Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: ZSu1kYi4U8CEsw+B/UQvhqHjbuu6Dyprbau7Z9+drm0=
Subject key identifier: 92:51:96:82:83:0A:D7:B8:ED:93:A2:CB:B6:C7:EE:93:19:23:3A:F9
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 0199FBEADD70516B08FA6523EBDC3E8EE2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0DF4
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: x44X+gEkssK4NDk+otizOHwmfab84qA0VL16t4h2Ktw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:dd:70:51:6b:08:fa:65:23:eb:dc:3e:8e:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=92519682830ad7b8ed93a2cbb6c7ee9319233af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:5c:ce:14:0c:a3:1d:d5:e0:d8:d7:fc:9a:
00:dd:0c:3c:fa:52:55:f2:3a:35:15:1d:ba:30:36:
34:25:9d:8b:bf:2a:ac:d1:8e:d3:58:8e:83:ae:b2:
92:77:e8:20:9d:2c:0c:c8:39:fd:a9:44:37:04:a5:
f8:6a:23:ab:c0:47:6c:57:59:04:92:67:ed:d4:05:
07:1f:ef:ee:94:fa:a7:e8:69:19:5d:9f:39:a2:51:
98:5b:97:eb:bc:9b:5d:94:ef:c8:dd:12:cd:e7:c7:
ef:62:3a:1f:e6:6d:36:13:21:b6:25:a0:42:d2:b0:
c6:8f:16:c3:8f:9d:2a:9a:01:01:09:05:74:3c:16:
36:a8:f2:a7:da:e2:df:2e:82:a3:b7:23:73:fe:c8:
97:84:d4:8f:c2:99:6f:8c:31:1d:9b:fa:97:c6:6c:
7d:d7:10:42:bc:f8:d0:8c:c8:13:77:96:3f:f3:3b:
7c:f5:6c:91:1f:1b:7d:b0:a5:92:d0:31:fd:6c:d0:
83:9c:e1:b1:4f:ee:0f:fa:b9:0a:cf:52:b5:c1:83:
3f:13:e4:46:71:73:84:da:1a:88:43:a3:87:47:65:
89:76:2b:a2:dd:d1:05:d2:44:e1:e3:0d:fa:0a:93:
29:16:73:44:02:8a:97:af:b8:07:4f:d6:70:10:39:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:96:82:83:0A:D7:B8:ED:93:A2:CB:B6:C7:EE:93:19:23:3A:F9
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:71:ab:0d:6b:3c:49:39:4b:60:a7:13:86:5d:1d:79:52:d7:
fa:a7:a6:47:db:73:2b:62:c4:8b:58:c4:12:7f:2d:5e:20:c1:
94:b9:b3:bb:1a:ca:23:dd:06:80:46:9b:18:44:15:b8:01:e3:
41:13:af:c6:2e:40:43:45:c1:0f:55:9c:be:f6:7f:b4:a0:49:
93:ca:b6:b3:13:25:30:5b:07:39:a1:55:b1:e9:cc:04:f7:f5:
8b:b3:fd:95:c4:3e:88:d8:2f:5a:0a:a2:66:4c:23:83:de:ed:
b8:10:0c:70:39:be:36:07:61:5e:7c:c5:fd:f1:e4:bf:f1:c9:
16:89:f9:99:b9:88:b5:4c:98:05:ac:87:97:ad:b4:9a:e2:ae:
41:cc:f0:1a:92:01:a7:5f:15:27:de:6b:28:d3:11:76:e6:8c:
6f:4b:14:c6:e7:7e:bc:42:d1:d2:42:02:67:b1:e9:a3:65:ff:
5a:eb:94:9a:8f:ed:6d:22:3d:61:f5:2a:83:a7:78:1b:42:b5:
61:9f:39:55:d2:c6:9f:f5:02:ab:2b:0a:dc:a5:43:35:58:50:
80:4c:12:4e:ac:c8:1f:c5:0c:86:7e:ac:ed:a2:05:ae:e5:6b:
40:cf:4c:3b:94:c5:89:0b:24:73:23:ee:50:5a:fb:95:99:e0:
8d:09:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:12 2025 by rpki-client