Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: My+D/9egzEvmd4Fqz1rpuYPBC2TNFENtmM0O9v2Fi24=
Subject key identifier: 00:A1:A4:BA:C5:AA:67:E4:F9:E7:22:51:77:04:C8:10:AE:BA:E1:3F
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019A72934E812CA9349C886B5C7578BD8011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: Rms9wIzd0vlNyq58GesHZxR0ZWucp3Wq0Zl+bIGPMqE=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4e:81:2c:a9:34:9c:88:6b:5c:75:78:bd:80:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=00a1a4bac5aa67e4f9e722517704c810aebae13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:8e:dd:e9:ea:e6:1c:7f:19:7b:a7:32:a3:
dd:39:cb:40:c9:76:87:c8:e1:e2:51:6f:d6:14:6d:
36:d3:e8:a5:f1:1a:68:5f:b3:b7:9c:5d:8c:d2:fe:
29:49:e1:41:b1:13:ae:b8:6e:79:85:9f:cc:5e:0f:
00:35:a2:68:c4:24:22:b9:bd:f0:6a:84:64:d4:47:
62:fb:61:ad:4c:f1:cb:2b:da:69:80:bd:5f:53:63:
74:11:0a:86:cb:2a:41:32:56:cf:83:4e:2f:ac:d2:
0d:95:8d:1e:78:7a:d9:da:8c:a1:a4:fa:fe:fb:25:
e9:ff:d0:6a:cb:c2:01:2f:8c:b7:38:9c:0b:7f:09:
0e:73:6c:7f:8e:6d:03:ea:d2:80:23:ce:d0:01:28:
13:3a:5d:90:6b:5d:64:5d:8c:69:eb:1a:d4:ab:20:
0c:fa:75:88:7e:cb:e0:0c:eb:ac:e7:4b:9c:83:94:
87:0a:8f:f0:ef:cb:c6:b8:1b:82:2c:40:1f:46:6a:
a9:8c:87:94:74:41:b1:f2:d3:35:3b:86:b1:0f:cf:
ec:71:db:4c:0d:bd:cc:8c:e5:99:dd:8f:32:43:5b:
42:87:5f:05:67:e0:19:2e:7b:33:1e:93:0f:84:0f:
07:8b:82:46:ed:1f:bc:69:87:08:88:08:0a:09:e2:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A1:A4:BA:C5:AA:67:E4:F9:E7:22:51:77:04:C8:10:AE:BA:E1:3F
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:a5:59:23:1b:b8:6a:b9:34:ef:cc:6a:48:2d:9b:0b:af:
1d:85:c6:e1:6f:dc:54:e9:17:ae:11:af:2e:73:da:68:7c:89:
9b:87:1d:31:dc:bf:9a:89:1a:72:76:0b:62:03:cf:2c:54:3b:
ed:0a:2f:cc:bd:11:dc:3b:9e:67:d1:26:48:73:83:51:5a:c0:
c8:34:61:c6:1b:e3:16:11:b9:42:5d:50:cd:e8:41:eb:4b:b4:
ab:ea:c2:f6:b3:e3:26:6c:b6:08:1f:1c:da:66:89:0a:cc:06:
be:eb:b8:a9:75:80:b9:ec:1c:a6:f2:df:92:e4:85:ce:f2:12:
b6:93:db:21:a2:45:21:13:b7:13:83:61:f6:2b:32:e6:31:cc:
7c:3e:b8:01:cd:e6:3a:4d:a5:81:1a:e2:62:5e:21:47:b7:60:
32:35:9a:8b:da:09:88:7c:9f:4e:da:92:90:95:3c:e6:3b:52:
30:2f:03:16:6d:9f:ca:15:47:2f:b2:ba:63:c4:45:6c:b5:32:
14:16:76:b4:3c:ed:68:0e:e4:3e:82:d5:94:a7:05:c3:ff:81:
5c:53:57:bc:36:04:ea:d1:b6:b7:65:97:c8:3f:02:ed:f5:e9:
f2:b9:48:6b:38:8a:37:81:42:45:02:3c:a4:cd:04:70:24:4a:
17:aa:79:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk06BLKk0nIhrXHV4vYARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTc0NmNmNmJiZGM4YmQ1NjY2ZjMwNjgxMWJkZmZkMjE2
YjFhYTYwHhcNMjUxMTExMTEwMDQ3WhcNMjUxMTEyMTEwMDQ3WjAzMTEwLwYDVQQD
EygwMGExYTRiYWM1YWE2N2U0ZjllNzIyNTE3NzA0YzgxMGFlYmFlMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MaO3enq5hx/GXunMqPdOctAyXaH
yOHiUW/WFG020+il8RpoX7O3nF2M0v4pSeFBsROuuG55hZ/MXg8ANaJoxCQiub3w
aoRk1Edi+2GtTPHLK9ppgL1fU2N0EQqGyypBMlbPg04vrNINlY0eeHrZ2oyhpPr+
+yXp/9Bqy8IBL4y3OJwLfwkOc2x/jm0D6tKAI87QASgTOl2Qa11kXYxp6xrUqyAM
+nWIfsvgDOus50ucg5SHCo/w78vGuBuCLEAfRmqpjIeUdEGx8tM1O4axD8/scdtM
Db3MjOWZ3Y8yQ1tCh18FZ+AZLnszHpMPhA8Hi4JG7R+8aYcIiAgKCeIPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAChpLrFqmfk+eciUXcEyBCuuuE/MB8GA1UdIwQY
MBaAFKAXRs9rvci9VmbzBoEb3/0haxqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNzY0Y2UtMTJhZS00MWI1LTgxYjYt
MDJhYmE1ZDFiM2E0LzEvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNzY0Y2UtMTJhZS00MWI1LTgxYjYtMDJhYmE1ZDFiM2E0
LzEvb0JkR3oydTl5TDFXWnZNR2dSdmZfU0ZyR3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgilWSMb
uGq5NO/MakgtmwuvHYXG4W/cVOkXrhGvLnPaaHyJm4cdMdy/mokacnYLYgPPLFQ7
7QovzL0R3DueZ9EmSHODUVrAyDRhxhvjFhG5Ql1QzehB60u0q+rC9rPjJmy2CB8c
2maJCswGvuu4qXWAuewcpvLfkuSFzvIStpPbIaJFIRO3E4Nh9isy5jHMfD64Ac3m
Ok2lgRriYl4hR7dgMjWai9oJiHyfTtqSkJU85jtSMC8DFm2fyhVHL7K6Y8RFbLUy
FBZ2tDztaA7kPoLVlKcFw/+BXFNXvDYE6tG2t2WXyD8C7fXp8rlIaziKN4FCRQI8
pM0EcCRKF6p5lg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:51 2025 by rpki-client