Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: nLnuiWAQcL+IqaQNJP1OnjiF+ALa2ewgBDj2VucuONo=
Subject key identifier: 91:93:00:E7:EE:6B:8B:ED:59:03:CA:37:77:15:D3:E0:AA:3B:30:CA
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019A01B67212B0DAB22887D38BFB42B8375B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 142A
Signing time: Mon 20 Oct 2025 13:02:05 +0000
Manifest this update: Mon 20 Oct 2025 13:02:05 +0000
Manifest next update: Tue 21 Oct 2025 13:02:05 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: XRqFLOTwIqsGltqBtKLCIWnlKvfg5RUSbAkCUhGTV8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:72:12:b0:da:b2:28:87:d3:8b:fb:42:b8:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Oct 20 13:02:05 2025 GMT
Not After : Oct 21 13:02:05 2025 GMT
Subject: CN=919300e7ee6b8bed5903ca377715d3e0aa3b30ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:ad:71:b1:20:e5:65:22:20:a2:4a:b1:c7:
69:63:42:4a:b5:0f:94:37:ce:db:50:ab:58:ba:d3:
dd:7a:a4:d1:dd:34:42:24:a9:6c:aa:b2:8b:c2:9b:
8b:7c:bf:0b:ed:e7:fa:6a:f1:a1:a4:9c:e1:cf:ce:
12:24:af:ab:59:f0:ba:91:a0:67:92:cf:b1:a4:92:
fe:f6:df:f9:e0:03:1a:cd:16:bb:00:fb:13:97:43:
3d:58:c6:0d:7c:a6:d3:fc:ae:6a:2d:e9:3a:a9:2d:
67:96:2e:82:29:32:74:f5:33:12:df:6e:2a:96:90:
59:75:26:7f:2d:62:1d:71:64:e0:e5:e5:8c:78:c4:
c4:7e:5c:c6:70:8a:18:dd:ec:eb:8a:17:df:ae:69:
95:80:3d:70:6e:11:1b:71:20:0b:96:a3:d9:5d:cb:
a3:e2:a8:f7:75:d4:48:11:ed:b0:03:25:79:d8:ae:
d0:3c:8c:07:0c:98:95:c1:8f:68:1c:95:f3:c5:6c:
c2:15:80:2d:90:e5:91:72:54:22:98:1a:e9:81:67:
c3:06:ab:1f:9b:19:36:ff:d5:89:7b:a1:41:73:5d:
a4:95:75:96:37:1f:fa:82:1b:b9:06:66:f9:ec:4f:
30:56:7a:2e:f7:f1:4c:7a:ba:74:35:d6:9b:03:f8:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:00:E7:EE:6B:8B:ED:59:03:CA:37:77:15:D3:E0:AA:3B:30:CA
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b3:77:0b:b9:da:e9:9d:ca:c0:9a:45:1d:18:fd:c7:81:f5:
5d:6c:fe:a9:72:96:46:97:bc:a0:ef:7c:e2:ce:a2:44:6c:47:
55:09:c9:6f:b7:b1:05:ac:ba:88:64:a4:7b:bc:fd:7a:42:06:
93:e1:67:60:9d:65:06:f6:bd:56:4e:80:ec:dc:ab:6b:19:43:
94:3a:79:7a:04:3f:e6:9a:d8:63:95:5e:79:f7:04:a1:38:e2:
b7:0b:21:65:c6:16:95:35:76:5a:5e:92:a1:3e:d2:f1:1b:ba:
70:c5:7f:4d:ce:f1:cf:ed:53:c6:0c:67:70:82:06:be:ef:5e:
1f:cd:8a:ce:28:55:90:a1:9e:89:46:1e:79:77:f3:d6:40:1a:
ad:09:37:4f:8f:06:0a:21:10:2d:f8:74:a7:6d:2e:d9:12:79:
32:17:30:33:6c:0c:c9:38:f6:17:7a:cc:79:d7:bc:c3:af:89:
48:48:05:2f:0d:57:12:5f:5a:91:b4:e3:84:71:e7:99:5d:4c:
17:dd:b2:fc:87:59:9f:ff:9c:41:fe:b0:7d:b2:60:f5:b0:b2:
b8:f1:b9:e3:13:02:31:ca:cd:c5:cf:e6:57:b5:9a:f3:09:fe:
d5:48:b9:aa:a6:06:7a:91:b0:70:c1:9d:26:da:07:1e:15:ea:
6d:8a:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:51 2025 by rpki-client