Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: IaiNsQZumsNmVfHzJdXCqkoERfj9ng+734NEdrNjP7U=
Subject key identifier: 64:E6:01:20:91:D0:B7:D5:72:9A:D0:15:DD:A1:04:E7:D2:5E:67:E0
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 0199FC8FAF2B9E67DDA8AF62941717FE013A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0BC2
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: DfnNA/Obcgpqa3rN6N3uu+XPrPJcJmoarKBgsnzBO2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:af:2b:9e:67:dd:a8:af:62:94:17:17:fe:01:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=64e6012091d0b7d5729ad015dda104e7d25e67e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:37:7c:52:e7:b5:0f:ae:a7:cd:7a:25:a8:
b5:4f:f6:df:1d:15:b8:0b:59:8c:c3:26:40:41:12:
e5:99:bc:fe:72:0b:f3:e4:05:65:be:f5:78:93:04:
17:6a:47:10:5c:25:a4:f8:c2:1d:5d:f5:b9:05:ba:
0c:97:0b:b6:e0:9c:27:20:5d:38:ea:9d:d7:28:da:
fe:7f:7e:f0:3f:2c:9d:be:8a:c3:17:e7:03:5f:56:
20:44:28:65:bd:07:7a:a4:c6:47:b0:76:e8:bf:6a:
16:c8:c3:0c:c1:d4:2c:db:80:a4:b2:0e:6d:be:76:
81:4a:08:84:fd:7c:b2:6c:00:2b:7c:2a:f5:9b:d0:
97:7f:91:42:d3:9d:4d:57:a2:98:98:e9:b7:3f:b6:
50:37:6f:f2:9b:cd:8b:cc:22:7b:12:66:df:e3:0b:
99:d7:2b:13:82:25:d4:3f:4e:5a:24:52:a8:4b:e0:
18:11:2a:bc:ab:0f:61:e2:37:8e:07:da:9e:8c:4c:
e1:a5:99:af:a1:58:f2:78:5f:3c:ae:40:d9:80:e0:
28:a5:e4:15:87:d4:21:48:29:0e:5c:10:f0:dc:fe:
5c:48:3d:d4:97:ce:9e:45:0a:31:83:2f:d7:a3:ae:
5a:3a:85:4f:7b:ce:40:a5:63:4a:70:8a:8c:b5:c9:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E6:01:20:91:D0:B7:D5:72:9A:D0:15:DD:A1:04:E7:D2:5E:67:E0
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:6c:b3:fe:d0:76:bf:f1:29:2a:fe:a7:22:7c:66:d3:6e:
83:b5:88:68:2f:80:73:8c:ff:50:82:0e:96:9a:47:0c:d7:40:
9d:7d:f5:77:a2:e8:80:51:35:5a:45:df:20:18:9b:05:00:7e:
eb:8b:d8:71:d9:5f:8b:35:e4:3b:f4:a5:93:67:02:ad:50:18:
18:6a:21:8f:e2:fe:06:cd:d1:01:9d:eb:22:a4:40:fa:a3:47:
86:e6:f3:e4:74:06:e8:6b:eb:95:f9:9b:89:e0:e0:d2:57:cc:
e1:5b:97:ee:17:82:01:02:ea:e6:13:bf:cb:ed:b4:de:04:ce:
2f:ce:b3:80:0d:68:b8:08:7a:f0:53:09:dc:9d:d4:00:e0:f1:
46:74:58:13:14:13:66:1c:e9:36:78:f1:c3:6e:0e:93:dd:6f:
94:1e:7c:61:b7:11:9f:3d:9a:17:77:3a:dd:e2:06:ea:cf:a9:
8f:b9:b9:1b:c8:bb:e8:68:86:43:27:4d:8e:08:3d:d6:41:61:
4e:17:ea:c8:ef:9a:41:08:7a:7e:06:b7:d2:23:25:f5:53:0d:
29:c7:a2:2c:83:24:8e:4e:10:2f:e4:8c:f0:91:ef:1d:d4:c8:
46:c4:f8:34:83:20:22:09:27:74:6e:78:8d:5b:7d:28:a9:33:
86:42:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:22 2025 by rpki-client