Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json)
Hash identifier: HivzULiITu0Xy5swvRtj7QyDoCkBrH+eeB4URrsbB7s=
Subject key identifier: 93:16:70:11:62:A6:8D:6F:A6:77:C0:E7:05:ED:4D:B9:23:30:CA:03
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 019A484D8BF591B1023BF4D3D334ED6887A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
Manifest number: 170B
Signing time: Mon 03 Nov 2025 06:00:32 +0000
Manifest this update: Mon 03 Nov 2025 06:00:32 +0000
Manifest next update: Tue 04 Nov 2025 06:00:32 +0000
Files and hashes: 1: 9S8GYL_yFgy6SNOCWbKCBCKwxZQ.roa (hash: lKTcm+yAWil2FIyk6dqKrToacWvPZRMmQqI4XBQAqo0=)
2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: nYaZQb4npVWVYr5zbX8VNkgEgfyoZIlfzBaTz9MKsGA=)
3: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (hash: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=)
4: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (hash: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:4d:8b:f5:91:b1:02:3b:f4:d3:d3:34:ed:68:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Nov 3 06:00:32 2025 GMT
Not After : Nov 4 06:00:32 2025 GMT
Subject: CN=9316701162a68d6fa677c0e705ed4db92330ca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:9a:36:85:98:0e:d1:12:a1:d8:81:cf:70:
6b:a4:e0:f9:c6:27:46:32:da:5c:ee:9e:cf:6e:0e:
2b:39:a6:19:4a:5c:03:f8:fc:91:25:84:35:2d:d4:
aa:1a:42:46:e0:33:6c:fe:3b:5c:03:70:8e:90:d0:
91:2e:4a:eb:79:67:a2:8d:2a:af:47:23:be:cb:fb:
24:27:0e:e5:60:bf:0a:99:56:34:8c:bb:8d:c3:25:
1d:d2:8b:8f:d1:e8:4f:e0:15:37:8a:6b:93:9f:3c:
ee:f5:e8:1c:4b:d5:f7:d3:9e:0e:8d:5e:7e:09:65:
50:0c:7b:f9:9e:26:d8:9c:48:a4:4a:ad:5a:42:03:
ae:4e:e7:54:f9:b4:cb:8e:38:d2:4a:77:7b:e0:5d:
a8:60:b9:c6:1f:a4:f2:62:07:e6:b7:1e:7c:2b:03:
d4:a9:63:4a:81:37:03:eb:e8:9c:a9:f5:57:d0:a2:
66:9d:5a:3d:7e:5d:29:d8:01:f4:e2:cd:c0:09:a1:
30:e2:44:ba:82:4f:59:29:83:43:16:34:d1:0f:df:
9b:70:3c:21:e0:75:57:3b:db:65:23:c1:70:62:32:
1a:68:8a:3a:12:12:32:b6:0f:c6:42:59:8b:1f:71:
70:0a:4a:0a:d9:7b:4e:a6:0a:f8:cb:d5:3e:a4:0b:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:70:11:62:A6:8D:6F:A6:77:C0:E7:05:ED:4D:B9:23:30:CA:03
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:71:1c:9b:55:6f:51:60:62:d9:c2:76:6b:86:f4:51:11:
91:f1:64:60:a8:47:97:a3:2c:94:89:b2:0b:4a:df:7c:00:53:
96:5e:d6:b4:cc:05:d4:1e:0f:ed:89:ee:bd:10:30:ad:73:f1:
a7:71:df:58:b7:e9:6d:1f:c3:bf:29:88:0b:71:a4:d1:cb:4a:
fd:92:0c:f2:b7:0c:4d:e3:b2:4b:84:ec:4c:5c:ce:5c:6e:1a:
bb:51:68:24:8b:32:ca:07:55:06:b5:42:74:89:c5:e7:5a:4c:
ba:e5:d3:f7:b3:76:a5:9f:85:7c:75:a6:c4:e0:9c:9a:90:4f:
48:85:ae:40:12:90:92:41:57:eb:f1:a4:51:88:1e:9b:0f:a0:
81:26:86:90:07:8c:f8:46:7f:e1:d8:36:c1:f7:ff:43:4c:a3:
2c:88:df:8e:30:41:0a:9a:dc:c7:9b:a1:d5:eb:7c:94:28:70:
44:b9:b4:e3:a6:59:15:92:8f:c8:b8:a5:a4:11:f6:18:b3:f7:
e0:14:00:8c:c0:21:d7:ac:ef:72:29:cb:c8:40:63:44:4c:b6:
80:7a:f7:aa:03:a4:5d:2e:ca:da:62:44:ad:c5:d8:3d:72:30:
71:6f:5c:cd:cb:7e:72:3e:fc:15:ba:32:13:da:a3:c5:d3:16:
17:c2:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 13:43:06 2025 by rpki-client