Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: 0DnN7/1RgblB6Mdbk4S1W99ydHe1GvZC5qcC1E5PGF4=
Subject key identifier: 09:93:89:61:BB:58:86:36:C2:23:81:57:16:87:09:C9:3D:A8:56:B8
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 0199FD6AE6846BDDB9BEFD4A96F085CFD4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 1178
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: BKjS4q7GOvVW8kjA46/UH20sO76dF9wVrLktVki+i3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e6:84:6b:dd:b9:be:fd:4a:96:f0:85:cf:d4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=09938961bb588636c2238157168709c93da856b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:09:d5:97:f6:73:c2:c9:b1:ae:28:6c:eb:24:
53:a5:0d:53:ac:3f:84:26:df:29:2a:1a:b2:d9:ea:
29:42:cd:55:ad:06:af:71:39:63:9b:ce:2a:94:0f:
cd:c8:82:3e:75:86:48:65:ca:9b:43:fb:1d:08:48:
28:2a:ca:a6:09:7a:1a:66:09:57:6c:e5:30:e8:c3:
5a:3b:11:17:6f:41:00:7c:6c:74:1a:b2:24:fc:03:
10:e5:9a:13:a7:73:aa:58:b4:47:ca:9b:74:21:64:
35:07:37:37:3c:55:91:40:6d:68:fb:3b:67:52:9b:
d7:fa:3c:d9:17:ab:8d:06:14:dc:0b:df:b9:b3:dd:
28:3e:e8:05:00:93:68:75:b4:4e:c3:90:72:94:e5:
c6:7a:b7:c6:77:98:21:62:19:ae:78:75:62:4e:28:
85:96:86:89:7f:98:be:53:4f:b6:2e:fd:c5:4c:30:
16:d2:9a:75:e7:5f:fd:68:6f:eb:9b:21:9b:ab:b1:
ca:fb:36:19:10:e0:d1:7c:83:03:16:fa:9e:08:2f:
c6:8a:2e:52:7a:6f:ec:a0:57:35:e4:b7:3b:0a:dc:
02:fc:e1:5f:88:cc:e9:07:ce:a9:77:d6:e6:c4:62:
9a:a1:e3:8e:66:19:6c:77:42:82:c2:27:9b:18:50:
d3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:89:61:BB:58:86:36:C2:23:81:57:16:87:09:C9:3D:A8:56:B8
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:df:3a:d3:22:76:5f:6e:f2:20:00:4a:3f:d0:3a:b4:25:
38:4f:45:84:99:ea:49:ee:ed:ec:42:56:6f:66:51:57:fb:8c:
84:04:20:a2:77:93:16:1c:b8:bf:8d:ac:b9:d1:6f:47:07:04:
2e:fa:36:c1:1b:08:c8:1e:92:9b:1a:f2:d8:87:04:9a:89:01:
ef:f1:c3:da:94:b2:71:70:8b:74:57:ad:e0:36:6a:a1:9c:18:
7c:92:57:8a:17:95:a7:c4:2e:01:c6:d2:59:92:ae:c7:ce:b9:
f3:ba:24:c6:26:ac:26:56:9e:4c:d7:dd:d5:41:d6:e1:c9:e0:
c3:a0:32:40:58:ef:fe:7e:1b:6b:b2:b5:28:25:cd:82:ff:33:
dd:2d:e5:99:84:d0:54:da:02:77:5d:1a:e6:1c:c8:56:58:85:
09:fa:4f:e8:1d:eb:9d:13:7e:be:43:f5:e8:9b:38:84:9d:c5:
da:29:74:8b:9c:15:7b:e6:8f:14:5d:52:81:e2:37:65:ba:8d:
d1:93:a8:e1:b0:b8:63:dd:85:81:01:ae:32:eb:4f:20:87:e4:
77:35:d6:1f:7f:24:0f:c5:22:e9:4d:76:be:cc:92:23:10:4c:
5b:f3:10:c2:6c:74:67:3c:11:d6:c1:d7:13:df:27:2c:60:72:
52:33:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:27 2025 by rpki-client