Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: qhv/RJMTO4rBqOkAbVM+5JDZAHjpKU+Thab8d4uXIYY=
Subject key identifier: 0E:9F:C5:42:1B:20:30:D8:5E:B9:46:8D:4A:93:58:17:A4:FD:DF:E0
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 019A71B8AB1BD3C80BF0C45110BA177A22B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 1464
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: hRipStCv/ii54CljldBwd1ca6BlqfHV/AwMScsy3w3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ab:1b:d3:c8:0b:f0:c4:51:10:ba:17:7a:22:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=0e9fc5421b2030d85eb9468d4a935817a4fddfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:cb:25:c7:22:e6:52:0a:86:95:26:37:79:
49:2b:a2:40:24:84:4f:b6:f4:ca:2f:e6:84:4e:9d:
ee:55:e8:79:fe:84:c1:96:a4:8f:c8:fa:a8:66:08:
a8:c2:1e:7e:4f:15:a6:fb:85:fc:61:17:23:28:1a:
3e:97:85:6b:36:48:b6:f4:36:c8:c1:38:36:06:35:
42:2a:b2:c2:72:8b:06:1e:1f:98:75:dd:dc:ae:13:
02:89:06:43:42:50:ca:fe:bb:8d:a9:95:a4:c1:e3:
d1:82:97:ca:0e:79:07:f1:a3:a6:b0:7d:22:f4:2b:
25:ca:10:1a:6e:51:8e:bd:ca:47:3f:c3:e0:af:68:
f8:d1:d7:ec:8f:23:25:f7:a1:73:8c:05:6f:4e:47:
e4:3a:45:0d:8c:41:fe:be:b1:64:6d:27:75:fb:84:
24:5c:e1:f5:1a:77:98:05:01:56:a9:d9:04:bd:cc:
0f:ab:9c:b8:36:3e:77:e2:ce:a7:b2:08:0e:66:2d:
de:13:f2:96:3d:b3:11:35:12:9e:24:ee:37:96:b8:
77:77:0c:b5:59:9e:b2:30:23:96:10:7c:c0:88:e3:
c0:11:5f:e4:e5:f2:e2:e6:eb:77:93:31:d1:a1:be:
33:c3:df:46:28:bf:dd:37:ad:ac:95:c9:03:14:5f:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:C5:42:1B:20:30:D8:5E:B9:46:8D:4A:93:58:17:A4:FD:DF:E0
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ac:f2:fc:92:a7:56:50:35:e7:a5:83:28:aa:5e:73:df:dd:
97:56:7f:10:47:05:1b:47:33:d4:46:3f:d3:5c:97:c0:32:48:
64:e3:d7:7b:c4:c3:b5:88:a8:79:a5:f5:c0:70:6c:8c:f7:db:
1e:78:f3:26:2a:3f:7b:1e:0b:ab:5d:a2:d7:0a:ee:c7:01:40:
e0:3f:b4:ba:91:fa:86:5b:56:53:10:46:dc:e3:2e:73:92:b2:
20:cf:b2:55:58:02:67:09:8e:82:10:26:8d:5d:9d:5d:b9:ed:
1d:8f:06:9a:92:3c:b7:d7:bd:74:f3:76:3d:56:26:ee:5c:4b:
86:d1:9f:14:1f:29:f0:8f:ae:11:74:75:4a:e6:4c:b9:ce:bc:
00:73:e7:f1:98:3c:8b:5f:72:be:a4:97:f3:b6:81:20:cc:22:
81:01:51:63:ca:42:11:98:ba:5f:b4:e6:70:c4:6b:b7:35:23:
f0:c2:32:0f:97:7a:8b:43:74:c9:52:92:0d:5b:b6:2e:f4:e9:
2d:94:dc:44:aa:1f:9c:c5:59:f7:e5:9a:37:a6:dc:1c:d1:83:
3f:16:3b:ba:9f:1e:3c:68:30:c3:b8:91:ea:5a:58:dd:9d:ee:
9f:85:49:a0:e9:27:0c:58:ba:67:8e:65:d2:04:cd:a0:ff:aa:
71:e2:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:03 2025 by rpki-client