Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: YyyT18KVQRS5Yonic6vV8BbQ8S7ZfEgUHcbVK7D6qIU=
Subject key identifier: 83:02:BB:4F:35:E1:34:A9:79:F1:48:DD:94:CA:F5:0F:D2:EA:D0:DF
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 019A0DF0807D9B5018125FEAABE4390F48B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0BCB
Signing time: Wed 22 Oct 2025 22:00:56 +0000
Manifest this update: Wed 22 Oct 2025 22:00:56 +0000
Manifest next update: Thu 23 Oct 2025 22:00:56 +0000
Files and hashes: 1: XuoB2Xg2V8sDLR0FcXE9_KgeaNE.roa (hash: 8weZHHb2/AwELkcsnpwE6+GAIsY98yWhXTvCdqaPCb0=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: ufnorWZ0lCmLYs2xPBqiEwg640PzbZCpmSO7ejytdCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:f0:80:7d:9b:50:18:12:5f:ea:ab:e4:39:0f:48:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Oct 22 22:00:56 2025 GMT
Not After : Oct 23 22:00:56 2025 GMT
Subject: CN=8302bb4f35e134a979f148dd94caf50fd2ead0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:bd:0f:83:ff:8e:af:1c:e7:d6:d9:52:9c:
38:3f:e0:81:25:d3:02:f5:de:92:93:6c:26:c9:f3:
05:dc:d3:ec:63:e0:90:ae:b3:22:23:69:60:ab:3c:
66:fa:0b:5f:0e:e3:bd:36:52:6a:11:5a:30:c9:60:
64:ab:9b:1c:dc:ad:9e:4c:0a:cd:96:52:23:d7:2a:
17:04:7f:b6:cd:bd:d0:ee:d0:7c:f0:e4:84:5d:6c:
84:5d:98:73:3c:84:9a:d7:f5:d4:3e:eb:80:c4:b3:
9e:72:c1:41:e9:b7:af:fc:e0:ca:db:69:65:5b:2e:
07:f5:d4:ff:20:67:f8:08:83:73:a0:af:13:a7:f3:
92:ed:51:0c:9e:8f:d4:9e:af:bd:c6:c8:7c:86:cc:
26:aa:15:39:63:cc:38:28:ba:a9:7a:85:9a:cf:ba:
41:1f:b8:b3:b8:04:45:bf:09:6e:a3:80:ed:7d:83:
72:f2:c7:79:d8:ff:91:8f:02:ba:d0:26:ad:9c:da:
7b:62:b9:71:5f:9b:36:71:96:43:78:f0:6f:3e:54:
9f:af:1c:97:9b:9d:1a:88:d6:9d:a6:e1:5d:37:9b:
da:95:a3:10:99:9b:4d:5a:45:7f:c8:30:91:05:7b:
05:c1:79:08:e0:0b:25:6a:9c:d0:06:9d:31:e5:8f:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:BB:4F:35:E1:34:A9:79:F1:48:DD:94:CA:F5:0F:D2:EA:D0:DF
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2c:d2:e7:15:f3:e9:7b:db:69:89:cc:7a:19:d1:1a:aa:0b:
60:67:e2:bb:27:c7:0a:b3:49:cf:5f:7d:ba:4d:9f:8b:27:e9:
38:d2:dc:64:79:25:a3:df:b4:a2:6c:7b:e0:c9:4a:72:94:c0:
6d:83:dc:d8:21:82:c9:ff:68:9f:ba:b9:8c:06:99:d2:56:de:
ef:bb:94:4e:a5:a7:d2:eb:c4:98:ac:87:e5:16:e0:0a:ab:02:
9c:cb:ca:d3:be:c0:83:56:97:b3:14:fa:70:c2:64:f8:f4:0e:
95:41:9e:66:2f:81:de:bc:02:28:ef:e4:d2:dc:a1:63:a0:b6:
59:dd:59:0c:49:52:29:79:00:3c:2e:da:6b:ad:81:69:11:2c:
67:82:c6:87:9a:6d:ff:9e:6c:e0:5f:20:f0:61:20:c8:9b:e9:
77:6c:44:24:7f:13:c5:63:2b:0e:fe:e0:9f:d1:5d:43:60:ea:
ff:1a:92:88:fc:9d:c5:23:4a:f9:fb:fa:f6:55:c4:54:d0:4b:
e3:46:09:90:61:38:94:f1:40:a5:86:bf:51:8f:4c:ac:ed:a8:
d0:f0:08:16:00:a5:0b:9e:07:5a:e3:17:60:f7:a8:71:05:67:
db:8e:d5:14:9d:fe:19:de:f2:34:5f:db:92:81:0f:31:0b:32:
a3:dd:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 04:42:55 2025 by rpki-client