Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: /Yj/ZdfEF5irgn3+jvrT5SjFurSAJ5z/6rTSbeL7Ad4=
Subject key identifier: 1B:B3:AE:3F:04:19:F2:8C:8C:09:56:44:25:B8:89:B8:0D:9D:5C:57
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019845F67EDF9ACD3EF0ADCB07931666E707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 14FD
Signing time: Sat 26 Jul 2025 09:00:38 +0000
Manifest this update: Sat 26 Jul 2025 09:00:38 +0000
Manifest next update: Sun 27 Jul 2025 09:00:38 +0000
Files and hashes: 1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: 75+CUEDonMl0dzKZIx8c7Exg5Dl9TvirTYf6GTDCQDU=)
3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:7e:df:9a:cd:3e:f0:ad:cb:07:93:16:66:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jul 26 09:00:38 2025 GMT
Not After : Jul 27 09:00:38 2025 GMT
Subject: CN=1bb3ae3f0419f28c8c09564425b889b80d9d5c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e3:73:9e:8e:bd:35:4b:ca:2e:cb:87:d8:8f:
71:a9:77:21:46:09:9a:75:94:e3:7e:a4:aa:b0:a4:
bc:e8:44:7c:69:ad:a0:07:88:b7:0d:f3:ab:7f:25:
21:dd:3c:e9:34:06:be:4b:a7:66:cd:43:75:70:ac:
45:7d:85:9d:d2:c8:8e:ce:13:64:c4:ed:ba:93:ab:
1c:d4:4e:55:8c:39:26:e8:8d:28:c7:79:a1:c5:3a:
e8:1d:e5:da:c1:f6:0c:ca:57:67:3b:03:78:d3:ba:
b3:66:ea:58:53:46:22:59:89:5e:49:67:4b:57:7f:
1b:d2:49:d9:d5:01:1a:a3:4a:52:8a:9a:f0:cf:30:
88:7f:95:4d:b7:62:3a:f9:ee:ab:65:79:4e:29:68:
5a:fa:b0:e3:4c:7f:93:ca:07:60:6c:bb:79:32:98:
8f:65:84:50:99:6f:4f:0b:df:4a:e3:c2:3e:f3:c8:
4c:c9:6e:88:7c:b6:7f:38:64:fa:5b:74:61:fe:68:
72:40:a1:2c:d4:1c:93:7c:14:85:90:2f:8e:51:c9:
8a:5c:8f:ce:25:54:50:b6:bc:09:c9:5e:31:1b:af:
62:8e:53:96:6e:d1:44:41:ab:ec:95:ef:c0:7d:3b:
93:61:b4:0b:23:92:59:c9:92:86:e0:a7:c3:24:73:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:AE:3F:04:19:F2:8C:8C:09:56:44:25:B8:89:B8:0D:9D:5C:57
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:ca:45:24:14:19:f8:45:b5:b9:d5:61:37:08:12:78:66:
bf:40:45:75:c6:f9:6d:e5:a3:24:42:cd:e3:9a:cc:56:1e:85:
89:d9:cd:55:28:8f:1d:3a:36:16:5e:41:21:23:5f:ac:2b:b1:
04:5c:f1:11:54:da:27:da:9f:17:82:e4:86:ca:b0:8a:de:68:
45:bf:50:d2:10:29:5e:e6:6d:55:7a:dc:b2:7f:80:b5:82:55:
20:4b:86:9b:09:c0:0d:da:52:14:65:09:26:cd:6a:4c:d0:78:
67:63:75:60:84:66:73:9a:66:c4:26:0e:b4:91:fa:0f:2d:23:
74:cd:22:a9:47:d0:46:32:4d:06:41:d0:9c:aa:4a:d8:95:fd:
05:60:41:82:d4:b5:df:4f:ec:79:c3:88:5d:e3:fb:bf:f5:ca:
e0:86:90:4e:35:4b:01:f6:f8:e2:50:a3:6b:5b:03:bc:40:75:
0c:c2:05:74:20:84:f2:95:04:cc:c0:44:08:12:c9:5e:d3:f8:
b6:c7:d2:b3:76:1d:84:5f:85:8c:6e:46:b7:25:13:42:d7:b8:
aa:ea:0a:d3:73:c7:76:61:55:e3:b0:15:70:99:9a:93:9b:25:
f3:bb:5e:07:bf:e8:2d:50:59:66:1f:cd:93:44:bd:0f:3c:0b:
bb:d3:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:57 2025 by rpki-client