Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
File: obTdg_xezSEPT2hPtr9A-zFg2yE.mft (raw, json)
Hash identifier: A613w8Uy/Dr77/hbrpvf+hvY9OynDv0OK3aRO5O6CUw=
Subject key identifier: EA:A1:07:A7:37:D7:C1:E0:FF:36:EA:52:83:7F:FD:95:25:C1:53:79
Authority key identifier: A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
Certificate issuer: /CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Certificate serial: 019A70DC25C76BE41C43FDA03F65C12AE3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
Manifest number: 1565
Signing time: Tue 11 Nov 2025 03:01:07 +0000
Manifest this update: Tue 11 Nov 2025 03:01:07 +0000
Manifest next update: Wed 12 Nov 2025 03:01:07 +0000
Files and hashes: 1: 48HLzEg5hUyysvh2QdFLov5OhmU.roa (hash: bw7hBJRBr+ljNjkA7DMlIt09FqFYCknq6hOA/oTgbSY=)
2: obTdg_xezSEPT2hPtr9A-zFg2yE.crl (hash: W0oTyyqATfS45//bCwmnDKbfE9SlN39WGx7NoBT08P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:25:c7:6b:e4:1c:43:fd:a0:3f:65:c1:2a:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b4dd83fc5ecd210f4f684fb6bf40fb3160db21
Validity
Not Before: Nov 11 03:01:07 2025 GMT
Not After : Nov 12 03:01:07 2025 GMT
Subject: CN=eaa107a737d7c1e0ff36ea52837ffd9525c15379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:08:47:9b:46:ff:f2:41:6f:24:80:80:95:
df:a5:8a:8d:65:8d:b9:c3:81:4c:19:51:05:f4:e3:
d0:06:f1:da:2e:c3:67:57:e8:59:fa:4a:e8:f6:ec:
1b:70:09:90:4a:e6:38:4e:b1:39:63:03:38:05:0b:
3d:73:36:a4:a5:52:06:91:26:19:5a:bc:51:65:b3:
b2:40:f4:0c:4a:f2:b4:02:5a:0e:09:d6:b5:f1:e9:
6d:c4:31:43:de:d1:5f:1e:ca:ee:ae:36:41:0a:6a:
06:bd:44:01:b8:96:4b:b0:a6:cf:87:77:d2:85:d1:
73:02:fb:a3:fe:3e:75:12:14:20:32:1c:24:80:47:
a2:a3:87:2e:dd:41:77:d4:4d:52:37:2e:37:d8:68:
a7:07:41:d1:cf:cf:b9:aa:59:18:8b:64:5f:03:89:
03:6b:b9:52:b9:74:d5:ef:fd:37:57:51:0f:25:c8:
48:41:4a:c0:a2:00:0a:1b:e5:1b:8b:bc:fc:92:fc:
a4:28:6d:86:9f:99:e7:76:d7:80:bb:f3:48:dd:47:
a6:6d:4e:45:a0:6a:1d:a2:f6:dd:96:51:2e:11:cf:
e4:eb:4e:18:d3:48:17:75:95:f9:aa:d6:c5:a0:b9:
66:f1:de:33:17:af:67:a0:21:a6:40:cc:b0:70:93:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:07:A7:37:D7:C1:E0:FF:36:EA:52:83:7F:FD:95:25:C1:53:79
X509v3 Authority Key Identifier:
keyid:A1:B4:DD:83:FC:5E:CD:21:0F:4F:68:4F:B6:BF:40:FB:31:60:DB:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obTdg_xezSEPT2hPtr9A-zFg2yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/146f8a-e068-48ca-a388-fb186b94334f/1/obTdg_xezSEPT2hPtr9A-zFg2yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f4:e7:b4:19:0a:22:34:0e:e4:80:4c:f2:94:20:fd:70:fe:
d5:d1:d8:4a:ca:37:22:22:a4:ae:6b:16:b0:a4:5b:21:f3:52:
51:9c:8d:77:7e:bd:5d:42:01:d7:b9:dd:6d:fb:17:91:e9:75:
fd:db:29:e0:ad:3a:97:a3:d2:62:27:a4:e5:ce:fd:45:72:8d:
81:43:ff:7a:78:20:12:16:27:e0:08:9d:95:52:c9:9a:72:e4:
ac:4a:b3:8c:01:c3:98:5f:5e:49:7e:68:5a:2e:04:b4:ce:d6:
41:f5:38:e1:27:b7:a6:56:1a:52:0e:7e:14:e2:e8:87:bc:07:
4b:43:15:55:d7:4d:b6:0d:19:1c:88:23:fe:cd:00:c0:24:20:
50:41:9f:f6:a5:a0:48:fd:67:3e:b7:4b:1f:b9:fc:fb:e1:91:
94:96:a9:af:92:6f:b6:13:cc:34:e9:bf:e0:4f:5b:16:97:83:
33:40:5b:db:0a:47:53:87:40:f8:94:34:79:90:ac:68:df:e3:
0f:92:7e:6b:2a:02:69:a7:01:90:55:ae:08:f9:0f:b7:05:b2:
75:62:f9:c2:af:46:bc:fb:95:40:0c:39:3c:09:bd:65:54:87:
ce:c3:74:ba:cd:7e:8c:00:34:9d:37:01:7a:97:61:93:46:e0:
ab:29:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:35 2025 by rpki-client