Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: va1bohRo0RVkY9PE54bfF1l6yzYCBXt/BCP8P65XoBI=
Subject key identifier: 89:42:C9:07:27:89:ED:B3:7C:7D:05:9F:21:65:33:A1:5E:4F:73:99
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 0199FBEC09BE5FCF9B92B2E4AB6273DD8903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0DC1
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: M0mY+uKxGrZPkzZLj3+d1bLCOIdqGhzxcmZADedxWH0=)
2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:09:be:5f:cf:9b:92:b2:e4:ab:62:73:dd:89:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=8942c9072789edb37c7d059f216533a15e4f7399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:4e:76:74:ff:54:35:0a:3d:1d:be:1d:4a:
b2:59:b0:1c:62:ac:0c:f6:d5:9f:fa:bf:45:bc:06:
e0:7c:e7:c2:ad:a9:d7:f0:23:a8:fb:f3:27:46:15:
a8:0b:36:ca:9e:cc:93:b3:ee:a3:34:72:25:64:24:
6b:ee:89:ec:c0:79:a1:1b:f9:48:43:1b:cc:3b:a7:
af:be:f3:45:c6:a8:85:38:67:bc:6c:8e:d6:76:70:
18:1d:6b:38:44:39:71:e3:21:ca:29:6f:17:c0:f8:
cf:ba:77:7f:2c:df:a3:de:3a:f3:6b:81:eb:c4:1b:
0c:27:d0:bf:7a:42:5d:66:e5:b4:6b:65:d7:78:aa:
a9:5e:5f:1e:51:98:a7:03:76:1a:df:0e:6b:1c:e5:
5e:05:ca:1e:97:df:2a:06:47:7a:e5:e8:ee:85:55:
54:77:2f:2e:87:c7:49:b3:42:b8:8f:b8:f2:9a:e1:
43:0c:ef:51:1a:85:79:42:91:eb:82:d6:19:20:fa:
7e:c0:ec:8f:ca:5d:a8:85:52:1f:ce:04:f3:17:a4:
1c:1e:c1:c1:ab:ea:2f:5d:23:14:04:ee:04:bc:16:
6b:b8:8d:ad:20:81:be:a1:1e:e0:41:67:cb:a9:ca:
17:8a:93:a1:1e:da:8c:0e:20:de:21:36:50:6c:3e:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:C9:07:27:89:ED:B3:7C:7D:05:9F:21:65:33:A1:5E:4F:73:99
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:64:e3:f9:a1:63:44:c5:49:84:b5:ca:54:cc:c9:a2:e7:1a:
a3:08:5f:e7:ed:37:67:5d:88:7f:9a:8e:81:7f:f1:8b:65:d7:
37:2c:dd:21:55:50:79:ec:95:30:a0:3f:97:d3:11:66:34:f5:
91:4b:f4:90:81:63:12:36:9e:c3:b9:b6:4f:17:6f:1a:f5:33:
65:77:5e:04:06:9c:f8:7e:cf:8f:09:b7:53:fe:ad:28:9c:67:
32:24:87:b3:9e:c4:7f:50:f0:4b:62:e3:5c:c5:49:79:ee:23:
e3:c4:e9:2d:bb:93:30:29:bc:72:45:3b:10:48:c7:96:fd:53:
a9:63:55:71:f4:7e:70:98:ee:77:29:c0:94:11:5a:19:44:e0:
8f:7b:bf:7b:6a:ea:03:92:20:1f:9c:38:8f:f3:e8:24:3a:28:
ca:1b:69:1b:ab:83:a8:31:b9:a4:a2:45:2d:6d:fb:dd:61:64:
0a:16:0f:75:02:89:92:bd:5d:dc:2c:54:5f:fc:5d:e7:1f:ec:
fa:12:e6:95:0b:fd:1f:4a:28:6a:4e:88:d0:62:89:20:ac:2c:
a2:a7:f1:e2:d5:2e:54:9b:3d:1a:8c:e6:e5:41:2b:24:42:ad:
c3:9f:cb:26:40:32:ac:07:b3:51:51:c6:d8:4f:f5:0d:d7:42:
65:7f:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:00 2025 by rpki-client