Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: OC8FGFJkndOPCjhl37AtTwWKoH4kxvVhW/sqZJevA/w=
Subject key identifier: 47:58:A4:B9:DF:1E:5D:71:15:87:69:FA:B5:FC:3F:FE:E6:34:EA:FC
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 0198451A4D1ED8DB46D403D6A60F777DD8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0A8E
Signing time: Sat 26 Jul 2025 05:00:08 +0000
Manifest this update: Sat 26 Jul 2025 05:00:08 +0000
Manifest next update: Sun 27 Jul 2025 05:00:08 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: hz0z0tJiNp7/KRbSNZ2qDzKccL1f3L+ytQ5O4upiIY0=)
2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:4d:1e:d8:db:46:d4:03:d6:a6:0f:77:7d:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Jul 26 05:00:08 2025 GMT
Not After : Jul 27 05:00:08 2025 GMT
Subject: CN=4758a4b9df1e5d71158769fab5fc3ffee634eafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:50:80:89:96:a5:f2:10:1b:43:e0:fb:bc:
13:be:11:ba:b3:94:e7:e4:cb:80:4a:f8:8d:3d:a2:
c9:a3:7f:ae:01:f7:3b:f1:51:9f:3f:f9:15:57:b4:
f8:ba:81:ee:ca:74:98:d3:f8:75:dd:12:2e:72:b2:
f7:57:21:a5:12:bc:67:81:1c:24:7e:b5:6b:14:e2:
f2:9a:e9:43:3e:0c:bd:88:a8:09:ed:80:ec:31:0c:
5c:17:a0:e8:60:50:83:92:bf:56:c0:6a:ae:d9:63:
ce:55:a4:07:48:c5:25:88:62:b3:2b:1c:11:93:6a:
ea:3a:54:e5:66:91:99:11:ab:15:95:98:0d:a0:a5:
f7:30:91:0e:a6:ec:9b:3a:3c:7e:28:bb:93:97:d2:
fc:95:03:5a:92:2c:3c:3e:d0:45:f6:35:a2:22:53:
c5:21:1c:e2:21:e8:9a:05:50:81:6c:db:cb:21:0a:
b4:05:d2:5f:22:46:04:3c:13:9c:50:6b:4e:af:41:
74:01:fc:6e:cf:58:50:b0:e8:c5:8c:8e:4f:24:35:
53:59:97:2d:62:e6:f8:7b:d4:20:1e:49:bb:1c:e9:
48:73:fa:11:f3:ee:f2:50:62:9b:5b:7e:42:35:f9:
89:51:57:2a:bb:ff:f5:7c:8d:37:27:c3:98:ea:cf:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:58:A4:B9:DF:1E:5D:71:15:87:69:FA:B5:FC:3F:FE:E6:34:EA:FC
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:2c:87:7e:64:2a:62:26:69:a8:98:34:20:b4:13:ee:43:
09:11:73:de:67:06:a0:0a:5f:3d:c3:e2:16:9b:d5:3b:a1:7e:
3f:7e:47:1f:69:d4:cf:f2:a9:89:08:8b:ad:55:e3:3c:c1:11:
ca:ab:fb:cf:7e:19:80:84:6a:67:f2:e8:95:8a:59:58:05:bd:
52:90:27:15:4c:72:c6:7f:78:19:e5:6c:7b:ba:ee:44:c2:71:
25:f7:a5:cb:c8:61:94:cc:e4:49:be:6b:e9:d1:fe:8f:9a:69:
70:1c:fa:3e:bf:c2:d6:15:65:71:06:60:73:29:88:51:1e:b4:
8b:07:78:bd:ca:53:84:80:35:1b:e9:af:3d:14:33:a5:45:65:
7b:8d:78:6e:32:c8:10:5f:c9:1e:8d:68:74:38:07:6a:57:95:
df:87:21:12:d4:80:bd:ad:48:5f:77:a8:3b:e0:cf:18:0b:98:
69:85:c4:73:40:4a:d8:cd:50:72:f9:cf:29:b3:9f:5a:89:0f:
06:cd:1f:d5:9a:65:b6:5d:d7:a4:a2:9c:1c:cc:e9:cb:6d:09:
23:49:3d:08:ba:ab:22:03:08:18:1e:ee:bd:1b:f6:c3:8e:d9:
f3:f8:8a:6c:00:11:48:79:bc:ac:1e:00:19:b8:d1:6e:7f:9e:
3a:a9:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:45:56 2025 by rpki-client