Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File: obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier: UaDlRKVMQo0VL9II1bzRqOmGPl1SgElirYFtTOKyYlA=
Subject key identifier: F0:1B:52:0B:B3:71:1A:3F:D8:D9:B7:F1:96:5A:60:43:05:DA:4D:83
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer: /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial: 019849656FF15D105C3DB62531EFE1F87BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:00:41 +0000
Manifest this update: Sun 27 Jul 2025 01:00:41 +0000
Manifest next update: Mon 28 Jul 2025 01:00:41 +0000
Files and hashes: 1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: q+UMIn60zxc8yhjKpRN4tl8M5TDe43YC1RZgM/rg9tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6f:f1:5d:10:5c:3d:b6:25:31:ef:e1:f8:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Validity
Not Before: Jul 27 01:00:41 2025 GMT
Not After : Jul 28 01:00:41 2025 GMT
Subject: CN=f01b520bb3711a3fd8d9b7f1965a604305da4d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:5d:45:3d:eb:17:a0:3a:de:7f:65:b8:4c:
32:38:61:a1:cf:1a:6c:46:4e:a1:7c:fb:fb:21:1e:
c3:f6:e4:fe:be:d7:58:eb:80:92:cd:74:78:2a:21:
73:94:0e:a1:d4:68:1a:77:58:90:dc:91:97:e2:a1:
82:3d:a9:b0:4e:ed:38:ae:95:45:ca:0f:9e:2e:be:
39:8b:1e:88:67:b9:25:9f:95:04:13:95:b0:f0:9b:
99:7d:74:e6:3d:18:21:44:e0:34:f7:28:e4:77:ef:
77:4c:0d:42:1d:8a:49:6a:f9:12:c7:34:e3:9c:4f:
9f:e8:10:92:8f:a7:b4:50:51:a4:13:11:eb:7a:43:
af:a9:b3:24:85:4e:25:fb:4f:e1:40:82:5d:51:c2:
e0:a0:08:1a:7e:46:96:7f:88:a3:ea:93:8f:1c:2b:
8c:64:d9:a3:11:2b:ef:ae:c5:64:cd:21:87:87:6d:
08:b8:5d:55:09:31:62:a2:09:8f:1b:e8:3d:63:fe:
98:5c:4d:c3:08:53:f3:b7:19:df:66:5c:f6:0f:61:
f6:99:fc:ac:3f:28:3a:d0:63:8f:f1:c7:9f:16:a4:
55:73:9f:1c:8d:1f:89:d5:9b:ab:4c:19:9e:4d:a5:
8b:a6:ee:d2:cc:c7:75:90:b3:b3:1f:ad:b5:bb:04:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:52:0B:B3:71:1A:3F:D8:D9:B7:F1:96:5A:60:43:05:DA:4D:83
X509v3 Authority Key Identifier:
keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c4:58:6f:51:40:9d:42:ba:2e:ad:14:6b:05:f9:ca:5d:ae:
fc:7b:2e:7f:66:e3:6c:37:a4:86:f9:03:6d:b7:0b:06:4f:c9:
e2:e3:4f:ee:23:c9:72:f0:f1:32:96:d5:42:d0:01:8f:7d:2e:
35:a0:b8:e0:f6:4b:4b:ed:fb:b3:00:f9:aa:75:bc:09:3a:87:
f9:24:2c:3c:3f:f3:29:e7:fb:83:9a:5b:54:c2:86:65:6a:20:
22:5c:ca:e9:61:12:63:5f:85:52:e1:60:0e:79:57:22:70:0e:
d1:4e:98:60:ca:1f:40:c5:f0:e8:ec:97:42:a1:94:5a:b2:11:
59:d0:5a:69:bb:0a:9b:54:fb:b6:6f:d5:ad:d0:fd:0c:ae:4d:
24:5a:88:3a:e8:6b:c0:9b:7d:93:2e:59:c3:8a:07:eb:4a:cd:
d2:15:1e:29:1c:97:3d:2c:f3:48:2b:84:12:de:11:14:7c:c0:
ce:f5:37:82:22:96:e0:42:12:c5:c4:93:fe:dd:c3:6b:17:5e:
0c:81:98:f3:e5:9d:85:0d:d4:17:55:5c:c5:80:c1:30:74:75:
82:83:ef:f5:53:4e:db:82:bb:ee:f1:ab:eb:f5:77:cb:62:ea:
ea:44:86:83:b4:ad:e6:46:e0:14:69:64:bd:f6:b9:26:08:e2:
6c:7f:77:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZW/xXRBcPbYlMe/h+HvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjdjN2I0MDk4Njc0YTA0ZmIxNzc4NDJjZWM0ZWViOWJm
ODllMWUwHhcNMjUwNzI3MDEwMDQxWhcNMjUwNzI4MDEwMDQxWjAzMTEwLwYDVQQD
EyhmMDFiNTIwYmIzNzExYTNmZDhkOWI3ZjE5NjVhNjA0MzA1ZGE0ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqBdRT3rF6A63n9luEwyOGGhzxps
Rk6hfPv7IR7D9uT+vtdY64CSzXR4KiFzlA6h1Ggad1iQ3JGX4qGCPamwTu04rpVF
yg+eLr45ix6IZ7kln5UEE5Ww8JuZfXTmPRghROA09yjkd+93TA1CHYpJavkSxzTj
nE+f6BCSj6e0UFGkExHrekOvqbMkhU4l+0/hQIJdUcLgoAgafkaWf4ij6pOPHCuM
ZNmjESvvrsVkzSGHh20IuF1VCTFiogmPG+g9Y/6YXE3DCFPztxnfZlz2D2H2mfys
Pyg60GOP8cefFqRVc58cjR+J1ZurTBmeTaWLpu7SzMd1kLOzH621uwT2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAbUguzcRo/2Nm38ZZaYEMF2k2DMB8GA1UdIwQY
MBaAFKG3x7QJhnSgT7F3hCzsTuub+J4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NWFlMWItYjA3Ny00NDhlLWEzMjgt
N2MwNWExZmY1NDliLzEvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84NWFlMWItYjA3Ny00NDhlLWEzMjgtN2MwNWExZmY1NDli
LzEvb2JmSHRBbUdkS0JQc1hlRUxPeE82NXY0bmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMRYb1FA
nUK6Lq0UawX5yl2u/Hsuf2bjbDekhvkDbbcLBk/J4uNP7iPJcvDxMpbVQtABj30u
NaC44PZLS+37swD5qnW8CTqH+SQsPD/zKef7g5pbVMKGZWogIlzK6WESY1+FUuFg
DnlXInAO0U6YYMofQMXw6OyXQqGUWrIRWdBaabsKm1T7tm/VrdD9DK5NJFqIOuhr
wJt9ky5Zw4oH60rN0hUeKRyXPSzzSCuEEt4RFHzAzvU3giKW4EISxcST/t3Daxde
DIGY8+WdhQ3UF1VcxYDBMHR1goPv9VNO24K77vGr6/V3y2Lq6kSGg7St5kbgFGlk
vfa5JgjibH93cw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:38:09 2025 by rpki-client