Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: VQcnpbhWoj5yfgaVyeE3VxnlHllyQ9GDT1zoJ5qtxMk=
Subject key identifier: A4:CB:0B:8E:49:69:8B:14:C1:32:BA:C8:9D:3C:E1:DE:2E:A7:BE:B8
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019A209C3978BE91DF5C6BC1D5DB5A96E4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 15F6
Signing time: Sun 26 Oct 2025 13:01:40 +0000
Manifest this update: Sun 26 Oct 2025 13:01:40 +0000
Manifest next update: Mon 27 Oct 2025 13:01:40 +0000
Files and hashes: 1: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: ZOMmZMdzuGvbU/KTjKuoUGKyFmrtxfxyHQgmBcghBAk=)
2: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
3: RgvVQm5i55AP3gZ5KWsISLCa9Hk.roa (hash: OZ0ysfXOwKHpmAoO/4k/2zxN5HNQM5NxSbPzjXOrOvI=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:39:78:be:91:df:5c:6b:c1:d5:db:5a:96:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Oct 26 13:01:40 2025 GMT
Not After : Oct 27 13:01:40 2025 GMT
Subject: CN=a4cb0b8e49698b14c132bac89d3ce1de2ea7beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:2c:ae:f1:a5:20:a6:08:81:66:e8:dd:9f:
8e:ff:1d:0d:56:af:52:19:f7:f1:94:fa:0f:b0:64:
87:b7:6e:5b:4d:8a:fa:b1:63:c6:67:19:c3:c4:82:
d9:e0:08:dd:75:37:44:6f:d9:4b:95:4a:fb:54:53:
e1:08:ae:bb:ca:20:59:e3:9a:15:6b:92:87:32:94:
fd:1d:2f:5f:d6:1b:79:a4:40:e9:18:ef:ec:cf:a6:
5e:ed:46:1a:2a:84:fd:dd:ae:25:46:1c:41:38:18:
a1:1f:e0:31:93:1d:93:13:c7:89:8f:6e:ff:5b:27:
39:8f:20:8d:dd:10:52:c8:c7:a6:ed:16:13:8d:0d:
96:e2:3e:4b:60:89:fa:01:bc:f4:97:cf:96:45:30:
a6:f5:47:bd:59:d3:6e:20:74:13:41:41:06:a9:c9:
8c:7b:e6:69:c2:34:fd:d1:9d:de:9f:ac:8a:30:c6:
43:6b:96:02:41:e4:91:04:c8:0f:1d:b6:2b:37:85:
e4:5f:8e:96:d1:02:13:6b:13:a2:20:62:15:8a:0d:
4f:db:74:cc:f0:01:de:f4:a4:12:37:36:43:d7:5b:
76:a5:b1:62:76:f0:12:e9:0c:6b:0f:c3:00:99:b6:
fe:da:e8:a1:47:b1:a7:21:9b:e5:ce:d2:b4:ea:a6:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:0B:8E:49:69:8B:14:C1:32:BA:C8:9D:3C:E1:DE:2E:A7:BE:B8
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bc:30:e1:00:4a:7f:2b:bf:9c:34:3d:f2:2e:37:2f:b0:d8:
e3:be:88:42:eb:ac:a3:0a:46:59:e1:6f:72:27:69:ac:2e:bb:
90:71:b6:42:b1:d6:2a:b7:2e:d6:a9:91:38:be:a3:5d:53:09:
73:bd:82:97:3f:19:8c:03:ba:1d:d6:2a:1a:3b:d5:b9:27:9f:
ad:b9:18:2b:c0:06:67:aa:7e:bf:ee:d8:5e:49:11:32:c6:3b:
72:6d:e9:49:f2:00:01:e8:2b:2a:b5:ba:70:06:04:96:55:90:
da:f0:17:d8:d8:8b:80:93:e4:b2:90:3f:17:e3:3a:d9:22:f1:
58:70:61:81:9c:f8:5a:e8:5c:49:c1:de:45:93:a3:ad:1f:31:
86:f8:bf:d9:c6:0d:95:4c:84:45:25:52:69:61:dc:3c:87:30:
8d:6d:96:34:0b:c0:1e:1b:4a:d1:32:3c:8a:f6:20:47:e3:0a:
92:8b:57:7e:01:88:fa:df:eb:63:3d:87:32:e3:20:e5:80:75:
e2:49:1c:1c:10:f5:59:b0:c1:03:a9:22:03:6c:7d:33:3e:42:
1b:38:15:5e:96:6f:38:10:b0:46:5e:81:6a:90:6d:47:fa:75:
b2:38:40:41:16:55:16:0f:b2:bf:06:92:2d:bb:7b:e6:51:0b:
89:87:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:06:49 2025 by rpki-client