
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: bcyR8GVYlRvXp5pkH0jtGmE3jiyuoqNHExrza2Hk35I=
Subject key identifier: E1:73:B7:C7:C6:FF:A2:71:1F:8B:81:C9:4B:5C:32:17:70:46:AC:0B
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 019A7149FE1FF430B84EC8FC11AC9B5382CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 11B4
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: 2jy+0mhG7tpPtS9pkJSiQkxkZ/cJI3QnATiGHIPHZ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fe:1f:f4:30:b8:4e:c8:fc:11:ac:9b:53:82:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=e173b7c7c6ffa2711f8b81c94b5c32177046ac0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:05:c6:bc:db:78:28:b4:3c:2f:1b:a1:47:
f8:2f:25:7c:85:9a:22:af:43:14:da:d9:d2:11:a9:
7b:f5:0b:45:fe:7f:8b:4d:df:a7:bc:36:65:1a:61:
f7:80:0f:fb:0e:67:62:78:a4:05:62:3f:be:ad:43:
e1:50:ff:f9:75:f8:08:76:f0:5b:ee:b4:86:24:7c:
3e:df:68:0c:94:f4:44:09:75:1a:e6:b2:c7:93:cd:
63:4f:fb:c3:6b:e9:19:c0:a1:28:17:8c:50:63:55:
7d:fd:a2:2e:37:e6:35:47:65:25:1d:3b:bd:7d:51:
81:15:40:26:cc:d8:6a:52:7d:9c:a4:a5:d1:36:41:
4b:c4:a4:dc:86:8e:8c:7b:e2:f1:f1:9d:a9:3b:4a:
cd:e4:53:f4:14:95:78:44:32:38:f4:0d:44:da:02:
3a:a1:e4:33:01:a5:28:19:f3:1d:fd:75:3c:ec:84:
0c:fd:04:d5:c8:c0:79:51:1e:73:a1:f1:d6:41:55:
91:1a:be:38:1a:19:51:82:8b:cb:d2:1d:62:55:82:
a5:41:34:2f:4e:43:a7:f3:f9:f1:50:ab:e6:4f:43:
02:03:8e:82:0f:da:b1:8f:55:82:38:d2:b7:f3:c0:
09:1f:0a:fa:34:00:74:c8:2b:b4:07:48:cd:8f:94:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:B7:C7:C6:FF:A2:71:1F:8B:81:C9:4B:5C:32:17:70:46:AC:0B
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:61:d6:80:19:19:6c:72:64:68:53:24:92:06:97:cd:6c:d7:
b4:ea:47:24:ce:b0:6c:e4:19:28:5e:bd:63:af:eb:7a:9d:2a:
b7:20:af:5d:57:b7:29:5f:b5:66:bb:e6:2a:9f:f1:ad:3a:0f:
38:21:8f:21:60:12:b7:96:82:58:5f:36:7f:8c:d1:10:13:88:
75:d1:97:3f:f1:4e:01:cd:56:dd:e4:f3:11:c5:eb:09:ec:de:
96:70:37:38:f2:18:17:6d:a5:14:97:e8:7b:ac:01:fc:40:19:
75:6f:f2:89:11:ba:7d:11:ef:ce:14:57:1d:2c:91:15:5d:da:
29:4c:b9:d0:9e:57:48:4b:7a:ef:eb:65:32:76:68:c1:3f:5d:
ec:fc:2c:96:9b:c2:10:90:f0:e9:3f:11:f4:1f:bd:0d:56:f5:
7d:a8:0a:8a:b8:de:ba:52:90:51:1a:ed:03:7b:3a:9d:3f:85:
db:10:5b:39:03:a3:b7:d6:e6:48:6c:84:76:1c:00:2d:41:8c:
ec:fe:c1:a6:b6:a5:c7:ff:cc:f8:f6:1d:9b:d3:b3:8d:5e:81:
e7:fd:7d:1c:c7:b6:88:d2:7e:5c:24:b0:69:ef:5a:26:86:b8:
9a:f3:ca:25:39:02:dc:ea:c1:71:72:c3:fa:e0:ae:a1:99:c4:
ba:14:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:33 2025 by rpki-client