Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
File: OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft (raw, json)
Hash identifier: sVol66qOFj2A5LRPVDUv/kjJeBfa4BrPPkwDdLL4/g4=
Subject key identifier: 3D:C4:09:80:B8:96:57:18:45:46:53:2F:94:2F:A2:FB:D8:2C:99:BC
Authority key identifier: 38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
Certificate issuer: /CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Certificate serial: 019A729346444E23C24DEB7A7238F52050A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
Manifest number: 4A
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl (hash: bxrshexGimmWHbpISAGWFzxhpHqz8Q/aeiw61eVt9s8=)
2: QibeyjSv1hfxKFEaKrbqmDXpj2I.roa (hash: ifdoDGnGJbL7K4fA7Xk5/reVlWdHN5zJyJBNdlq2ay8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:46:44:4e:23:c2:4d:eb:7a:72:38:f5:20:50:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38183150af290d0f6d25b036136f1cbf6b0f17c9
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=3dc40980b89657184546532f942fa2fbd82c99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:2d:a3:7d:3a:43:bd:06:af:3e:12:fd:68:
9e:51:d4:30:7a:46:a3:dd:61:72:d2:21:8e:ca:55:
81:2b:91:98:76:db:da:3f:9c:69:8f:24:c0:96:0e:
f5:dc:5e:37:c9:34:1f:13:fb:30:60:92:4b:54:d1:
0d:c9:e3:9a:ac:55:8d:a3:cb:e5:f9:c7:db:e5:71:
6d:c7:6f:a8:45:ba:b3:93:f0:fc:8a:c1:95:1b:f1:
18:cd:f1:44:6c:ea:2c:05:e3:95:31:e9:f1:89:55:
e5:70:ae:3a:2d:16:a6:ac:fc:1f:17:db:41:bc:90:
73:75:b7:90:ea:f9:8c:3d:7f:f9:50:c9:7c:af:bc:
8d:3d:7a:23:62:d1:91:66:5a:fb:1a:0d:2b:9a:b1:
6d:e6:e3:ed:f7:3c:80:34:3f:55:48:d7:3e:18:d9:
5b:24:95:00:cc:d6:a2:23:9c:a3:a0:74:04:31:58:
b4:44:30:3d:49:67:db:bd:bb:71:80:1d:a9:c4:66:
c4:f2:77:88:7a:e0:8f:6b:36:0a:d0:e1:4b:fd:d9:
20:0f:ab:30:44:36:93:76:66:83:61:53:e0:b7:b0:
17:11:04:04:1c:48:22:46:c6:7f:22:76:2c:41:a3:
ee:36:a5:1f:29:eb:c7:0c:1d:b0:2a:2c:ec:ee:9a:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:09:80:B8:96:57:18:45:46:53:2F:94:2F:A2:FB:D8:2C:99:BC
X509v3 Authority Key Identifier:
keyid:38:18:31:50:AF:29:0D:0F:6D:25:B0:36:13:6F:1C:BF:6B:0F:17:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgxUK8pDQ9tJbA2E28cv2sPF8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/59907f-7e5f-4d8a-acf2-7720d82f8345/1/OBgxUK8pDQ9tJbA2E28cv2sPF8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8b:09:1a:1f:fe:0e:d0:4a:2c:9f:b0:6a:c6:a7:97:90:66:
56:7d:1b:0a:dc:88:14:5f:70:c4:c5:c5:a0:c8:eb:12:ba:2b:
f8:99:1a:27:a5:08:94:d5:2e:e2:d2:0e:f8:df:da:f9:92:0e:
6f:91:04:c1:10:08:5a:9f:c7:09:88:b2:4f:5b:18:f8:9c:07:
52:e0:46:98:89:32:0f:bf:ba:c3:3a:a3:0b:1a:c2:29:a2:b9:
c9:44:98:22:c6:3b:2b:04:de:2d:6c:0f:2a:0c:f2:d7:2d:11:
f8:18:7a:7c:0a:ce:88:e9:f5:c4:2f:a8:ea:8b:fe:3f:29:aa:
40:fb:a0:63:56:02:41:5a:0b:08:a3:42:76:46:c9:44:14:cb:
f6:03:24:d8:60:99:c3:db:9d:97:e9:48:61:e9:73:24:fe:ef:
59:20:7e:eb:b3:e3:61:84:70:42:62:dc:8b:d4:e6:db:2f:f0:
be:a9:d7:8f:e2:23:28:aa:25:5e:e5:d4:33:4c:b2:a2:75:0b:
e7:d5:5e:73:d6:3b:3b:16:68:0d:f9:11:46:53:92:ef:8f:a3:
0d:ae:b0:4d:a7:cc:20:fa:c5:c1:58:30:00:dc:f9:4a:32:a0:
71:50:71:ab:05:db:5f:37:3f:31:bf:e7:ef:bd:4c:42:05:f0:
53:16:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client