Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: jq9O4AX7DXAgYMS8cvM7+q9R9U+J8nQ8eMcuL5AxFZY=
Subject key identifier: B9:E6:28:31:E2:51:44:07:B5:47:80:07:FB:5C:5E:A4:7F:EC:9E:14
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 019A733886BD2409FD6C5F5FE5DFBE170112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 148A
Signing time: Tue 11 Nov 2025 14:01:15 +0000
Manifest this update: Tue 11 Nov 2025 14:01:15 +0000
Manifest next update: Wed 12 Nov 2025 14:01:15 +0000
Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: YieoLffRtpTWpOqheE4WW/46F1OMOsjP/lCzTkbrX4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:86:bd:24:09:fd:6c:5f:5f:e5:df:be:17:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Nov 11 14:01:15 2025 GMT
Not After : Nov 12 14:01:15 2025 GMT
Subject: CN=b9e62831e2514407b5478007fb5c5ea47fec9e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:d6:42:a2:cc:aa:c8:eb:51:3e:1f:d0:85:
3e:45:00:0f:ac:98:87:37:3a:22:1b:00:f6:1a:9d:
e7:3a:9a:be:50:ba:47:23:dc:0c:b8:de:a6:28:52:
48:81:9e:8a:86:64:30:2f:45:3a:97:71:78:77:9a:
6a:81:d3:dc:75:cd:50:13:b5:3b:4e:5e:52:2b:d7:
ef:ed:b4:7f:e3:56:e2:67:3e:8b:d3:fe:12:97:a4:
ec:a7:f9:ca:1e:97:d3:6e:d2:1c:70:e5:a8:59:81:
f8:b2:28:ff:84:dc:43:28:a0:80:3a:6b:21:df:4b:
99:dd:da:cb:bb:82:6b:59:02:eb:52:53:bc:48:b1:
66:ad:8f:58:8e:04:6d:8d:b2:62:38:06:5a:5e:da:
7e:3d:e1:74:a4:38:e3:b0:f6:5d:08:a4:41:a4:48:
1c:ee:f1:4a:63:c2:fd:15:a6:5a:df:99:03:fd:a5:
eb:35:9c:8b:c7:a2:86:df:2b:0d:cb:5f:ca:07:33:
b5:47:23:fe:ea:21:5d:c1:b0:90:72:64:6c:11:9f:
b3:45:6d:ce:c5:3f:6d:e6:5f:9c:f6:93:a4:d1:5b:
54:d6:b1:b2:f4:dd:84:fe:b4:e2:c6:11:2e:f7:9e:
c8:df:e0:bb:5b:e4:fb:b4:57:75:54:4e:43:47:d3:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:28:31:E2:51:44:07:B5:47:80:07:FB:5C:5E:A4:7F:EC:9E:14
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:81:72:c8:44:87:7f:f7:1d:5c:e0:b8:50:14:1a:7a:67:96:
f5:96:57:49:09:33:c1:1f:01:54:dc:05:ea:a4:96:8a:20:4a:
18:b4:75:f2:1e:c0:9e:12:04:2a:3d:61:0b:49:15:89:a6:5d:
b9:ec:1c:ab:a7:92:09:e1:ad:39:aa:25:62:f3:3e:26:63:7e:
32:78:7a:52:89:f6:80:14:01:d7:8e:5b:a6:5a:cc:91:43:f2:
ab:75:48:c4:71:99:9f:ef:26:e3:ec:a2:95:66:45:19:0f:53:
0a:21:88:ab:24:cb:a9:2f:ec:6b:76:b4:cd:e0:3f:d1:fd:2b:
b2:ea:6e:be:e4:d9:d9:91:48:59:bc:05:89:4b:99:83:43:82:
58:8e:b3:7b:8f:12:d1:19:f8:40:37:5b:c2:fe:0d:a2:eb:02:
58:3e:37:ef:43:d3:58:f2:fa:ec:27:3c:98:96:60:56:40:42:
94:00:97:fa:19:f8:a0:f7:d6:1d:a7:b3:98:d6:17:26:e6:2b:
75:7a:65:81:d9:4b:9d:63:64:68:27:1f:d8:d2:f2:31:9a:e0:
c7:c3:55:fb:82:c8:bc:05:d4:65:e8:11:cd:2c:9a:53:90:04:
84:45:bb:07:dc:af:9d:0c:14:cd:0c:3f:19:b8:71:b8:68:d6:
5a:44:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:59 2025 by rpki-client