Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: ZRf0Br8rJVPs9RdfWXFHnGP899MkQW6qqjTPjf+AmuM=
Subject key identifier: 78:17:F1:0B:08:D8:01:E8:97:71:A4:5C:C5:4B:77:4B:C3:E9:AA:E2
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 0199FA6A80CBD1C90E2E868C213592E8754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0C7C
Signing time: Sun 19 Oct 2025 03:01:47 +0000
Manifest this update: Sun 19 Oct 2025 03:01:47 +0000
Manifest next update: Mon 20 Oct 2025 03:01:47 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: MV0dAKGFIMeKa2Oy8i/a0DUEr5ZIE06FUfIoV8VEpYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:80:cb:d1:c9:0e:2e:86:8c:21:35:92:e8:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Oct 19 03:01:47 2025 GMT
Not After : Oct 20 03:01:47 2025 GMT
Subject: CN=7817f10b08d801e89771a45cc54b774bc3e9aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:d9:2c:46:62:43:cf:b8:13:59:1c:11:a4:
07:54:34:ee:ed:8f:45:3f:c2:ed:11:80:06:82:01:
18:86:49:a4:44:0a:5a:62:f9:8c:f1:48:13:50:47:
4d:4e:2a:89:bb:77:5a:e1:d7:6e:ae:a2:79:50:41:
0f:74:63:59:54:09:c2:25:a1:ad:a1:1a:87:7d:2c:
39:92:85:81:17:36:22:b4:fb:c3:2c:90:9c:5a:c5:
cf:2b:8e:2b:ff:b7:db:78:58:c3:6b:7a:75:5d:7f:
da:9c:2c:50:9e:33:f2:52:55:cf:43:77:d4:45:3c:
a5:07:28:2f:a8:9e:12:78:b3:7d:7b:35:7c:1a:c0:
75:e5:76:8f:25:e9:14:61:23:90:94:34:aa:65:71:
3e:8b:2d:87:1c:c1:3a:b6:18:ca:7e:90:7c:4c:e2:
9c:4d:e3:d4:d5:b5:90:df:89:e8:77:2c:e1:21:36:
86:7c:5f:7b:8f:c1:a9:a9:4f:93:44:bf:61:b6:b2:
34:46:49:c8:f7:34:38:b6:38:07:09:f1:f0:ec:a0:
b0:11:ee:b0:02:eb:61:be:3d:0a:4c:e0:9f:b2:cf:
b9:1f:fc:1c:b4:62:10:00:1c:62:d0:4b:0c:91:67:
04:ee:f5:b9:29:ef:8c:4c:60:2d:45:d4:05:f4:f1:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:F1:0B:08:D8:01:E8:97:71:A4:5C:C5:4B:77:4B:C3:E9:AA:E2
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fa:bf:bb:84:84:c7:ed:70:fe:87:ea:26:cc:5f:1a:d3:35:
ec:82:68:03:7b:1f:e8:25:47:8d:54:9c:90:b6:c8:2c:55:75:
74:8c:77:93:dd:09:d6:78:57:2c:41:a4:e5:75:45:5c:71:77:
21:25:e8:b3:77:b8:a4:e7:c9:62:d3:2f:cb:7f:cd:68:2b:14:
d3:45:95:b0:db:4d:ef:da:01:01:a9:02:d4:db:69:bf:7a:a4:
08:76:a4:b9:2a:4b:00:50:24:a9:ad:b6:71:1f:ca:cb:fb:41:
93:38:ac:b0:e9:a8:53:c9:2c:b6:87:67:ae:fc:cc:23:9f:22:
87:b0:9f:db:62:ca:bb:63:f7:10:31:80:95:dd:13:ea:de:31:
63:64:22:e8:e4:3d:42:55:79:d1:12:d6:56:9c:70:a9:71:dc:
b4:a0:4a:09:30:70:ae:a5:ec:09:5f:96:8c:54:a0:bc:35:08:
bf:b9:1a:9c:6c:0e:fe:c3:80:c7:a1:e3:d6:0c:9d:53:68:10:
1c:4d:c0:7f:d4:fe:7e:a8:46:98:53:d3:73:fa:db:c1:aa:74:
36:6f:70:83:40:bd:ad:db:4a:0f:fa:ea:0e:3a:6e:fa:76:22:
34:48:dd:f8:ff:fb:70:d1:cc:43:1c:ad:80:7b:1e:81:80:eb:
9b:bd:4e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6aoDL0ckOLoaMITWS6HVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi
MzEyZDQwHhcNMjUxMDE5MDMwMTQ3WhcNMjUxMDIwMDMwMTQ3WjAzMTEwLwYDVQQD
Eyg3ODE3ZjEwYjA4ZDgwMWU4OTc3MWE0NWNjNTRiNzc0YmMzZTlhYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+nZLEZiQ8+4E1kcEaQHVDTu7Y9F
P8LtEYAGggEYhkmkRApaYvmM8UgTUEdNTiqJu3da4ddurqJ5UEEPdGNZVAnCJaGt
oRqHfSw5koWBFzYitPvDLJCcWsXPK44r/7fbeFjDa3p1XX/anCxQnjPyUlXPQ3fU
RTylBygvqJ4SeLN9ezV8GsB15XaPJekUYSOQlDSqZXE+iy2HHME6thjKfpB8TOKc
TePU1bWQ34nodyzhITaGfF97j8GpqU+TRL9htrI0RknI9zQ4tjgHCfHw7KCwEe6w
Authvj0KTOCfss+5H/wctGIQABxi0EsMkWcE7vW5Ke+MTGAtRdQF9PG+TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgX8QsI2AHol3GkXMVLd0vD6ariMB8GA1UdIwQY
MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt
MzQ4ZjlmZmJkODgzLzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz
LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfq/u4SE
x+1w/ofqJsxfGtM17IJoA3sf6CVHjVSckLbILFV1dIx3k90J1nhXLEGk5XVFXHF3
ISXos3e4pOfJYtMvy3/NaCsU00WVsNtN79oBAakC1Ntpv3qkCHakuSpLAFAkqa22
cR/Ky/tBkzissOmoU8kstodnrvzMI58ih7Cf22LKu2P3EDGAld0T6t4xY2Qi6OQ9
QlV50RLWVpxwqXHctKBKCTBwrqXsCV+WjFSgvDUIv7kanGwO/sOAx6Hj1gydU2gQ
HE3Af9T+fqhGmFPTc/rbwap0Nm9wg0C9rdtKD/rqDjpu+nYiNEjd+P/7cNHMQxyt
gHsegYDrm71OvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:29 2025 by rpki-client