Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: BF+YP6j8c25K4O4zsMWiKI/Kou9OibajShKrWsBGPo4=
Subject key identifier: 8F:73:AE:42:21:B8:1F:93:CC:39:36:9D:2B:5A:B2:ED:BC:80:FB:08
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 0199FE474EB5EA249B3972E1FCA055EB177C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0FA9
Signing time: Sun 19 Oct 2025 21:01:49 +0000
Manifest this update: Sun 19 Oct 2025 21:01:49 +0000
Manifest next update: Mon 20 Oct 2025 21:01:49 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: KunYJrlDGraHDHUwmezmhpYFNNrKvGN16iKrfYZvenc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:4e:b5:ea:24:9b:39:72:e1:fc:a0:55:eb:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Oct 19 21:01:49 2025 GMT
Not After : Oct 20 21:01:49 2025 GMT
Subject: CN=8f73ae4221b81f93cc39369d2b5ab2edbc80fb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:a0:db:df:f3:29:15:c2:85:a1:f6:8f:dc:
72:21:a4:77:23:2e:5e:67:26:5d:9a:85:a4:48:89:
d9:1b:38:e5:f9:4b:e8:76:04:06:7b:dc:8c:bb:5f:
3d:e7:d2:f1:89:cd:0f:27:f4:c9:d5:2c:3e:5c:c5:
7e:74:c0:81:79:82:ed:fd:cd:9e:c7:69:e0:40:33:
de:ec:ed:f4:1f:2d:9a:f5:98:61:9f:de:27:98:88:
80:bc:07:e8:11:58:25:25:89:97:04:1d:1d:9e:17:
3a:f7:ef:f4:16:1f:2e:17:3b:bf:6f:c4:7f:18:13:
1e:33:be:4e:44:e8:b2:51:1a:59:12:e8:26:d8:26:
b6:c4:bb:ea:ad:b8:04:d0:d0:88:0f:fd:6f:b4:19:
f0:ff:57:99:ba:71:89:ee:a2:67:8e:62:c1:09:58:
13:b0:27:e7:45:4d:56:65:7a:e8:b9:11:09:a4:65:
b6:97:1c:21:23:a0:b1:79:5f:7b:dd:84:3c:b0:65:
97:b5:04:b9:b8:9f:d8:f9:da:6c:71:55:a2:e6:ad:
35:2d:84:5c:45:a5:1b:b4:73:22:07:a2:a8:0a:ba:
13:42:16:0d:0c:96:e9:00:3a:f8:71:60:c9:b3:7a:
1f:1b:fd:48:38:cc:97:d6:e5:08:c2:e8:83:e1:36:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:AE:42:21:B8:1F:93:CC:39:36:9D:2B:5A:B2:ED:BC:80:FB:08
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:97:25:5b:9b:bc:75:82:4c:37:29:c4:0d:22:fc:cf:a5:
b9:4b:17:1b:d7:ea:8c:3c:e6:5e:34:d0:73:78:92:ae:28:cc:
9f:90:13:5f:95:60:29:b8:16:e1:0c:28:bf:8f:be:f3:40:42:
ca:15:b5:ff:6b:f1:6d:eb:2f:67:96:95:8f:7c:e9:d6:36:53:
fa:fd:62:ed:df:06:49:38:70:94:40:44:e9:8b:36:9e:c9:d4:
7a:de:09:21:94:52:2f:1c:6b:9d:dc:f7:d5:02:e4:31:b1:da:
5a:df:25:c5:63:33:a4:4a:50:00:ec:2e:a2:e8:54:f5:93:ad:
10:03:52:f1:26:59:0d:61:0d:36:25:5c:ce:1e:d8:73:9c:2e:
61:97:30:ad:3c:97:f9:bb:a8:2d:5f:06:12:3d:b6:ba:fa:4e:
9d:c8:e8:02:3e:64:98:df:8a:68:c8:00:e7:1d:ba:00:e4:a5:
b2:80:45:34:2a:a4:7b:c6:05:33:63:3b:1e:e7:0f:d6:7b:86:
23:f1:67:cb:c9:e0:37:8b:7d:1d:80:8c:53:98:d4:ae:49:9e:
2e:e8:88:7f:a1:c8:43:c3:fd:e8:73:0a:2a:c0:90:2e:14:73:
69:bf:0c:4c:c8:3e:21:62:d1:3c:2d:39:fd:b0:27:be:5b:6c:
44:5f:29:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:56 2025 by rpki-client