Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier: FqRHECmkYsRjjVzvQUjOrG8Mqjtlb+jz6DC+TBBzuUI=
Subject key identifier: 54:5F:FF:D1:35:1F:E6:28:1E:1F:5D:3C:25:3D:CC:8F:12:5E:80:E8
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer: /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial: 019A73A7798933C193BA3CB9306527686D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number: 0E32
Signing time: Tue 11 Nov 2025 16:02:26 +0000
Manifest this update: Tue 11 Nov 2025 16:02:26 +0000
Manifest next update: Wed 12 Nov 2025 16:02:26 +0000
Files and hashes: 1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: rj+uW/pj5PwZ8gfjNjBZomL4ag8Wik2pXMtwxAe8gco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:79:89:33:c1:93:ba:3c:b9:30:65:27:68:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Validity
Not Before: Nov 11 16:02:26 2025 GMT
Not After : Nov 12 16:02:26 2025 GMT
Subject: CN=545fffd1351fe6281e1f5d3c253dcc8f125e80e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:61:25:b8:75:cd:e0:f9:90:2e:bb:c2:eb:
35:f3:f9:cf:17:3a:80:03:78:45:ca:11:86:7f:6c:
1a:71:f9:53:dd:29:14:ff:f4:f5:72:f1:06:c5:72:
3d:09:4d:43:b7:d3:50:67:f5:cf:0b:50:27:05:0b:
e7:ac:e8:8a:10:29:ef:44:14:67:9d:e4:48:c1:6c:
e7:99:a6:7c:18:01:94:d7:45:c1:18:5b:24:02:cb:
5d:4f:54:8b:1a:be:7e:b7:05:4e:93:24:c1:6e:e1:
80:dd:f3:4a:d2:a0:0b:c9:69:67:21:be:9b:f2:65:
93:c9:20:e0:8f:52:b5:21:99:03:7a:5a:15:85:c2:
2d:87:25:9f:6e:af:01:d5:b3:23:16:4d:ed:56:5e:
35:c5:fa:54:d1:89:98:1b:b3:00:5e:8c:8f:31:48:
56:dd:9d:d6:da:30:f7:7d:07:e0:83:80:20:e7:23:
73:4d:1f:35:34:10:a8:09:27:27:9d:c4:21:51:12:
3c:b5:f3:82:f4:f5:6c:a5:2c:04:79:71:15:b0:17:
31:20:5e:cc:4f:7d:40:69:d3:7c:e5:13:eb:7e:42:
62:b0:2d:d1:c7:e7:a5:f0:96:26:38:3b:18:72:44:
7c:7b:1c:25:04:d9:ba:07:9b:ed:c0:36:68:9f:d4:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:FF:D1:35:1F:E6:28:1E:1F:5D:3C:25:3D:CC:8F:12:5E:80:E8
X509v3 Authority Key Identifier:
keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:00:ce:ea:5e:fb:04:9d:83:45:8d:8c:92:e8:87:a8:c7:
78:e3:0a:15:04:4b:1c:12:bd:71:9c:49:50:c0:9a:d6:db:cc:
4e:df:b6:97:cc:75:b7:8a:3b:59:5c:4a:c1:96:6a:57:b4:c5:
db:f3:96:95:fe:88:4a:c2:ee:9e:cf:95:d9:9a:eb:4c:38:fe:
5e:50:9d:5c:ee:b0:2d:11:4d:26:9e:a5:da:4c:f8:42:78:4f:
0d:8b:d5:63:70:23:59:a6:8a:d4:4e:51:df:aa:65:0c:69:97:
13:d5:82:93:11:0a:0d:c6:33:25:d8:62:5b:29:3a:e2:29:52:
3c:ce:b2:cf:bf:c2:ac:6a:92:ce:09:40:33:ed:ae:67:d7:66:
38:8d:36:87:2b:f4:b0:93:06:8b:49:64:1b:be:de:ff:6e:a7:
4a:28:90:80:5f:93:33:93:11:b0:31:f9:05:1f:1e:df:75:17:
34:3e:96:99:58:e2:93:66:40:bc:4c:d5:b4:33:5b:2b:a9:4a:
fc:88:e8:95:00:52:bf:cf:39:96:6c:4c:83:df:35:bf:df:7a:
f9:a3:77:f0:34:53:f4:79:ea:fe:b4:f9:ae:14:40:8d:a8:7f:
14:80:ea:10:c9:c7:01:3e:21:c3:fc:16:2c:5c:df:6e:9d:f6:
0c:fa:f7:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzp3mJM8GTujy5MGUnaG16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODZjMzM5YWFjODhkZGYzMzQzMGU0NmJjOWY1ZTA3ZWZj
ZGFlYTgwHhcNMjUxMTExMTYwMjI2WhcNMjUxMTEyMTYwMjI2WjAzMTEwLwYDVQQD
Eyg1NDVmZmZkMTM1MWZlNjI4MWUxZjVkM2MyNTNkY2M4ZjEyNWU4MGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8dhJbh1zeD5kC67wus18/nPFzqA
A3hFyhGGf2wacflT3SkU//T1cvEGxXI9CU1Dt9NQZ/XPC1AnBQvnrOiKECnvRBRn
neRIwWznmaZ8GAGU10XBGFskAstdT1SLGr5+twVOkyTBbuGA3fNK0qALyWlnIb6b
8mWTySDgj1K1IZkDeloVhcIthyWfbq8B1bMjFk3tVl41xfpU0YmYG7MAXoyPMUhW
3Z3W2jD3fQfgg4Ag5yNzTR81NBCoCScnncQhURI8tfOC9PVspSwEeXEVsBcxIF7M
T31AadN85RPrfkJisC3Rx+el8JYmODsYckR8exwlBNm6B5vtwDZon9SmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRf/9E1H+YoHh9dPCU9zI8SXoDoMB8GA1UdIwQY
MBaAFNKGwzmqyI3fM0MORryfXgfvza6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMTY2ZjgtNjMzYy00YjNiLTljNzAt
NGE2NWFlMjVjN2RiLzEvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMTY2ZjgtNjMzYy00YjNiLTljNzAtNGE2NWFlMjVjN2Ri
LzEvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7EAzupe
+wSdg0WNjJLoh6jHeOMKFQRLHBK9cZxJUMCa1tvMTt+2l8x1t4o7WVxKwZZqV7TF
2/OWlf6ISsLuns+V2ZrrTDj+XlCdXO6wLRFNJp6l2kz4QnhPDYvVY3AjWaaK1E5R
36plDGmXE9WCkxEKDcYzJdhiWyk64ilSPM6yz7/CrGqSzglAM+2uZ9dmOI02hyv0
sJMGi0lkG77e/26nSiiQgF+TM5MRsDH5BR8e33UXND6WmVjik2ZAvEzVtDNbK6lK
/IjolQBSv885lmxMg981v996+aN38DRT9Hnq/rT5rhRAjah/FIDqEMnHAT4hw/wW
LFzfbp32DPr3uA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:35:59 2025 by rpki-client