Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: 8G1ETZn1zchzu2l4aRf64vsUBd3CAQ46R6RUOcSYoWU=
Subject key identifier: 4D:09:C7:5D:05:33:DC:0B:21:C2:72:16:83:1B:51:41:3E:41:D1:4F
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 0199FBB374BD529BC3336B8191FF16E44769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 32
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: 1xRN2ISB9yDhR3Q54HcBc-sUzRM.roa (hash: ggo342L8QjroxZeBPHXxlyJmrWPYU4LhAqkE4B3nRK4=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: 8X2mnucMm08tisx65YojcU4FdWHpPuWRaGyJDbf9R/0=)
3: tnM9DnrSRmOo18qNgvvkTy18Wls.roa (hash: a6GY2FMx4xs8RMENf2iVpRjn282lRrR2VnauLywusWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:74:bd:52:9b:c3:33:6b:81:91:ff:16:e4:47:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=4d09c75d0533dc0b21c27216831b51413e41d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:9f:28:8b:84:b3:25:84:f6:aa:f0:54:87:
28:8f:91:1c:4c:65:c0:e6:e1:ad:37:54:c2:bd:d9:
46:e6:36:46:a0:cd:f6:59:92:42:29:fc:50:e3:8e:
3b:f0:ad:c6:9e:69:74:44:e9:6e:31:40:89:7b:5e:
eb:5e:3c:e3:35:da:b0:db:02:cf:0e:7e:c5:fb:47:
88:62:0c:1c:77:ca:15:9d:65:ae:6c:bd:59:99:7c:
0b:42:76:a2:b9:be:0c:81:84:d3:f3:64:2d:eb:a7:
62:6c:59:45:61:06:b0:d1:20:a4:dd:6d:39:8c:76:
ae:88:90:2d:04:b5:5f:5c:7d:e6:74:06:6f:85:de:
1f:29:29:27:04:41:11:46:2b:86:fe:fd:74:2e:89:
27:f2:73:10:47:8b:64:fd:79:93:6d:39:c2:fd:af:
0b:f6:33:21:90:45:c6:fb:10:c6:09:d4:4a:4c:05:
02:61:cd:2f:10:29:06:cd:3b:61:d4:41:1a:8c:29:
db:b6:42:db:02:80:b3:a0:f8:f6:a5:73:39:a2:c2:
1c:98:6b:67:73:37:c2:23:f0:da:2a:ee:06:76:df:
9e:0b:2f:c4:15:a3:47:1f:a4:70:62:77:91:98:58:
47:19:17:1e:26:ed:34:14:00:5e:09:e8:46:b5:51:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:C7:5D:05:33:DC:0B:21:C2:72:16:83:1B:51:41:3E:41:D1:4F
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:83:38:97:bd:6a:4e:e9:fc:2a:bf:45:22:d4:59:11:9c:ef:
83:56:55:4b:2d:4a:42:60:79:6a:57:90:4b:18:61:0d:7c:d2:
6c:32:ad:e1:c9:21:33:ad:29:bc:3c:8c:bb:c4:00:cc:37:ad:
a7:42:43:ce:de:a2:64:2c:ca:14:e7:a1:6d:4b:25:dc:b5:ef:
c6:c4:3a:b6:b3:e0:88:22:f4:96:b1:7d:86:c2:57:e4:ff:95:
d3:a8:0e:35:f6:29:56:ff:15:95:29:40:aa:87:a0:fc:5f:c2:
0e:a3:47:9d:49:6b:fb:42:4c:76:eb:19:0b:ce:d8:c4:4b:80:
1c:1f:58:92:da:ef:da:72:01:23:77:99:20:fc:e4:d4:9f:cf:
04:f3:4d:b3:92:df:6c:f0:66:86:0d:65:43:f9:6f:6a:20:35:
26:fb:a5:36:24:8e:6b:d3:4c:4b:04:cd:18:7d:cb:b7:d8:86:
69:72:33:e3:0a:e9:cf:7d:4e:0f:e9:e3:11:ed:d2:bd:d0:c6:
b7:49:2e:39:00:f4:34:d2:35:ae:2d:0a:05:38:d7:6f:c5:92:
b1:f6:c2:1b:9f:1c:89:ff:20:32:83:94:b8:30:d3:f0:fd:6d:
3b:74:a8:c5:85:a7:4f:90:79:3a:ea:41:03:3f:6a:c1:a4:1b:
86:9c:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:19 2025 by rpki-client