Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: hyVL+Z+pqgvsPsdFFHexBWY80kNzc3ojjLUxUmTPzKU=
Subject key identifier: A6:F1:6E:E3:90:C9:16:CA:2B:E7:CB:26:EC:A7:2F:57:DC:25:81:0A
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 0198537BBD965045E26F4B6766334A9FF71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0BCF
Signing time: Tue 29 Jul 2025 00:01:14 +0000
Manifest this update: Tue 29 Jul 2025 00:01:14 +0000
Manifest next update: Wed 30 Jul 2025 00:01:14 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: hfuMHAio7nzO7FN73VgJGDoQUF9UBORRv59My2Qfle4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:bd:96:50:45:e2:6f:4b:67:66:33:4a:9f:f7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Jul 29 00:01:14 2025 GMT
Not After : Jul 30 00:01:14 2025 GMT
Subject: CN=a6f16ee390c916ca2be7cb26eca72f57dc25810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:d4:8a:5a:42:6c:c8:11:1f:a3:66:2b:9f:
fb:97:b7:91:97:16:6c:21:f1:02:84:22:37:5d:f6:
ff:eb:2b:e7:42:98:b0:00:dc:d9:d5:ef:3c:87:d2:
71:91:05:23:39:ea:57:8e:6e:14:03:ad:33:5a:4c:
00:c9:d3:55:00:44:b5:80:44:23:d2:fe:89:c2:53:
49:c8:55:54:54:69:60:c4:0e:10:dc:d4:90:6e:25:
10:9a:43:8d:b5:7a:4e:ef:4e:e1:f2:e5:d2:66:c4:
a2:9f:f2:ac:46:86:a7:70:89:61:a0:5d:eb:41:cb:
00:97:a8:2c:6e:3f:f8:28:29:01:0f:1f:19:3b:e1:
e8:b3:43:e6:ef:ff:db:4e:2b:9e:76:08:7a:48:31:
a1:85:87:46:c5:99:54:4d:bc:51:4c:dc:e6:13:40:
56:1c:fa:dc:6b:83:34:8f:07:5c:84:d2:f2:c4:4b:
ad:d7:08:cf:fa:06:a1:7f:8c:1b:00:65:a4:47:6a:
d9:fa:47:65:25:93:fb:3f:8b:2f:eb:1d:3e:db:c1:
f8:6a:66:d3:6b:f9:2b:76:34:3b:35:4b:83:82:90:
f5:d0:e0:3d:87:be:f3:f8:41:8b:b5:53:11:1b:5d:
2d:ab:bb:0e:53:23:ba:f3:08:77:f6:f2:15:d8:15:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:6E:E3:90:C9:16:CA:2B:E7:CB:26:EC:A7:2F:57:DC:25:81:0A
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:69:2d:ce:af:ba:56:bd:4d:91:3e:f5:e5:60:f7:02:ac:
7e:19:3e:0b:d6:72:be:f7:b8:e4:42:8a:7f:0e:44:6b:2d:c0:
96:a3:a6:39:8b:8e:83:f0:38:a2:46:c2:20:8e:90:70:a2:8b:
4c:b5:4b:97:56:e5:17:d2:8a:93:75:86:3d:e7:0a:99:51:cd:
5f:e0:60:87:32:05:55:d2:c2:0e:cc:7a:67:0e:41:da:62:cb:
d7:59:d5:56:1d:39:81:b7:93:ce:20:aa:83:cb:6f:4b:4f:e7:
d2:67:d9:e4:0e:e9:59:25:b3:ee:db:ba:c0:3f:92:1a:65:78:
10:96:1f:99:73:49:b0:97:bb:0c:a7:f7:6e:fa:16:80:c4:43:
e7:18:16:03:f5:03:ba:34:28:76:6a:8b:f9:cd:0c:4c:e4:a3:
f5:73:04:af:2b:78:47:65:6d:42:f0:e3:d0:66:f4:97:2f:9f:
17:b6:09:ad:31:db:17:05:c0:98:a3:01:69:64:41:be:4f:d7:
73:85:28:fb:7a:5e:84:50:14:7a:2d:c7:df:33:7f:e4:44:af:
89:1c:42:30:a1:3d:92:23:6f:d8:10:37:e6:4e:93:0d:75:db:
60:f9:7e:36:1a:dc:b0:e4:16:03:9b:b6:2b:ec:39:1c:b3:0a:
e8:23:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:18:03 2025 by rpki-client