Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: MQOG81yRTn5MBfthVxI2APTU3NAdhRw9J12vneHWQ3I=
Subject key identifier: 4B:E9:E1:B6:E7:B1:B3:76:BF:33:43:53:DB:DB:F5:32:3E:A6:80:5C
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 01992330CB3C0251B7D588229DB39FC88FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 13DC
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: 2Jzz5xtqATZMqXNHuWU0GSbgHlhm3LFmbusLWSyjjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cb:3c:02:51:b7:d5:88:22:9d:b3:9f:c8:8f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=4be9e1b6e7b1b376bf334353dbdbf5323ea6805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:d1:f7:eb:98:50:81:51:f8:ed:c7:5a:a2:
e7:d5:7e:f2:5d:24:fd:f6:e0:c2:52:3b:81:4a:9c:
34:1d:d6:59:c3:f2:69:11:02:01:8e:ac:a9:6f:c3:
d2:52:03:46:52:c7:c9:47:af:bf:87:fc:0c:67:60:
a9:be:2b:1c:24:cc:1d:7e:fb:2d:57:35:33:14:88:
f0:ad:52:85:10:29:8d:0c:10:40:6e:c7:e5:49:87:
47:4c:99:75:3e:0d:70:17:0e:69:5c:db:df:4a:3e:
8f:5d:0e:a3:4a:8b:0f:44:7e:a4:71:3f:0f:84:12:
01:f7:01:bb:39:91:c3:01:30:b6:c6:43:e8:22:78:
61:e5:8f:2c:c6:5c:aa:ec:cd:e0:b1:d8:ad:7d:54:
75:73:12:1a:08:04:ce:0c:3d:48:3b:f7:da:8d:9e:
99:36:ac:7b:4f:d3:28:b3:a0:f9:83:8c:f6:79:21:
fa:b8:d7:67:d5:88:33:ef:54:5e:3e:fa:20:1c:a4:
3a:b3:cd:d7:24:b3:c8:91:8a:a7:46:bd:75:98:63:
b2:54:80:46:a0:86:11:45:68:9c:bd:ac:b5:9f:b9:
f4:35:70:93:58:16:81:f9:c0:99:a6:39:1e:82:2e:
a3:75:ae:18:4d:78:b9:34:14:5b:4a:99:00:45:62:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:E1:B6:E7:B1:B3:76:BF:33:43:53:DB:DB:F5:32:3E:A6:80:5C
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:18:38:bb:a6:6e:c8:e1:f0:18:90:f0:df:0d:18:fe:94:99:
6e:93:30:1c:94:95:6e:8e:6f:cb:c9:a1:ee:70:f2:f5:ed:45:
22:2c:ba:94:b0:b3:28:fa:57:7d:e1:1b:be:e5:16:65:71:a8:
50:85:d6:01:a7:4e:7a:24:58:53:88:33:d8:b3:6c:9b:ab:60:
a4:6c:6f:99:5a:09:87:88:5f:8e:61:a1:6c:d4:d0:2c:3d:12:
70:2d:16:f1:5c:ac:53:7f:e3:8f:b5:e8:93:a6:69:60:f0:84:
03:2c:a5:74:70:c1:2a:80:2e:9b:6d:9f:f0:7b:97:39:2f:2e:
50:c9:f3:72:31:d4:b8:70:e5:f3:44:6f:77:43:4f:bf:f7:a4:
fc:2f:3b:d0:87:34:77:7c:cc:65:5d:f4:44:b3:98:1c:2f:ff:
9a:54:8d:93:95:16:73:16:c2:e6:53:38:b6:34:62:74:d2:0d:
d4:56:f8:dc:66:90:e5:2a:25:54:3f:50:3f:38:87:85:d0:c2:
f7:6a:68:4d:61:3f:b5:3b:23:cf:64:75:21:58:d7:6e:e0:ea:
84:a8:85:82:1b:dd:d9:32:df:68:2a:ed:8b:3d:00:2e:ae:aa:
3b:78:fc:23:fb:08:04:ff:20:41:2d:07:7c:b8:d4:0b:41:ad:
b4:03:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:23 2025 by rpki-client