Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: 85L8YM02j1rCstLWwKfNJ9N4pvTBiyMkP5ghZgTTo0Q=
Subject key identifier: 47:A0:93:98:05:C0:C8:69:90:7D:6E:8E:F5:F2:3A:BE:04:7A:22:72
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 0198D65F4A38188A0AAB91D7BFF90E678B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0D5C
Signing time: Sat 23 Aug 2025 10:00:25 +0000
Manifest this update: Sat 23 Aug 2025 10:00:25 +0000
Manifest next update: Sun 24 Aug 2025 10:00:25 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: uSpJGNSp/xHw+6hGpyyu1Tz9vfsZzClLsppl2BpZzNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4a:38:18:8a:0a:ab:91:d7:bf:f9:0e:67:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Aug 23 10:00:25 2025 GMT
Not After : Aug 24 10:00:25 2025 GMT
Subject: CN=47a0939805c0c869907d6e8ef5f23abe047a2272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:d8:62:8a:cb:ee:a9:56:30:8f:ce:fa:35:
39:12:f7:29:b2:23:78:d4:09:7e:62:cf:77:da:84:
e4:72:34:d6:1c:1c:46:d6:4c:3e:49:3d:28:45:fb:
ad:c6:c7:71:b0:71:d6:51:25:d6:25:5d:69:47:40:
ec:08:63:f0:e6:b6:92:c3:90:18:64:3b:c7:6e:d3:
a6:27:36:5d:fa:eb:5d:2a:54:b8:2a:25:b1:ae:31:
d7:6b:e9:23:29:e4:63:d9:1f:5a:5b:04:44:dc:09:
0e:8f:6f:0d:42:8f:c0:5d:43:4c:aa:b3:6e:16:76:
88:98:1f:f8:f3:37:60:47:2c:cc:93:73:50:91:a8:
e2:04:62:4e:50:b2:c5:d7:a4:26:e4:4e:20:8b:02:
d8:fe:65:a5:cf:f8:31:fb:4b:10:97:2e:84:fa:f8:
ea:ac:d4:d1:2a:4b:1d:46:bb:6c:a1:7c:7e:f4:d8:
47:82:09:9c:4e:61:20:4a:01:8d:be:6d:cf:3e:a2:
4e:dc:5f:98:3f:5b:67:6d:23:12:f3:89:09:8f:b1:
21:46:01:8c:7e:46:84:3e:37:48:62:7f:20:d3:98:
0d:8e:e8:de:c2:76:a6:e0:8f:f0:4f:1b:89:55:1b:
2d:14:93:3c:06:5d:6e:04:f7:77:13:5e:16:b9:99:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:93:98:05:C0:C8:69:90:7D:6E:8E:F5:F2:3A:BE:04:7A:22:72
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e6:03:80:95:4b:2b:c9:fe:38:ce:a6:75:9d:ce:15:42:9e:
dc:e6:ab:97:c3:e6:ea:0d:63:40:1b:f4:2f:b7:3d:92:2a:15:
4d:de:f7:e6:9e:41:d4:24:ce:6f:ba:75:0e:7e:0f:5a:85:c5:
fc:71:72:91:df:b6:29:dd:b2:4a:95:73:c0:85:3e:4c:74:5d:
aa:d9:f5:1e:3d:64:ce:0a:57:81:75:d3:46:c1:79:d0:1d:f3:
89:eb:23:9b:7f:69:f3:1d:a7:be:16:0a:03:e0:a9:29:fc:45:
b6:24:ae:8d:cb:d9:40:89:ca:04:b5:90:4c:6a:45:9b:2e:aa:
b0:23:0e:be:1b:51:4f:1c:e2:d5:13:53:8e:ec:10:dd:23:8d:
0f:26:4d:1f:7a:20:83:3c:3f:59:e0:45:58:f9:b4:04:cc:3f:
99:49:b7:49:1a:69:c2:8e:4d:9b:c6:b0:66:02:94:02:36:45:
40:a9:8f:35:4e:b4:7d:d7:2f:b2:21:59:28:5e:5f:64:67:0e:
f1:51:94:23:b0:a0:a3:f0:b2:0d:97:1a:f2:8a:f2:67:47:7d:
70:b4:92:ca:9d:13:e0:e6:c6:b3:f4:6f:c0:c2:92:40:9f:c4:
6e:34:2d:64:8b:3d:9c:f3:b4:86:6f:7a:0c:83:c5:8b:e9:92:
e3:17:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:40 2025 by rpki-client