Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier: vasjRj+NrpLUi37xMoDhPRPeK1nEV7hep/u6S9/Cmtg=
Subject key identifier: 2E:02:7B:27:75:BB:C8:E3:C6:E6:FD:3B:C2:93:87:9B:8A:9E:40:F7
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 019A72265DB5873AF93937F3305B7C67EB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: b+eXoihWq0WqzSlKe7v/ycl6yqlxdm3fD7Dw+STdKYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5d:b5:87:3a:f9:39:37:f3:30:5b:7c:67:eb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=2e027b2775bbc8e3c6e6fd3bc293879b8a9e40f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:a3:9e:53:74:9c:71:11:ae:50:61:38:7d:
9b:37:bb:5a:1a:fb:4d:1e:bb:f2:1e:47:b9:53:7e:
75:e8:ef:c0:63:b4:e7:36:b6:ef:de:7e:05:d5:ce:
92:95:a1:fa:20:53:ba:73:03:30:53:13:ed:af:ba:
4e:c1:42:8f:18:9d:98:60:fc:e4:23:e7:d3:4f:36:
25:3a:5b:b0:21:8b:0b:d9:ee:cf:71:f2:44:f6:6f:
43:42:88:d1:6c:cd:b6:96:48:3d:05:b3:f6:28:da:
94:9f:2e:ec:b8:6c:31:11:59:5d:fd:5b:8c:58:c1:
dd:1c:de:b9:e2:78:86:b4:36:47:0d:65:e4:d2:77:
53:cb:09:7a:f6:54:13:61:2c:0f:38:3c:18:f1:38:
e7:d0:95:a0:ff:16:f5:08:d3:69:63:c5:1d:18:11:
99:e0:e5:d8:6c:3f:0c:01:6a:d2:99:16:06:9f:2f:
79:3d:e9:48:e8:f1:aa:53:69:ec:b7:66:40:fd:21:
e8:2d:a7:36:15:51:7c:9f:55:8d:d8:bb:8e:87:95:
44:34:a4:96:fe:3c:eb:6e:cd:ce:be:7d:79:6d:28:
4c:cf:98:fa:ab:6c:84:73:8c:43:56:15:c9:3a:d0:
e8:e5:ff:dd:36:28:e3:89:cd:6b:ee:5d:65:fb:0a:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:02:7B:27:75:BB:C8:E3:C6:E6:FD:3B:C2:93:87:9B:8A:9E:40:F7
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c7:7e:5c:a5:eb:81:98:cd:8f:a6:c4:96:77:3f:d7:38:d2:
bb:f8:54:76:cf:7c:23:a8:2b:b5:4f:3b:b4:d8:26:5b:d0:69:
f6:86:39:06:4c:9d:23:7a:ed:fe:5e:50:3c:19:28:cb:bd:da:
d9:81:15:4d:dd:b8:3a:64:6e:bb:fe:1b:59:24:10:05:7d:1e:
2f:16:cf:51:b8:1f:0a:86:c8:ea:d4:e7:4d:c6:4f:23:0b:2e:
04:49:b6:24:14:e9:c0:18:18:e2:11:6e:84:f5:dc:38:f1:06:
7e:ac:07:2f:52:48:ad:dd:b1:96:03:49:b4:e0:9d:d4:5d:62:
84:42:0e:6c:b4:48:97:ba:c7:09:ef:35:9a:63:7d:0d:3a:85:
9e:f4:af:74:1b:28:25:65:8b:2b:22:5a:35:51:08:73:64:fe:
12:a6:f8:2b:d2:11:5b:91:db:0f:6e:ac:9d:d9:bb:36:ca:42:
02:ce:85:04:c1:01:d8:27:0b:41:ec:63:92:bc:dd:63:5a:79:
39:61:8e:85:a2:1e:78:20:0f:27:7f:c0:54:02:43:cb:9d:27:
e4:7e:50:b8:96:b4:5c:85:a1:e6:eb:aa:3a:79:15:29:f7:47:
9c:89:1e:a6:ec:2d:dc:20:ff:d6:eb:94:5f:17:8f:a5:8f:9d:
d1:d0:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client