Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: d/P1cSFDd9Nt/qg1PsnEgJxnu2BVeNHxms2YUxg3cqU=
Subject key identifier: BA:32:09:89:CA:A8:10:1A:7D:19:D5:58:18:41:48:1D:18:6E:F3:B8
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 0198D660B4428769DF05666608AA821C214B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 12EA
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: 7FgI0+cdl68LaUPOfJDcjhz85uDuXKe99+o3mPwnP7Q=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b4:42:87:69:df:05:66:66:08:aa:82:1c:21:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=ba320989caa8101a7d19d5581841481d186ef3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:b4:6c:4d:42:1d:cb:64:8e:fa:4f:c8:f2:
90:16:b9:17:09:a7:fd:cb:1b:a6:78:c9:56:38:68:
2a:69:e6:ff:35:57:06:dd:89:84:27:7b:8f:42:9f:
c2:ab:4a:8d:d7:43:3f:9f:1e:e0:69:63:76:98:ec:
e7:e2:b6:84:f4:24:b7:ec:c7:17:d5:7b:77:9a:fe:
14:05:07:25:10:dc:88:a6:a4:58:0e:1e:2a:98:92:
0b:08:0a:b1:ba:92:81:d0:da:4e:99:fe:99:a9:cc:
18:20:db:a2:9a:a7:4f:6b:38:b8:7c:c1:bc:78:29:
a9:61:3a:77:9f:08:53:ba:6d:fb:36:cf:01:b0:c4:
6d:36:37:7c:0c:d8:f6:9b:df:8c:f6:ba:ea:10:98:
c0:59:8e:15:ca:51:53:4f:69:27:b2:0c:cd:fa:7c:
8b:b2:aa:91:0c:0b:37:56:67:14:cd:d7:b4:50:ff:
33:4a:83:33:d6:7c:ce:79:87:a8:e1:d5:c4:c8:ed:
73:38:13:6c:cd:9a:ba:51:27:0d:a7:92:41:f2:fa:
f0:1e:fd:0e:b3:5b:cc:44:ab:1a:9a:d7:ff:03:f7:
03:64:f9:02:01:1f:10:7f:43:eb:42:d0:f6:35:3a:
1b:de:4b:dd:03:bf:da:4a:d6:be:63:85:5a:29:c3:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:09:89:CA:A8:10:1A:7D:19:D5:58:18:41:48:1D:18:6E:F3:B8
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:68:4b:c8:9f:54:b0:db:ee:da:25:6d:f2:85:10:0c:ba:9f:
44:13:3d:da:03:a9:b4:6f:48:e0:10:b7:d9:3d:15:fa:5c:67:
d7:bd:e8:a4:88:86:57:f7:92:52:7b:bf:0d:8c:7b:a0:e1:46:
c0:25:3e:78:62:46:b4:0d:26:39:b2:ee:27:27:c4:0f:07:f9:
43:27:10:bf:b4:70:8d:f8:fb:d9:34:56:a3:fc:f4:e8:96:c1:
d7:41:68:b0:1a:d1:8e:52:c7:16:38:92:b3:2f:4a:c1:7d:26:
9a:da:f5:92:35:e3:da:12:b4:57:02:71:98:4d:32:26:f5:4b:
4f:4b:5a:bd:e2:35:60:ff:3d:f7:d0:b9:9c:04:fe:37:a4:0e:
ed:a6:d4:69:f3:b0:b3:a8:2e:2d:a5:32:8d:a7:8a:ae:83:3e:
b1:16:b3:ac:43:da:e9:c4:59:d0:3f:05:98:e1:d7:69:1a:dc:
0d:5c:1c:0c:86:ba:76:cd:13:c1:ff:da:72:6c:77:45:76:5a:
ee:39:94:28:d4:3f:47:81:3c:f7:e8:43:ee:c9:04:6b:c2:27:
70:5c:11:cb:9a:6c:4f:b1:7e:71:2c:67:86:aa:4b:b8:71:94:
86:af:25:cd:a5:f4:5a:64:eb:ab:85:9c:7d:61:e9:45:6f:5a:
f5:73:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:13 2025 by rpki-client