
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier: hg9+x8OHjtFwwRtIBI9bopVmezESdYRSFM6PF3oR5as=
Subject key identifier: 45:18:A6:B6:36:D0:3A:97:CA:0E:66:9E:D5:F5:8B:7F:5E:39:90:AF
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial: 019849D3AD23A78EDBDB0BCBC32792CAB60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number: 0B9C
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: 5C3fvxJ1nTg2HxNG3JrV9TQKyZ2DQYTJCywX3nayEAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ad:23:a7:8e:db:db:0b:cb:c3:27:92:ca:b6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=4518a6b636d03a97ca0e669ed5f58b7f5e3990af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:36:9f:73:86:3d:a0:0b:a6:2c:81:df:c9:
d8:ef:25:70:8a:61:ca:24:50:ca:25:65:d7:64:f4:
2e:fe:2f:30:99:ee:c9:37:f5:ce:b3:0c:0a:2e:5a:
8f:1e:de:f6:42:71:4f:d6:91:e8:49:2e:a0:11:07:
0e:80:5f:27:2c:6d:5e:a2:52:ea:b8:c8:4d:49:cf:
48:55:7b:46:4f:6a:8c:3d:19:40:82:36:1f:fa:07:
4a:47:53:68:c7:c8:d6:08:ca:03:b6:3a:f6:ff:85:
6b:3c:35:23:b8:a9:39:e9:22:6d:40:12:6f:df:a0:
c3:87:28:af:6b:23:ad:da:14:b9:3c:11:83:e9:5b:
b8:58:eb:5a:45:63:19:c9:99:28:de:9b:cd:32:dc:
f5:aa:2d:d3:51:26:34:8c:0c:5e:74:a6:69:73:ec:
2c:69:fb:7e:0e:94:4f:7c:38:6c:92:9a:c9:e3:6c:
d6:f2:98:73:41:20:92:12:1c:f6:cd:61:ba:67:47:
cc:4c:e9:55:3c:68:1f:0c:fc:d1:f6:86:be:fc:0f:
d7:08:3d:a6:c9:f9:f6:af:c3:21:d4:60:48:8e:fd:
43:bd:29:3b:2f:5a:09:a7:66:ef:8a:52:01:8a:7d:
84:29:b0:b9:87:fc:cf:8e:00:0a:62:cf:c7:f6:7b:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:A6:B6:36:D0:3A:97:CA:0E:66:9E:D5:F5:8B:7F:5E:39:90:AF
X509v3 Authority Key Identifier:
keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9a:8f:99:24:3f:e7:ef:41:89:47:10:ed:ee:9a:b9:ba:55:
71:20:b4:6a:c2:05:a7:96:1d:12:aa:88:a2:24:77:99:47:a6:
aa:db:5d:ba:c2:6f:33:8d:d3:40:4a:c1:7c:e7:da:d2:9a:c9:
8e:65:b5:87:63:30:d1:49:75:f7:23:a4:f8:fa:4b:20:3d:89:
df:6d:a4:3c:cb:5a:e6:c9:20:92:cf:06:f7:e6:ab:96:08:7c:
73:46:4c:e9:24:70:e0:f4:e9:92:a3:71:21:99:83:a7:2b:52:
66:3e:45:15:2c:99:9d:84:67:8f:81:85:78:a9:69:8a:d5:7a:
c8:1b:65:a0:37:53:53:c9:dd:4f:6a:ad:34:99:e6:40:4a:f2:
83:c9:24:f8:5f:e0:af:0c:61:9c:42:96:ee:c7:a8:b6:a1:30:
22:6b:fa:f6:dd:1c:3e:bc:44:88:3a:3c:0e:34:0a:a7:e5:9c:
ae:96:c2:d6:20:58:ae:05:ab:be:db:d4:b3:74:de:fd:fd:07:
bf:ce:8f:f2:f9:ec:46:4a:fd:ab:5d:6a:c1:d6:a8:ed:e9:76:
7e:53:21:2d:7f:29:31:f2:fa:15:46:b0:99:68:30:f4:73:ef:
b3:2c:ba:5b:26:34:8d:04:cd:0a:3a:46:01:ef:84:cf:8e:43:
60:05:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:03:58 2025 by rpki-client