c:4f:d8:a3:15:
4d:18:8a:da:d5:34:8e:52:d1:92:e0:1a:71:1d:86:84:c5:d2:
da:9c:ea:0c:e6:b5:2a:88:f8:da:80:8b:ee:d6:f4:16:c1:72:
3d:e5:8a:b0:6e:a0:b4:8d:71:56:07:f7:33:3d:53:ee:3e:8b:
4f:60:a1:c7:26:f8:e5:1d:65:b6:c1:3a:1a:76:d1:e4:8b:a9:
6c:a3:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:54 2025 by rpki-client