Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File: OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier: 102QSpNoWjXCTvw7RqkISduwijmtWCy8EzmAMfnTias=
Subject key identifier: FF:83:D2:D5:1D:D9:D1:F6:D8:DD:0E:0F:65:29:D8:E9:D3:6F:9B:CA
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial: 019A03DA5E0EE1419BB2ABD738B634865FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number: 03E6
Signing time: Mon 20 Oct 2025 23:00:33 +0000
Manifest this update: Mon 20 Oct 2025 23:00:33 +0000
Manifest next update: Tue 21 Oct 2025 23:00:33 +0000
Files and hashes: 1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: r9lGq0w+JDRvnOaWj+p2de+DFvN8RMrDptY4p8lBTsU=)
2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:5e:0e:e1:41:9b:b2:ab:d7:38:b6:34:86:5f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
Validity
Not Before: Oct 20 23:00:33 2025 GMT
Not After : Oct 21 23:00:33 2025 GMT
Subject: CN=ff83d2d51dd9d1f6d8dd0e0f6529d8e9d36f9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8b:81:eb:03:84:da:0c:14:a7:37:1b:cb:2a:
e5:3a:dc:ab:20:fe:26:f1:ba:87:ad:73:a1:21:91:
75:88:c0:a4:77:1f:8a:ee:f2:7e:d8:8d:9a:cd:d1:
5a:7f:5f:bb:3d:d9:19:1c:16:f1:47:3a:fb:59:eb:
31:97:2b:fd:55:03:6c:02:3b:f4:da:8a:e2:fc:f3:
59:a2:50:6c:bd:60:4d:90:fa:46:8f:83:b3:9b:cb:
5b:82:ea:9c:61:d4:6e:f1:d0:8d:48:87:5e:f6:f7:
ae:cc:6d:12:ba:88:b3:30:86:84:78:13:eb:91:74:
5b:85:b9:fe:a0:fa:38:04:98:f4:d6:a4:45:a0:31:
65:a5:c3:18:7f:12:58:a3:5b:50:71:d8:b5:a3:0e:
04:64:d8:40:ad:46:27:a9:7c:2e:8b:3e:5b:2c:6b:
9d:2b:75:b1:f6:22:7a:2a:30:98:99:f5:8a:cc:b6:
74:5a:64:06:f2:06:25:05:46:52:99:66:56:a4:e5:
89:b5:3c:d8:d6:0c:7d:6e:e3:5e:30:03:f5:f4:b8:
1f:92:47:7b:4f:f8:20:03:4a:7e:0c:ba:4a:95:eb:
7b:d2:6f:30:3f:e2:c7:35:56:0f:e4:c3:6b:ef:d9:
54:e3:83:be:16:4e:c5:5b:84:fe:ab:3d:d8:91:55:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:D2:D5:1D:D9:D1:F6:D8:DD:0E:0F:65:29:D8:E9:D3:6F:9B:CA
X509v3 Authority Key Identifier:
keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a3:31:f8:d7:53:88:c2:9e:3c:26:ad:78:48:e0:82:ac:0e:
8d:81:d1:bb:6f:e5:9a:48:aa:0f:2f:57:76:0e:6e:10:12:32:
ab:59:17:2a:b1:de:a1:3b:ab:44:b9:af:8b:4b:6c:8c:b3:32:
b6:13:93:c4:be:4b:8e:22:1c:38:32:9e:07:f0:22:e9:bf:e5:
9f:64:22:88:f8:23:78:64:ad:19:28:ed:69:c4:99:e0:ef:be:
f5:1a:16:a2:49:73:df:83:4a:d8:88:7f:ce:81:33:d5:a8:40:
f3:4d:3f:a0:ee:89:83:31:46:9c:fa:75:7d:82:94:00:fe:a0:
52:75:30:ae:0f:74:77:91:f1:c5:e1:86:5d:33:bc:d8:58:0a:
6d:88:d0:ad:03:f0:11:e4:d4:5c:dd:6f:9f:09:6f:c0:4f:5b:
74:08:a6:b8:94:29:9b:1f:64:91:0a:17:f1:11:42:b9:10:59:
d4:05:23:7d:33:0a:48:a6:ab:6e:7a:51:c7:e5:db:57:c0:c6:
98:c5:b0:9d:3d:a7:19:56:2d:d7:bc:3a:cb:22:93:02:90:61:
d1:c6:9e:8b:14:e8:9f:41:ca:f3:ae:d4:31:5d:09:06:4f:0e:
57:19:d1:e6:59:5d:14:5a:cd:af:01:37:c3:fc:c4:d1:76:4a:
d8:72:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:58:33 2025 by rpki-client