Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: U5LBKswO+Y3gAjm0j2R8qmDMNMbJBZ3Dpv5sD+DAl1c=
Subject key identifier: A6:CC:1D:23:FB:F7:86:64:FE:C3:44:10:B6:12:1A:3C:D4:CE:02:45
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 0198D4727565716CF62B598EC4CC8844FE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 138E
Signing time: Sat 23 Aug 2025 01:02:07 +0000
Manifest this update: Sat 23 Aug 2025 01:02:07 +0000
Manifest next update: Sun 24 Aug 2025 01:02:07 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: a4GkKtJ8rpOspvWF23O1Djze2HBMdi0IbveQ0/6qlDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:75:65:71:6c:f6:2b:59:8e:c4:cc:88:44:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Aug 23 01:02:07 2025 GMT
Not After : Aug 24 01:02:07 2025 GMT
Subject: CN=a6cc1d23fbf78664fec34410b6121a3cd4ce0245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:c1:00:b6:cb:09:53:54:17:fa:4d:36:1f:
bb:1d:73:03:c7:ec:4b:1c:e8:41:eb:f7:d4:c8:3d:
8f:12:f1:40:fa:1f:e0:9f:3d:2b:93:75:ff:55:64:
4b:62:f4:98:0f:25:b2:0f:9a:bd:84:d7:2c:6d:e6:
f7:03:31:ed:b8:10:61:68:8f:84:92:05:c6:ea:83:
4a:9f:85:aa:fe:92:73:b3:c9:c7:50:1f:4f:7f:be:
8e:fd:50:ce:12:cf:36:58:0c:23:9b:7e:4d:fa:3c:
bc:11:8a:a3:f7:1f:de:5f:56:6c:63:30:76:2a:12:
c4:06:67:95:a0:25:e5:46:82:85:b3:bc:3b:27:b0:
4b:34:5c:9c:94:e9:ff:44:03:95:34:39:26:b0:82:
e7:15:4a:2c:8f:61:f5:7e:a7:e6:31:55:0a:df:80:
50:9c:51:19:85:7a:3a:65:cf:30:f9:d5:a3:2b:d4:
95:09:46:f7:f4:4b:f1:88:9a:0e:46:47:90:47:dc:
6c:6e:f7:93:a1:7a:57:20:63:9d:5a:5a:b3:80:73:
a6:f3:e1:5c:28:da:71:ab:fd:2c:be:84:9b:0f:3f:
0c:63:9d:fd:a7:c1:c0:c9:a3:d3:06:88:c0:9a:e3:
ae:1c:5d:b0:db:a9:a0:af:41:74:40:ad:ec:df:d1:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:1D:23:FB:F7:86:64:FE:C3:44:10:B6:12:1A:3C:D4:CE:02:45
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:55:24:19:a0:ed:e1:cc:d0:f2:19:c1:06:cd:4d:86:0d:77:
cf:30:5c:5b:9d:e8:1d:7d:88:9c:37:9e:42:e2:ba:bc:02:10:
6a:f5:ae:3e:46:52:a1:96:14:6d:2b:45:26:9c:72:65:3c:66:
b0:1f:ac:f0:14:66:25:48:12:09:57:e8:73:39:a2:04:a1:ba:
34:7b:9e:3c:85:9d:c0:f2:44:32:2b:0a:f2:d8:67:6a:35:8f:
60:b0:df:bb:93:13:42:60:d3:70:26:00:6c:2b:2d:2c:6b:60:
88:32:95:fd:fb:0c:74:e1:dd:d3:95:44:19:52:7e:ed:9a:72:
d5:10:9d:10:9a:22:21:35:50:d7:98:ab:dd:40:71:9a:61:6a:
28:0b:e4:57:59:41:b5:8d:12:a4:30:45:63:c3:b0:4e:f3:7f:
44:86:47:3d:28:fe:54:55:97:e4:73:a3:5c:d5:af:4b:4c:e2:
6e:fc:fd:80:82:c8:c7:4f:7c:c7:d5:bf:92:66:03:e4:e6:f4:
b0:51:60:63:fd:e7:1b:56:00:e9:bf:34:e8:77:15:53:22:d3:
76:df:7c:2e:5b:25:07:69:23:86:e3:87:a5:4c:21:60:80:7d:
2f:d7:82:ab:86:6b:8e:54:c6:54:b0:88:09:1b:d2:30:95:6f:
ad:51:d5:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcnVlcWz2K1mOxMyIRP4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTJjOTdkYmQzMjE5NWI2YWZhOTExNDBiNTUyMGI1ZTBj
MmM1YmUwHhcNMjUwODIzMDEwMjA3WhcNMjUwODI0MDEwMjA3WjAzMTEwLwYDVQQD
EyhhNmNjMWQyM2ZiZjc4NjY0ZmVjMzQ0MTBiNjEyMWEzY2Q0Y2UwMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9TBALbLCVNUF/pNNh+7HXMDx+xL
HOhB6/fUyD2PEvFA+h/gnz0rk3X/VWRLYvSYDyWyD5q9hNcsbeb3AzHtuBBhaI+E
kgXG6oNKn4Wq/pJzs8nHUB9Pf76O/VDOEs82WAwjm35N+jy8EYqj9x/eX1ZsYzB2
KhLEBmeVoCXlRoKFs7w7J7BLNFyclOn/RAOVNDkmsILnFUosj2H1fqfmMVUK34BQ
nFEZhXo6Zc8w+dWjK9SVCUb39EvxiJoORkeQR9xsbveToXpXIGOdWlqzgHOm8+Fc
KNpxq/0svoSbDz8MY539p8HAyaPTBojAmuOuHF2w26mgr0F0QK3s39F+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbMHSP794Zk/sNEELYSGjzUzgJFMB8GA1UdIwQY
MBaAFDgSyX29MhlbavqRFAtVILXgwsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEt
ZDkyNzg1YTYxMjE5LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEtZDkyNzg1YTYxMjE5
LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFUkGaDt
4czQ8hnBBs1Nhg13zzBcW53oHX2InDeeQuK6vAIQavWuPkZSoZYUbStFJpxyZTxm
sB+s8BRmJUgSCVfoczmiBKG6NHuePIWdwPJEMisK8thnajWPYLDfu5MTQmDTcCYA
bCstLGtgiDKV/fsMdOHd05VEGVJ+7Zpy1RCdEJoiITVQ15ir3UBxmmFqKAvkV1lB
tY0SpDBFY8OwTvN/RIZHPSj+VFWX5HOjXNWvS0zibvz9gILIx098x9W/kmYD5Ob0
sFFgY/3nG1YA6b806HcVUyLTdt98LlslB2kjhuOHpUwhYIB9L9eCq4ZrjlTGVLCI
CRvSMJVvrVHV/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:23 2025 by rpki-client