Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: NkMUVQ6kQAbfFgtfa2bPHlwebleYZPJ6MO+c5Jlg1nU=
Subject key identifier: B6:1C:5A:4C:85:F8:65:06:29:1E:17:CE:20:4A:EE:71:05:16:B3:0C
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019921B13EC424355A32330341A75E45D6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 1311
Signing time: Sun 07 Sep 2025 01:01:27 +0000
Manifest this update: Sun 07 Sep 2025 01:01:27 +0000
Manifest next update: Mon 08 Sep 2025 01:01:27 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: ezcfLaEJR9JiwW0WPA0mAr+f2AXtDmWI5hJTECgl3Xo=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:3e:c4:24:35:5a:32:33:03:41:a7:5e:45:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Sep 7 01:01:27 2025 GMT
Not After : Sep 8 01:01:27 2025 GMT
Subject: CN=b61c5a4c85f86506291e17ce204aee710516b30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:c0:d1:dd:9e:b4:81:0d:55:89:74:33:d1:
93:ab:f1:ca:8a:25:0c:22:80:f7:88:ef:ad:df:8a:
dd:0f:be:84:a0:1c:30:3f:38:cd:25:8b:9a:aa:f5:
96:83:64:8d:95:6e:6b:c8:3d:d1:29:d5:e2:b2:56:
a9:20:1f:f9:99:09:81:69:5b:d0:b7:86:72:93:48:
48:44:61:bc:c4:dc:67:e2:04:64:48:a6:cc:c9:93:
48:2b:e6:58:0f:b4:2b:2e:62:ed:8b:5d:66:f1:04:
63:03:94:e1:01:30:20:8e:3d:7f:55:27:7d:cb:4c:
38:86:ae:47:cd:7c:bb:73:1d:14:38:ad:a4:6d:d7:
79:eb:bf:e2:fe:cb:56:7f:61:a1:45:1c:08:ec:88:
b0:e5:ac:86:6b:1b:27:66:e9:88:16:9a:2e:f7:a8:
c6:a7:a5:43:37:65:14:f2:6d:0c:e6:0a:45:3c:b1:
97:42:a4:2c:92:c5:ac:82:a3:ae:38:8d:b9:e0:84:
d9:79:83:e8:12:75:83:fe:c3:d4:b5:cd:30:f0:53:
85:90:10:8b:c3:4d:18:ea:79:bc:4c:a4:3a:eb:37:
4b:51:c8:97:db:42:6e:2a:1b:af:ef:c9:fe:dc:e2:
63:ba:ca:07:37:2d:99:dc:63:6e:f8:2f:15:7a:70:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1C:5A:4C:85:F8:65:06:29:1E:17:CE:20:4A:EE:71:05:16:B3:0C
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a6:3e:80:57:81:b4:2b:63:9e:ed:30:ed:fc:d8:02:12:87:
71:0a:b1:ae:92:16:b0:82:c1:5b:24:b6:96:d5:23:ce:24:b9:
93:24:3e:22:2f:27:cc:14:5e:b5:bc:64:1e:7a:12:21:08:75:
9a:48:99:df:75:05:d4:22:4f:f0:68:6b:31:b1:b4:3a:51:7a:
f3:c3:04:54:0e:ae:bd:11:e0:8f:8f:4a:57:53:c3:a3:45:0b:
b4:2e:d5:1e:27:4e:53:52:8a:e9:5b:08:9b:59:b8:a1:d1:e8:
24:ec:4e:a3:72:85:0d:20:02:d4:c5:b0:cf:c7:d9:3c:fc:e4:
87:f1:23:7f:22:32:16:2d:69:32:d9:50:21:c1:e2:3a:ba:17:
4d:b6:2b:c0:27:ed:17:ae:f7:ab:d5:77:61:8c:2f:e7:48:9b:
3b:d4:21:cd:84:0b:5f:d8:1b:9d:6e:a3:2d:d9:8d:44:39:f3:
7b:73:4e:f1:35:2f:f6:31:12:84:14:0d:71:80:9d:93:57:ec:
03:26:5d:c9:55:dc:bc:1d:95:8a:5d:d8:56:0a:27:d8:0d:02:
3f:21:be:1c:c1:5b:a0:e5:7e:bb:01:7b:a7:70:df:66:06:d1:
25:0b:65:00:a0:88:a8:cd:f4:01:62:63:2b:70:d4:97:1c:45:
87:79:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:05 2025 by rpki-client