Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: t8zfxnF/6bFon61CkjWeFHboi6wVxuPYl11gnb3FC1I=
Subject key identifier: 35:1C:8A:E5:00:37:15:27:98:D8:14:E0:47:45:78:EE:94:D5:77:3D
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 0198D4E03E2EA37401FB5B4F290FB44DF974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0F0F
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: QbE/zryzeHHadOTg3WYkEkI5RRT/wvrqY3iD/cd+15M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3e:2e:a3:74:01:fb:5b:4f:29:0f:b4:4d:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=351c8ae50037152798d814e0474578ee94d5773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:6d:23:f6:af:87:f5:60:3b:c8:9b:48:64:
a0:a6:85:e7:22:16:19:7a:32:5f:82:59:2a:cc:fb:
0c:df:38:dc:5a:99:8a:0b:82:b9:af:e6:18:e9:b5:
63:88:40:a6:7b:97:6a:10:e8:81:f3:0b:ab:e6:80:
98:fd:98:0c:d7:b5:06:bf:10:eb:b4:a3:4e:a1:3e:
0d:d5:f9:2e:97:f7:7f:56:4c:cb:3a:3d:d4:cc:95:
55:a9:0b:74:bc:aa:c8:4e:ea:7b:a8:62:d9:0c:1f:
9b:39:83:b5:f5:f5:06:26:33:ce:df:46:8f:62:68:
c6:27:ec:77:c6:d2:d9:95:2f:a7:f4:1f:6f:40:8d:
b0:0e:04:ea:b3:52:e7:ff:35:61:c8:ef:b1:5b:b5:
b0:ca:58:62:a7:f1:72:56:58:2e:17:fa:02:c8:4b:
ec:7e:7c:4d:21:75:40:0e:20:37:79:2c:01:c4:50:
95:e7:89:77:1e:13:7a:10:9e:ed:ba:0c:2a:17:a6:
b8:e2:22:90:33:e2:3a:c9:8c:83:b0:43:af:8d:a9:
cf:4c:61:49:5a:1f:fa:f1:72:0a:ac:12:4e:50:6d:
2e:ba:2b:7c:34:4d:a7:1c:d7:5f:e7:b1:21:00:68:
26:c8:98:74:50:70:39:0c:c2:4a:37:fe:7e:a3:ba:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:8A:E5:00:37:15:27:98:D8:14:E0:47:45:78:EE:94:D5:77:3D
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f3:66:45:35:1b:9a:84:01:f5:79:8c:c0:cf:1a:23:b6:08:
34:3d:94:52:12:74:73:22:db:39:df:56:1f:bd:d1:19:7d:5e:
7f:75:5e:5d:31:f8:40:ed:21:b6:8f:a6:e0:82:22:51:c2:47:
5f:0e:ce:ee:9c:4e:d4:bf:be:07:82:77:36:87:25:ab:e4:bc:
58:78:ba:cf:a3:95:99:30:cc:6d:86:4a:20:fc:94:3b:34:72:
1e:c4:e1:1f:ff:33:84:70:c1:05:17:c8:83:ae:19:69:c2:58:
7a:c2:f4:88:a9:3f:94:96:7c:a5:ff:3c:e8:b0:bb:86:59:64:
c5:e4:d0:94:52:3b:cb:68:86:f9:f1:03:d3:01:a5:27:1d:ba:
a8:19:c8:57:e0:57:dc:4d:94:a0:8e:7a:77:82:0a:d1:10:da:
9f:01:ea:54:86:73:48:44:d9:95:0e:6f:9c:a7:86:6d:12:c6:
02:fc:24:78:4d:bb:fd:2e:26:4f:85:de:aa:3d:97:08:81:50:
64:22:5d:de:7b:1b:9e:aa:7a:e6:6b:fc:20:da:19:19:f2:ee:
09:77:75:95:d2:a6:a2:72:1c:3a:c8:0b:51:f4:60:eb:0f:d0:
ef:8b:05:de:4d:55:e6:cb:1a:42:40:18:bb:e5:c8:5c:4b:fe:
0d:04:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:12 2025 by rpki-client