Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
File: OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft (raw, json)
Hash identifier: 5rsGEI+LvmaKx0JmHS+71PAHLF0ItgvSbQ38jPdWDFY=
Subject key identifier: 22:B1:16:8B:B6:91:18:56:BE:9E:AF:CC:0C:FD:98:51:42:FC:1E:3B
Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Certificate serial: 0199FAD81C7A43685049918334A79C96B8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
Manifest number: 0C
Signing time: Sun 19 Oct 2025 05:01:30 +0000
Manifest this update: Sun 19 Oct 2025 05:01:30 +0000
Manifest next update: Mon 20 Oct 2025 05:01:30 +0000
Files and hashes: 1: OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl (hash: tADidqEosZpwjDzMngUuS5VvtK1/J5Ddm3iFWbFdMiw=)
2: QibeyjSv1hfxKFEaKrbqmDXpj2I.roa (hash: ifdoDGnGJbL7K4fA7Xk5/reVlWdHN5zJyJBNdlq2ay8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:1c:7a:43:68:50:49:91:83:34:a7:9c:96:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Validity
Not Before: Oct 19 05:01:30 2025 GMT
Not After : Oct 20 05:01:30 2025 GMT
Subject: CN=22b1168bb6911856be9eafcc0cfd985142fc1e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:f2:a1:8f:09:1b:11:18:87:4e:06:02:70:
87:f5:7e:8e:05:1d:77:87:74:e1:06:e4:45:63:f7:
4d:48:c7:76:14:27:73:dd:43:bb:5a:7c:ab:b3:3e:
3c:76:db:2d:d9:32:09:6b:85:ae:37:a9:f3:bf:ec:
9c:60:e8:26:c7:fd:aa:78:9e:3a:be:01:8d:fe:b1:
ac:71:6e:4a:2a:bf:ab:86:85:ef:64:01:c0:3c:ef:
11:b2:c3:88:d3:17:d1:b6:3e:0e:e2:b6:03:25:1b:
c5:9d:0b:8f:4d:c8:e0:a5:af:6e:bb:05:29:3c:36:
fd:a2:83:48:73:c8:7a:c1:87:7c:5b:a4:4a:71:e6:
f8:51:53:1e:de:7b:5f:ff:7f:0b:32:21:55:e8:cb:
ae:15:cc:c7:22:ae:db:89:33:67:a3:ac:d7:66:81:
a9:27:f7:fa:b5:a2:ca:8a:65:4d:39:dc:ca:9b:21:
20:14:14:d8:1f:f2:ed:d1:41:a4:c0:81:69:bd:16:
98:fa:28:f2:58:af:7e:95:0d:fe:3b:9e:8f:ec:c3:
fd:ed:4f:76:05:39:c6:cf:78:15:9f:f7:bf:c6:bd:
40:c6:96:d6:e9:3d:d2:13:8d:13:32:a7:c8:af:60:
2d:68:fa:a6:b5:03:1f:61:c1:84:30:85:28:92:dd:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:16:8B:B6:91:18:56:BE:9E:AF:CC:0C:FD:98:51:42:FC:1E:3B
X509v3 Authority Key Identifier:
keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:20:84:57:e8:6c:71:7e:60:6a:17:d2:65:c2:22:06:f7:44:
55:c9:c9:24:ee:bd:ac:27:44:c8:fa:e9:59:ca:82:0c:de:a6:
ad:da:51:24:d9:3d:aa:3d:ba:ce:6e:1a:03:02:be:5b:07:43:
8b:41:c7:f1:bd:b6:fe:aa:1d:40:dc:9a:a9:95:b8:2f:cc:19:
6b:6e:60:86:d9:f5:82:d5:30:06:1a:cc:e0:8b:24:44:f5:4a:
be:b9:1f:72:95:a6:4d:07:55:72:82:6e:a6:d9:fb:dd:18:e7:
1c:9e:f6:82:23:bc:ad:fd:a9:c2:2d:38:7c:ce:71:19:c0:6e:
9f:7d:47:5c:20:a9:d4:eb:3a:6b:ad:8d:a4:9b:40:ab:7a:9d:
1f:6c:46:9f:a1:2b:8a:c3:c2:bb:74:74:68:0e:14:de:ab:77:
ed:47:d0:d3:49:40:2f:64:cd:f5:f2:ba:10:f6:58:c0:67:f0:
c7:d1:74:d3:a3:7f:c3:50:b5:66:26:46:05:ea:4c:12:2b:a0:
d4:00:95:6c:15:92:b5:6a:37:51:27:a4:9f:4d:d2:6c:79:3d:
81:b2:41:c0:3c:a5:1c:ed:c1:50:a6:19:71:c4:b2:d3:dc:1e:
b9:36:1b:71:a5:8a:45:38:36:21:8e:90:11:ad:1e:ea:52:5f:
cf:4b:f4:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Bx6Q2hQSZGDNKeclrigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTgzMTUwYWYyOTBkMGY2ZDI1YjAzNjEzNmYxY2JmNmIw
ZjE3YzkwHhcNMjUxMDE5MDUwMTMwWhcNMjUxMDIwMDUwMTMwWjAzMTEwLwYDVQQD
EygyMmIxMTY4YmI2OTExODU2YmU5ZWFmY2MwY2ZkOTg1MTQyZmMxZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BfyoY8JGxEYh04GAnCH9X6OBR13
h3ThBuRFY/dNSMd2FCdz3UO7Wnyrsz48dtst2TIJa4WuN6nzv+ycYOgmx/2qeJ46
vgGN/rGscW5KKr+rhoXvZAHAPO8RssOI0xfRtj4O4rYDJRvFnQuPTcjgpa9uuwUp
PDb9ooNIc8h6wYd8W6RKceb4UVMe3ntf/38LMiFV6MuuFczHIq7biTNno6zXZoGp
J/f6taLKimVNOdzKmyEgFBTYH/Lt0UGkwIFpvRaY+ijyWK9+lQ3+O56P7MP97U92
BTnGz3gVn/e/xr1AxpbW6T3SE40TMqfIr2AtaPqmtQMfYcGEMIUokt3efwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKxFou2kRhWvp6vzAz9mFFC/B47MB8GA1UdIwQY
MBaAFDgYMVCvKQ0PbSWwNhNvHL9rDxfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjIt
NzcyMGQ4MmY4MzQ1LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81OTkwN2YtN2U1Zi00ZDhhLWFjZjItNzcyMGQ4MmY4MzQ1
LzEvT0JneFVLOHBEUTl0SmJBMkUyOGN2MnNQRjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiCEV+hs
cX5gahfSZcIiBvdEVcnJJO69rCdEyPrpWcqCDN6mrdpRJNk9qj26zm4aAwK+WwdD
i0HH8b22/qodQNyaqZW4L8wZa25ghtn1gtUwBhrM4IskRPVKvrkfcpWmTQdVcoJu
ptn73RjnHJ72giO8rf2pwi04fM5xGcBun31HXCCp1Os6a62NpJtAq3qdH2xGn6Er
isPCu3R0aA4U3qt37UfQ00lAL2TN9fK6EPZYwGfwx9F006N/w1C1ZiZGBepMEiug
1ACVbBWStWo3USekn03SbHk9gbJBwDylHO3BUKYZccSy09weuTYbcaWKRTg2IY6Q
Ea0e6lJfz0v0Rg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:44 2025 by rpki-client