Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
File: ObCMosZLpzX0sUUhbdFNmfCCnw8.mft (raw, json)
Hash identifier: 4M46tCq5g095sXfT/uhXHCtWdQ3mReZH72Dt/NfpED4=
Subject key identifier: 90:09:2E:73:E5:F9:88:45:EB:3D:95:75:01:96:42:90:F8:A7:92:C9
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019A4EBD4E156B5A6C3D7792234E26782A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
Manifest number: 5D
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: 1xRN2ISB9yDhR3Q54HcBc-sUzRM.roa (hash: ggo342L8QjroxZeBPHXxlyJmrWPYU4LhAqkE4B3nRK4=)
2: ObCMosZLpzX0sUUhbdFNmfCCnw8.crl (hash: 5n1DaFvs1tp6IaHUTtD314GqeX17S1Y+gm4ANVtTQuw=)
3: tnM9DnrSRmOo18qNgvvkTy18Wls.roa (hash: a6GY2FMx4xs8RMENf2iVpRjn282lRrR2VnauLywusWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4e:15:6b:5a:6c:3d:77:92:23:4e:26:78:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=90092e73e5f98845eb3d957501964290f8a792c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:24:58:11:a9:11:9a:4e:26:55:48:19:c3:
ce:cb:3d:c4:49:48:52:f4:65:ee:ae:e7:61:7e:1b:
a9:04:45:d3:d9:b0:00:37:3a:01:38:f6:91:06:56:
8e:96:02:da:2d:b0:fc:c0:47:66:12:7a:bd:38:9c:
22:34:52:2a:53:1f:e5:be:fa:e9:34:f9:c0:c7:08:
20:4e:38:6f:bd:e0:11:29:4c:d7:fd:b7:dd:8d:ab:
4b:6f:36:00:8e:1a:a9:fc:8f:90:db:6c:25:c8:fa:
db:ac:0f:5e:b1:d4:00:73:48:b4:e8:17:3d:65:57:
c3:05:d6:0e:12:db:9a:bf:b2:9d:e5:57:81:2b:43:
ae:45:39:37:2e:45:6d:59:93:82:76:b5:0a:d0:f8:
b5:c1:a2:c8:d5:80:2f:38:93:94:cb:bc:7a:52:90:
52:25:7a:a0:4e:7a:99:81:cd:9c:52:bc:1a:ba:67:
fe:40:77:1c:34:01:53:e8:1e:30:ab:22:e9:87:96:
b3:83:e0:09:08:a1:c0:8d:18:a0:ab:74:8b:fd:4c:
e2:9a:4c:94:d4:43:53:00:df:d9:5d:a6:29:44:ce:
6a:f5:73:a7:e8:96:88:49:88:d9:24:7e:42:c8:43:
eb:3b:7b:b5:b2:6b:25:fb:c0:80:23:f9:d4:46:9e:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:2E:73:E5:F9:88:45:EB:3D:95:75:01:96:42:90:F8:A7:92:C9
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:40:36:2c:a0:55:75:88:5f:9b:50:2d:51:25:f7:7a:4f:e4:
91:e5:83:2c:ed:27:da:33:88:40:9c:aa:16:c7:1e:5c:02:21:
21:6a:98:fd:cd:eb:48:a9:f6:54:3a:8b:8c:9f:26:71:73:82:
e4:29:da:14:90:19:bd:4b:e0:5e:8d:8e:8e:fb:38:17:bc:5a:
26:01:f8:00:61:45:31:b9:ba:51:fc:d5:ee:12:0c:b8:f7:a8:
70:c5:96:8c:ec:84:0f:0a:6c:e4:dc:18:51:8c:a8:51:57:47:
a3:51:6a:9b:b3:b7:62:40:9b:b2:38:91:64:ec:ad:c3:2c:7c:
1b:c1:ff:b5:85:68:d5:a2:19:30:e4:66:0d:42:91:8a:42:a3:
83:58:bd:11:70:7b:46:8a:91:8e:55:b5:be:ed:ba:31:ea:8b:
13:99:ce:9b:27:c2:ff:7e:14:9b:aa:d4:01:af:8f:50:d3:77:
38:3c:c0:51:df:83:1e:25:54:2c:27:cb:0a:28:d1:55:04:6c:
da:f0:92:94:1e:09:53:72:4a:ae:8f:4a:4a:d9:ef:e4:41:d4:
f4:f0:cd:99:1a:59:19:12:8c:b6:e0:40:e4:7f:75:53:cd:8b:
08:b8:06:b0:9e:57:79:b5:d8:c4:ad:c7:2e:df:94:ae:6d:a2:
a6:fb:e0:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvU4Va1psPXeSI04meCoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YjA4Y2EyYzY0YmE3MzVmNGIxNDUyMTZkZDE0ZDk5ZjA4
MjlmMGYwHhcNMjUxMTA0MTIwMDIwWhcNMjUxMTA1MTIwMDIwWjAzMTEwLwYDVQQD
Eyg5MDA5MmU3M2U1Zjk4ODQ1ZWIzZDk1NzUwMTk2NDI5MGY4YTc5MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hwkWBGpEZpOJlVIGcPOyz3ESUhS
9GXurudhfhupBEXT2bAANzoBOPaRBlaOlgLaLbD8wEdmEnq9OJwiNFIqUx/lvvrp
NPnAxwggTjhvveARKUzX/bfdjatLbzYAjhqp/I+Q22wlyPrbrA9esdQAc0i06Bc9
ZVfDBdYOEtuav7Kd5VeBK0OuRTk3LkVtWZOCdrUK0Pi1waLI1YAvOJOUy7x6UpBS
JXqgTnqZgc2cUrwaumf+QHccNAFT6B4wqyLph5azg+AJCKHAjRigq3SL/UzimkyU
1ENTAN/ZXaYpRM5q9XOn6JaISYjZJH5CyEPrO3u1smsl+8CAI/nURp4r+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAJLnPl+YhF6z2VdQGWQpD4p5LJMB8GA1UdIwQY
MBaAFDmwjKLGS6c19LFFIW3RTZnwgp8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUt
MzQxNjA0NGUzNThlLzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hYzAwYjctZGE0Mi00NDY0LWJiYzUtMzQxNjA0NGUzNThl
LzEvT2JDTW9zWkxwelgwc1VVaGJkRk5tZkNDbnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEA2LKBV
dYhfm1AtUSX3ek/kkeWDLO0n2jOIQJyqFsceXAIhIWqY/c3rSKn2VDqLjJ8mcXOC
5CnaFJAZvUvgXo2Ojvs4F7xaJgH4AGFFMbm6UfzV7hIMuPeocMWWjOyEDwps5NwY
UYyoUVdHo1Fqm7O3YkCbsjiRZOytwyx8G8H/tYVo1aIZMORmDUKRikKjg1i9EXB7
RoqRjlW1vu26MeqLE5nOmyfC/34Um6rUAa+PUNN3ODzAUd+DHiVULCfLCijRVQRs
2vCSlB4JU3JKro9KStnv5EHU9PDNmRpZGRKMtuBA5H91U82LCLgGsJ5XebXYxK3H
Lt+Urm2ipvvgMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:26 2025 by rpki-client