
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: hp0XUzh+r520HNCBaEYv6XBmbcP0nkcgQ5Z4I8r56Cs=
Subject key identifier: 6A:31:40:F3:0D:8E:F7:F3:9D:D3:0D:B1:65:9B:38:DD:28:A5:9A:37
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 019922C398148A8F6D4F8B42AB06791BCF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 14B8
Signing time: Sun 07 Sep 2025 06:01:07 +0000
Manifest this update: Sun 07 Sep 2025 06:01:07 +0000
Manifest next update: Mon 08 Sep 2025 06:01:07 +0000
Files and hashes: 1: 48HLzEg5hUyysvh2QdFLov5OhmU.roa (hash: bw7hBJRBr+ljNjkA7DMlIt09FqFYCknq6hOA/oTgbSY=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: 6rTNNC4Vb3q+kEQ8DsIT7PXyUCz5OLLzg9o/dBZKwwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:98:14:8a:8f:6d:4f:8b:42:ab:06:79:1b:cf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Sep 7 06:01:07 2025 GMT
Not After : Sep 8 06:01:07 2025 GMT
Subject: CN=6a3140f30d8ef7f39dd30db1659b38dd28a59a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:5a:75:a6:b9:f3:ec:35:ae:64:77:ab:4f:
a1:e3:89:29:43:31:f2:2c:72:06:28:52:b2:36:6d:
c5:0f:f2:e9:37:00:db:77:fe:50:e1:6d:20:23:f3:
ba:d7:46:51:ff:57:39:1f:39:2c:06:ee:54:75:bb:
ef:bc:63:0b:16:bc:ce:fe:c6:d1:6d:70:28:dc:aa:
67:3b:cf:09:30:d3:3a:6a:32:f2:1c:5c:41:5f:c6:
bb:e5:93:44:e3:7d:a3:79:3b:f6:28:41:90:5a:7c:
2a:6d:85:b5:81:7f:02:65:f1:dd:dd:3d:23:a9:95:
3d:fb:c2:ef:e7:19:47:f8:36:aa:78:30:ce:f1:f0:
b9:e4:a7:69:a8:13:79:6d:be:5f:b2:e9:12:29:25:
4e:d0:af:b7:db:ef:24:3d:67:97:e6:4d:56:d5:fe:
0b:b4:e4:4c:7f:32:ed:86:df:36:03:a1:2b:dd:8b:
fb:09:c4:4e:3d:55:62:b7:87:54:eb:43:cb:7c:66:
a6:39:32:4a:28:ca:67:17:22:2d:9e:c2:ff:7a:0c:
58:d5:72:86:bd:96:b9:6f:cc:2f:5f:6d:0d:ef:41:
96:e0:ed:b6:4b:36:8b:b8:b4:8e:15:d7:79:22:d8:
1b:ce:9f:e9:9a:28:81:f9:47:bf:98:a7:1b:1a:45:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:40:F3:0D:8E:F7:F3:9D:D3:0D:B1:65:9B:38:DD:28:A5:9A:37
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:09:60:73:e4:74:23:f4:a9:ba:f2:a3:7f:19:fb:35:bd:
44:b3:cf:f6:3d:d5:03:42:59:cb:e5:61:39:f4:9d:d5:0b:01:
c2:45:05:a4:61:db:2f:c5:3b:9a:5d:d8:d9:29:08:d4:e2:5e:
4b:ed:66:ff:2e:2e:fe:42:79:8c:24:a2:aa:82:e1:68:9f:69:
7f:d1:c9:f2:40:62:66:89:7b:8f:88:aa:36:d6:41:57:8d:9b:
25:01:89:53:a0:85:f8:31:03:7a:31:e9:b6:38:87:42:cd:59:
50:77:fd:50:02:bc:fa:42:78:30:f1:0e:1f:f8:d4:5c:54:a7:
b3:08:46:85:1e:0d:2f:b4:e9:fc:c4:ea:d0:72:f4:76:e1:d6:
ba:d1:c4:a7:f3:71:af:30:13:17:57:7d:0b:3c:9a:e4:89:cb:
4a:ed:25:54:0d:eb:fa:3d:45:1f:1f:a4:bc:a5:46:83:d9:34:
5f:8e:a8:82:94:ca:3f:0a:ec:88:46:96:c9:d8:06:4d:be:b5:
96:01:07:3c:e1:dd:80:f1:73:f5:58:e4:a0:55:11:11:da:da:
51:74:42:b6:1d:1e:28:5c:2f:e6:e7:da:f0:9d:08:91:73:8f:
cd:74:a6:0f:df:ee:1d:7c:ce:9c:90:8e:02:52:7d:cd:b1:5c:
5b:c1:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:55 2025 by rpki-client