Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: jwUL8Z4Amqc6QCi/tOShnRRB+G/U+4M+Up/hw5KO++M=
Subject key identifier: C5:C9:85:0E:58:FD:B0:E9:47:D0:00:26:52:64:1B:94:BF:64:E0:9F
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019A4DE2195F4AA1355FB82C1A8A35B4EA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: FxH7EZgHXHwSniIdsTGO4RH1ve8CMEtS4lf3YdEimDI=)
2: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (hash: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:19:5f:4a:a1:35:5f:b8:2c:1a:8a:35:b4:ea:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=c5c9850e58fdb0e947d0002652641b94bf64e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:5e:dd:d5:2f:c3:68:62:e8:31:ef:af:a7:
b1:8c:43:6f:98:ea:b6:6f:d8:7b:ac:93:df:a7:73:
a8:09:c6:70:57:c1:50:16:fe:e6:e9:2e:a6:68:31:
d4:02:d5:cb:f1:2e:ce:ad:4d:11:e4:60:ef:ee:af:
71:39:39:42:3c:d1:f0:39:1b:48:4e:2a:37:52:59:
65:c5:c5:85:90:d6:f9:db:46:41:75:a1:df:9a:2b:
a9:07:55:40:48:2d:15:8e:d3:89:9b:4a:49:d1:a4:
8e:3f:7c:92:92:f5:b4:00:10:e8:bd:69:d8:34:b4:
d3:18:b0:e0:88:7c:f1:f2:87:f5:df:c5:15:84:d5:
27:41:3e:8c:48:dd:fc:2e:81:e3:ce:0e:cb:16:16:
7a:e7:c3:ec:2e:66:c0:42:fa:a0:10:c6:05:51:30:
df:97:f2:2c:d5:60:03:0a:01:2a:cc:69:c0:46:a5:
15:c8:50:59:e3:6c:a6:a0:ca:39:e8:05:79:18:b7:
78:22:75:2e:2f:82:22:1e:6b:0b:46:81:67:ba:c9:
f0:76:bf:c3:c3:7b:19:03:41:db:09:40:7f:95:98:
bd:7a:90:60:c8:a5:3c:89:15:97:e9:e2:bc:9c:a6:
b5:2f:b2:f6:ad:78:5b:a8:a7:45:57:f8:20:0a:4b:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:85:0E:58:FD:B0:E9:47:D0:00:26:52:64:1B:94:BF:64:E0:9F
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:40:fb:0e:74:3d:f0:eb:df:4f:92:14:12:17:89:75:67:db:
f5:b4:4a:b2:36:0c:83:c0:58:62:83:e7:e2:92:eb:a3:a1:6c:
67:79:59:19:c3:21:80:9b:c0:fc:f7:ee:2b:5e:cf:83:20:e9:
79:54:ce:2a:f7:4a:85:0f:fe:bc:19:93:36:1b:d0:d8:d1:7d:
03:aa:0c:d9:69:f9:8b:dc:f1:60:8e:73:9d:71:90:d5:4e:b5:
8d:3f:62:c5:86:65:84:24:d1:83:77:bd:88:00:5a:01:14:4a:
ac:40:c3:a3:64:12:e3:4c:10:2c:04:39:59:83:35:e6:8c:8e:
31:91:5f:ee:e1:e2:a5:81:ee:14:20:4d:c8:6f:e0:f2:61:37:
f5:48:96:2a:b8:b6:fd:ea:a4:45:e4:16:b3:46:59:bb:1f:f6:
56:3d:2c:46:e3:ec:fe:91:54:90:36:60:08:88:16:cf:bb:ba:
d9:b5:04:f5:75:60:6b:af:44:c6:29:e2:fa:39:0b:24:fd:f6:
5c:43:56:55:4f:c1:00:02:a0:39:0a:74:56:98:db:9a:b4:4d:
4c:b4:8b:fd:ca:84:4e:dd:d6:e4:73:47:13:40:4c:fc:e8:dd:
69:0a:3b:a1:fc:a9:ee:c0:53:5b:a0:70:62:94:de:ac:fc:4d:
d0:aa:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:16 2025 by rpki-client