Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: ba6ZOaxsdTWz7J+U2ddk+P7DOJq7OXGPB3luUiXVPww=
Subject key identifier: F7:2C:3A:B4:A2:74:B0:AF:22:C3:E8:B6:BB:19:9B:91:7E:47:10:C6
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 01992FA2E408085700DE34A917EF54C6F4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1576
Signing time: Tue 09 Sep 2025 18:00:28 +0000
Manifest this update: Tue 09 Sep 2025 18:00:28 +0000
Manifest next update: Wed 10 Sep 2025 18:00:28 +0000
Files and hashes: 1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: kromKgEjGtWjPeoB/c+A0Rvr0tplkvJdOMIRnWTuC3I=)
3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a2:e4:08:08:57:00:de:34:a9:17:ef:54:c6:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Sep 9 18:00:28 2025 GMT
Not After : Sep 10 18:00:28 2025 GMT
Subject: CN=f72c3ab4a274b0af22c3e8b6bb199b917e4710c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:b9:97:51:88:aa:d2:fb:02:b2:c7:54:db:
55:21:f0:a8:4c:0c:16:be:c6:f7:e3:0f:d6:53:71:
13:cc:b1:be:8b:09:de:12:29:05:c3:b2:60:8d:b2:
3d:e6:80:8c:ed:54:52:4b:d0:30:c8:12:47:20:cd:
93:18:53:40:5b:d5:31:2e:71:62:cb:4d:61:a1:25:
33:30:6f:94:b5:bb:8a:5c:b2:af:c0:89:c3:9a:72:
2d:06:2f:35:69:ac:d1:e3:11:83:7a:d5:24:0b:5a:
87:11:9a:44:5d:4a:be:5a:8a:f2:02:79:46:a6:5c:
cb:5b:c9:b8:60:f5:78:d3:d2:78:1d:23:a6:61:59:
dc:e0:e1:96:d6:f8:f4:a4:63:3b:47:dc:6f:5a:07:
8d:3c:c2:99:00:a6:85:71:27:2b:91:b1:58:3a:53:
b5:b9:67:d6:3f:eb:c9:29:4d:76:f3:8f:de:c0:ef:
88:61:fd:a0:da:9c:5a:13:95:07:d3:d3:89:8e:88:
6a:2b:ef:fc:3e:90:bb:cc:ac:8e:14:c0:a3:f4:a0:
a5:23:0a:d1:48:2c:83:a4:79:fe:15:37:e4:5e:da:
b7:36:44:b1:eb:4c:48:ec:8d:4e:27:08:58:05:fd:
70:b1:5e:08:5c:64:21:c1:5c:81:6b:ae:dd:76:f5:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2C:3A:B4:A2:74:B0:AF:22:C3:E8:B6:BB:19:9B:91:7E:47:10:C6
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:36:fd:0e:44:2d:35:d3:9d:90:62:4a:a7:f5:51:f0:03:fc:
04:11:16:dc:e7:bf:2e:4a:71:f1:ad:62:e0:ff:3c:c0:79:d0:
5e:8f:dc:36:81:49:d4:47:1a:b2:cf:2a:12:96:78:64:c8:fd:
ec:84:db:24:99:7e:96:5a:a4:e7:9d:79:5a:39:c1:be:6f:d7:
3f:2a:7a:d4:5a:b4:43:4b:82:dd:c4:26:db:16:8b:5b:3c:fa:
ca:be:a0:8b:3f:e9:72:35:de:fa:24:3c:74:b6:a1:33:a9:da:
1d:7c:ee:48:95:98:b6:bb:b3:0f:51:6b:8f:68:50:76:a7:ef:
a3:86:c5:cd:98:07:4d:58:d3:f6:6f:f8:d8:e3:c3:07:68:7a:
b9:e3:b4:2d:13:3d:2c:1c:99:7d:1d:8a:1f:1e:d6:6e:cd:d9:
70:32:ff:d1:10:b9:e0:aa:cb:df:6f:b8:cd:11:54:87:85:3d:
80:b9:95:66:c0:29:18:6f:b4:b2:7a:0f:33:93:3f:ab:67:4d:
fe:b0:80:b2:cf:16:d2:cd:95:ec:85:23:b9:16:15:ed:2f:38:
a1:f0:30:a6:3d:21:9a:2f:f6:3a:a9:f1:b9:90:b3:25:e2:97:
34:1b:63:3e:4f:03:f4:bb:dd:6b:2d:00:56:c2:88:ff:41:f2:
f6:48:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:10:27 2025 by rpki-client