Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: Emd7is3DQYcT6qbjfDS3kcg4NqAoCUwUBA9K4mITI68=
Subject key identifier: 78:3E:11:B0:37:AE:67:97:54:58:66:4A:75:DC:69:0E:F4:63:12:28
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 019A00D9F13BBBCC456D27FE3474FA033ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 09:01:14 +0000
Manifest this update: Mon 20 Oct 2025 09:01:14 +0000
Manifest next update: Tue 21 Oct 2025 09:01:14 +0000
Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: y6yR7llgv7J2PSpK+Bnvuu7gJLAHAHt/Z58WWzRtibs=)
3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:f1:3b:bb:cc:45:6d:27:fe:34:74:fa:03:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Oct 20 09:01:14 2025 GMT
Not After : Oct 21 09:01:14 2025 GMT
Subject: CN=783e11b037ae67975458664a75dc690ef4631228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:d9:fc:6a:23:cf:94:a2:9b:6d:f2:94:c2:
2b:e1:90:5b:0b:91:da:99:79:39:f9:da:09:dc:dc:
4a:29:6a:a3:e0:9a:68:fc:07:63:a2:bd:6e:d3:4d:
7c:b1:79:ee:d8:2e:98:67:d9:c1:20:24:2d:e6:b7:
e3:cc:28:ad:ad:2d:67:d8:5b:11:0b:ab:07:16:49:
2c:dd:f5:9d:3e:ee:5c:70:bf:e6:79:1a:e2:5d:9d:
54:32:14:fd:8f:c8:29:a8:fb:06:1b:ad:7f:1d:4f:
45:53:bf:9c:d1:8e:88:ba:d4:b5:85:95:58:43:0e:
3b:09:00:a6:e1:50:d9:bf:1a:8d:8f:f6:9a:4f:a5:
a3:52:f1:7d:0b:3a:ab:37:cd:13:a3:52:6f:d0:04:
b5:30:9f:1d:79:71:b7:85:42:fa:b1:be:43:88:4b:
89:55:1e:29:4b:38:a8:5e:b3:bd:dd:07:19:bd:a1:
17:da:f1:a1:a1:a5:8e:f2:39:d8:5b:29:59:16:4f:
f9:cd:36:b2:89:49:9a:93:fb:91:4a:a7:01:b7:61:
7d:93:98:6a:51:c6:36:6e:d8:b6:fd:55:13:1b:55:
cd:4f:60:65:bd:96:3e:09:26:fc:db:df:2a:3f:b3:
b8:c7:11:b0:78:6e:d4:45:5d:df:b1:ee:92:1a:98:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:11:B0:37:AE:67:97:54:58:66:4A:75:DC:69:0E:F4:63:12:28
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7d:29:05:01:42:de:9a:63:71:03:67:99:e5:61:7f:1c:fa:
e2:dd:60:96:42:aa:9e:41:bf:a9:9e:f7:f9:f1:19:e0:01:32:
ce:a6:ae:a8:d2:98:90:ef:ad:8a:fe:35:0c:2f:ef:8f:24:fe:
5a:4e:1b:ac:d8:62:cf:08:ab:37:33:29:41:54:55:63:40:72:
a4:a9:c6:67:42:61:32:47:75:9d:44:e9:6f:bc:97:e0:8e:2a:
56:1b:2a:97:91:3d:4d:8e:87:53:3a:52:4b:02:f4:a6:f9:65:
cc:04:35:38:2f:59:47:80:44:e2:20:ab:69:17:b4:50:ba:c3:
88:f5:b8:21:d3:8c:e8:a8:c8:cf:2d:d9:bd:a5:0f:bd:8e:c1:
6d:83:8f:9e:a8:dc:81:6c:eb:37:ec:32:aa:38:3e:72:4a:20:
09:d0:47:29:c9:ae:8a:84:bd:94:2f:b5:dd:1c:94:9f:ee:62:
ec:45:56:b9:3d:31:db:c4:6c:39:64:03:48:94:24:66:b7:bf:
3c:08:6d:bd:30:9e:a8:33:07:74:87:f0:61:19:92:ca:0e:00:
78:de:52:79:eb:02:c9:e4:30:45:62:11:32:51:40:a5:cc:4e:
76:06:67:55:1f:9f:af:6f:f3:5e:ca:3f:a5:d5:0c:bf:1b:60:
2d:fa:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:55 2025 by rpki-client