Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: 616Zw2dBNUCd7UDEty5fQuaTMUIO9EGsb3FqshIZ51U=
Subject key identifier: C4:DF:C8:A6:4A:73:DA:4B:67:C5:DC:66:B5:58:B8:2A:D1:CA:DA:38
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 0197C4C9E1DF42D705F11A84EA0998189972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0A9C
Signing time: Tue 01 Jul 2025 07:00:54 +0000
Manifest this update: Tue 01 Jul 2025 07:00:54 +0000
Manifest next update: Wed 02 Jul 2025 07:00:54 +0000
Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: CBZuH0hUfU4OU5sS2mZPrDiS4FsubKnXY7q4ZbgHviM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:c9:e1:df:42:d7:05:f1:1a:84:ea:09:98:18:99:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Jul 1 07:00:54 2025 GMT
Not After : Jul 2 07:00:54 2025 GMT
Subject: CN=c4dfc8a64a73da4b67c5dc66b558b82ad1cada38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:09:a9:10:a0:ab:e9:f2:ae:63:29:e4:25:
fd:7a:0a:48:e4:cf:68:e4:83:ff:68:90:92:bb:e8:
24:e0:c6:77:1c:f9:d5:8e:c7:c8:fb:6b:7a:93:04:
b8:e8:e8:62:ea:e6:48:28:c1:79:66:c4:b7:a6:fd:
75:c6:cd:e6:c6:2a:04:c7:09:6a:a1:5a:a7:22:5e:
1f:e9:dc:d2:87:7e:b5:dc:03:37:67:de:69:e2:d7:
07:4b:3e:3c:5c:03:43:85:c4:a8:6e:a2:8d:ab:e5:
94:a7:93:4a:ae:ec:b5:55:89:58:e8:ef:c6:32:5a:
74:68:27:10:7a:12:ef:1d:9e:a4:70:9f:b1:25:b8:
cf:f2:61:25:e4:c8:da:3c:eb:6a:50:b8:1c:0e:1f:
7a:e9:35:35:13:a6:17:be:04:90:2a:ff:8a:ad:8b:
7d:af:85:b6:f2:b8:f6:e9:bb:61:0e:3b:71:6e:e9:
a0:d4:86:08:99:f8:df:c9:3b:99:84:b0:1b:0a:5d:
06:32:ad:21:a3:1c:14:87:12:2c:93:b6:52:d7:2e:
fd:c1:43:e8:34:a9:a1:35:bd:33:f8:51:59:86:4c:
4a:f9:ea:22:d8:76:e2:4d:57:66:df:3a:52:e5:6d:
3d:75:de:fb:5b:59:a2:81:55:46:bd:3d:f5:c4:54:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DF:C8:A6:4A:73:DA:4B:67:C5:DC:66:B5:58:B8:2A:D1:CA:DA:38
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:1c:52:5d:ea:6b:4f:70:fb:59:ae:eb:29:5c:59:f7:60:
79:e1:b4:ad:72:03:a7:ef:ea:64:26:58:07:da:91:7a:8f:7e:
49:0b:6f:48:ca:76:f6:b3:12:37:b4:73:a2:29:21:b1:b9:e6:
35:8d:27:74:42:b2:41:8b:da:9b:95:21:6a:02:1b:be:69:9d:
69:94:4d:c6:4a:9f:01:5d:fd:17:04:4a:01:39:1f:43:05:ec:
2d:96:77:1a:f9:c0:74:ed:9d:50:0b:f3:2d:34:46:a3:c8:aa:
da:fd:fc:6d:89:44:ff:8f:44:45:35:1c:62:8d:93:90:c6:a5:
c6:09:47:eb:92:fe:36:a9:65:91:ba:06:3d:09:0e:6f:89:31:
e3:e6:57:32:d2:2c:ab:50:d7:cf:51:6d:33:37:ef:1a:90:07:
aa:56:34:f1:0d:e4:b7:5c:48:c6:dc:c0:5a:e9:6c:36:33:2c:
1b:7d:c2:c3:70:30:19:a1:0d:53:6c:54:8c:5c:ba:20:97:88:
ae:58:33:e3:8a:0f:51:bd:e5:e7:71:78:72:1f:c7:60:2f:0e:
e3:c0:b3:5e:4d:71:13:69:7b:08:49:99:e6:ea:7e:39:26:64:
ca:61:f6:ab:d1:40:8f:90:91:6d:51:1a:15:c3:81:b1:7a:90:
17:25:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:15:55 2025 by rpki-client