Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: hbVV0IndK1noaVT2K0Np6vFl+wckOwNmnpUAJ6aQg9M=
Subject key identifier: F7:27:D2:A4:D5:FB:FF:DB:7D:6C:89:9A:31:43:E9:5F:B8:3B:1D:EE
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019853449C51E9A93C4E1DF2697D7745DC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 23:01:02 +0000
Manifest this update: Mon 28 Jul 2025 23:01:02 +0000
Manifest next update: Tue 29 Jul 2025 23:01:02 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: jEVum17Da8HPb4/Ep8nIdDKt7F0N0DU14j9YECcBg0A=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:9c:51:e9:a9:3c:4e:1d:f2:69:7d:77:45:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jul 28 23:01:02 2025 GMT
Not After : Jul 29 23:01:02 2025 GMT
Subject: CN=f727d2a4d5fbffdb7d6c899a3143e95fb83b1dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:82:af:71:06:c1:f5:fc:39:b4:30:28:a5:
31:0e:bb:6b:24:37:4c:38:b2:61:80:29:86:5a:ba:
67:29:35:48:59:14:79:38:03:e9:ee:e1:38:ae:78:
70:52:4c:d2:0a:99:62:d1:5d:77:50:74:d0:df:60:
80:f1:a2:ec:6a:3f:3a:68:31:d4:19:63:6b:16:10:
44:62:3a:11:e1:f5:d2:c1:fe:f3:5f:69:7b:62:cd:
23:8d:ee:83:5f:d8:2c:df:26:c3:34:0b:a1:6a:64:
77:25:54:3d:dd:60:8c:91:c8:05:13:ab:c5:a7:ac:
b9:f4:77:e3:c3:5c:44:f8:cb:16:52:4c:e0:ef:24:
f9:11:2e:a2:4d:66:16:92:e4:12:67:13:a0:3e:cd:
33:d6:b7:33:87:bd:6c:71:f1:17:00:c7:3d:af:a2:
f0:1e:62:03:8b:8b:ac:7a:e4:28:a1:ec:a5:18:3a:
6f:03:d7:fa:c1:e5:b7:58:72:0b:3a:23:07:2f:97:
a3:47:be:ec:14:d2:4b:f4:3e:0f:26:87:8b:94:ab:
41:7d:d3:54:1b:b2:5b:9e:e0:5d:6f:0e:46:02:61:
d6:94:28:67:72:e4:74:2b:3f:b2:33:52:0f:6f:63:
b3:96:ff:57:75:a1:43:da:9e:db:52:94:6e:7a:19:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:D2:A4:D5:FB:FF:DB:7D:6C:89:9A:31:43:E9:5F:B8:3B:1D:EE
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:16:df:e4:c3:a8:3b:95:85:55:5e:a5:65:e4:03:e8:38:44:
13:b6:fe:58:a6:ba:34:bc:64:08:a0:4b:80:b0:cf:cf:e5:7f:
32:0b:50:83:16:6e:88:e6:cc:31:29:b9:7d:c9:d0:c4:8f:eb:
c8:3a:bf:50:c6:45:44:1d:0a:50:02:79:66:d6:20:37:fd:bb:
b1:da:ed:06:ca:0a:ad:29:07:56:e7:cd:84:58:2f:3e:1e:03:
9c:e8:f2:e8:75:fd:e4:19:c2:03:43:02:8a:b9:f6:b4:40:8d:
25:6b:9a:b4:56:60:af:b8:db:e7:f7:b9:dc:e2:00:52:84:9e:
bb:15:6e:c8:39:55:dd:c0:19:d9:df:4f:e1:8b:34:2e:4a:3c:
a7:5f:91:5c:12:0b:9f:d9:d7:6d:b1:e2:a4:9d:21:ae:8f:b6:
29:c1:82:86:98:4a:0a:ad:eb:a3:c1:52:50:b5:6f:34:48:f2:
b7:13:86:98:95:66:ca:2e:53:c9:6f:45:e2:14:67:7d:de:a3:
b6:02:6f:f1:f0:90:68:d5:74:79:0b:05:b0:63:43:fb:b2:c2:
b6:29:a5:29:b4:cf:59:8f:4b:f9:c0:b8:b1:19:12:1d:85:a9:
cd:71:84:0f:f2:91:21:81:19:00:d1:d1:c6:bc:0f:7f:7a:ca:
ee:38:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:53:12 2025 by rpki-client