Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: hou5MjuidcqAWo3u8na1NYfP3kazvxofigBXd3ikYlQ=
Subject key identifier: F8:78:87:01:05:39:5E:2E:25:15:DA:EC:2C:DD:20:F2:49:FF:C7:75
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 0198D472FFFA49B64A09936B34FF41F442C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0D28
Signing time: Sat 23 Aug 2025 01:02:43 +0000
Manifest this update: Sat 23 Aug 2025 01:02:43 +0000
Manifest next update: Sun 24 Aug 2025 01:02:43 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: QnJoaHjWREbX71o5qXLnusW7Vz4fJ2RuttNcMUTGhXo=)
2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ff:fa:49:b6:4a:09:93:6b:34:ff:41:f4:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Aug 23 01:02:43 2025 GMT
Not After : Aug 24 01:02:43 2025 GMT
Subject: CN=f878870105395e2e2515daec2cdd20f249ffc775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:15:71:34:01:e9:26:a5:bc:c8:24:ca:74:
e2:a2:f4:67:01:4f:e6:40:c0:d5:7a:c5:90:0c:41:
26:8f:04:f4:78:3b:6f:af:0a:21:6c:87:ad:0e:76:
63:2a:8f:2b:a5:06:fd:fd:95:1a:0e:a0:1f:bc:1e:
5b:1e:bb:fc:3e:a7:7e:d1:06:cb:a2:a4:8e:ac:f7:
af:96:fc:6c:da:5f:bf:f6:18:83:35:7c:cb:27:9c:
4c:94:4e:a9:10:db:8b:19:61:3b:bf:0e:12:15:14:
f8:b1:7a:29:bc:fc:12:f1:5e:ca:88:9b:b8:f3:7b:
f7:cc:05:7d:4a:de:1e:6b:f1:df:d6:fc:99:02:22:
58:14:5b:0d:9b:17:5c:d3:02:91:f8:2a:17:f6:f9:
9d:dc:45:f1:8a:5a:60:76:09:93:df:c2:17:02:eb:
92:47:db:ff:9a:20:52:b3:c2:53:cc:ee:76:59:ec:
21:ee:d6:58:7c:20:4e:dc:b2:a5:d8:ef:ea:67:ff:
59:53:71:e6:fd:9f:5a:46:92:73:54:67:fa:f9:49:
81:f7:ac:3a:22:0a:53:b7:d0:13:4e:ff:2a:4a:f1:
43:e6:60:b4:34:05:a9:e8:55:cf:09:4a:ab:f0:62:
23:b3:b7:2a:bf:8b:62:62:c6:8b:ee:78:4a:fb:bc:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:78:87:01:05:39:5E:2E:25:15:DA:EC:2C:DD:20:F2:49:FF:C7:75
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:37:b6:58:7f:5f:35:99:cf:6f:85:fa:37:03:d4:f2:51:8a:
39:9f:05:3c:fc:f4:e4:43:e6:3b:d3:05:90:90:77:64:ae:bf:
5b:d3:14:e2:92:50:89:69:a7:00:a9:3b:e3:90:55:60:6b:a5:
a5:3b:83:26:da:c2:18:ca:aa:9f:5e:bb:04:5e:b6:59:5c:94:
ce:de:5e:e8:f1:fd:a1:c5:62:87:bb:f4:9b:21:79:64:66:cf:
bd:f1:d8:2f:95:a1:e5:96:d1:8f:3c:c1:28:6a:85:1c:b2:b7:
37:23:5e:46:9d:7e:73:dc:27:26:00:fc:8a:e4:76:79:e7:71:
9b:45:c3:79:5e:6b:3b:3a:fa:f6:51:53:92:70:36:09:ee:38:
71:9c:11:93:6d:40:4f:ea:8f:f1:7a:21:e7:18:d5:a5:07:33:
c3:b6:99:a4:05:c0:e3:f8:92:d3:42:89:0b:74:d7:98:f0:af:
f2:d1:fb:43:e9:93:f6:ad:37:f8:c1:be:3d:8e:b6:f9:e8:dd:
c3:ac:f7:ae:81:5b:87:26:14:d1:09:a5:03:1c:0e:03:e2:4e:
b8:71:4c:74:20:25:e6:cc:54:d7:5a:52:4e:c7:77:e8:e7:1a:
fb:79:22:82:61:d3:aa:41:45:f0:f4:4c:34:ae:3a:bc:46:b3:
38:bb:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:29 2025 by rpki-client