Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: iq7y38uIvWgfHvfS8MYRFrZCnBOQicwgV7WK8wraodg=
Subject key identifier: E2:4F:F0:67:F4:09:6D:3D:5E:78:02:DB:49:FE:91:A1:8F:53:19:14
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 0198D515B6D5D9948CBA3025F97C4E0F59F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0B29
Signing time: Sat 23 Aug 2025 04:00:26 +0000
Manifest this update: Sat 23 Aug 2025 04:00:26 +0000
Manifest next update: Sun 24 Aug 2025 04:00:26 +0000
Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: AzSXQghCrGWJuKQDWVhThcfRIFiZ/EZNp3tWMxp2b4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b6:d5:d9:94:8c:ba:30:25:f9:7c:4e:0f:59:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Aug 23 04:00:26 2025 GMT
Not After : Aug 24 04:00:26 2025 GMT
Subject: CN=e24ff067f4096d3d5e7802db49fe91a18f531914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:5d:ba:a5:ba:6b:23:f3:b5:1f:70:82:ac:
39:ff:87:dc:52:78:ae:c4:64:df:d5:ac:36:b6:04:
67:a0:7f:07:f9:57:93:de:ed:38:0a:82:d0:c4:e7:
16:25:1a:44:c8:01:7a:87:13:d0:23:26:44:ae:d4:
a5:91:ae:59:f5:7e:e1:30:89:3f:8e:d3:bf:c6:ce:
f4:34:e3:6f:fa:49:95:68:aa:72:d6:eb:94:01:d5:
14:1d:68:08:bf:9b:96:53:a4:63:06:06:a2:31:36:
c4:4a:5f:a7:15:3e:ab:de:43:33:c0:e1:dc:3f:8a:
a0:71:67:fc:34:be:05:a3:c3:2c:e6:e5:f5:f2:1e:
3d:02:5e:18:2f:39:d4:52:86:dd:a3:60:93:ed:e1:
d3:4a:d2:a8:f3:ea:b1:e8:09:f6:5d:b3:d9:42:da:
18:ad:06:d2:72:57:5a:12:65:0e:93:e6:17:3d:64:
38:23:6d:4e:bf:c9:e1:77:54:0f:a3:9c:5c:2a:10:
a3:67:df:86:80:18:80:b8:10:d6:ae:25:69:86:3a:
49:ec:ca:53:94:0e:72:b5:06:4b:a2:f6:70:6d:3c:
41:95:fc:62:1b:a2:0b:cf:a0:de:2f:f4:fb:3d:ed:
60:97:d6:79:c2:a5:ce:fe:31:68:7f:93:fc:08:a8:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:F0:67:F4:09:6D:3D:5E:78:02:DB:49:FE:91:A1:8F:53:19:14
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:06:b4:b7:47:01:2d:de:ba:da:5d:71:dc:f4:3f:8a:a9:f7:
46:7b:c2:07:0c:b9:05:30:55:d0:62:ee:59:80:5a:84:da:24:
6d:a1:25:99:34:a1:fa:19:d5:ac:ef:84:8d:aa:4e:f2:b1:20:
bf:57:24:7b:a1:9b:8a:5c:97:9d:35:52:57:7f:fc:90:79:fe:
32:2a:10:3e:cd:87:a1:e6:e3:48:3e:05:49:a5:18:e5:22:82:
8a:84:29:52:e9:c6:00:73:5c:d3:69:3e:c2:25:d8:b8:70:15:
b1:db:a5:6f:13:e1:4c:90:4a:4b:5c:cc:de:93:d7:c1:2c:e5:
43:b9:57:70:6e:7f:ec:58:a9:1c:48:62:10:49:41:2b:8b:54:
89:da:41:3b:31:58:09:01:99:83:ea:6b:44:71:99:4f:19:2f:
fa:6d:10:39:c4:ee:b7:b7:2f:71:cb:73:48:7b:cf:54:0b:ac:
f0:df:ce:15:a9:11:f2:7a:c7:c6:fc:b6:fa:6d:6a:82:19:25:
9e:f5:f7:d1:27:b1:63:c6:23:8d:ee:ec:d4:4b:cd:be:65:13:
55:f7:71:86:5c:38:8e:08:ed:a6:c1:b9:d7:29:b5:c0:b3:d6:
07:6d:28:8f:56:b4:2f:00:c3:19:78:7a:e4:9b:0a:81:cb:02:
ec:a7:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:58 2025 by rpki-client