Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: CSwRn/Vqlj2gNtZv0l30Qw4ZXURDgVRlDrg0CMALiIM=
Subject key identifier: 14:2B:7B:94:01:88:0F:F0:82:EA:A6:CB:C5:D1:E0:04:29:77:D4:2F
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 01989524B5F8EDAB4B06B6F36782F3375982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1526
Signing time: Sun 10 Aug 2025 18:01:07 +0000
Manifest this update: Sun 10 Aug 2025 18:01:07 +0000
Manifest next update: Mon 11 Aug 2025 18:01:07 +0000
Files and hashes: 1: C4mXoWlE0u2rZTvygZOHRccieT0.roa (hash: 2pjG126FZCESeR0DqPSbBLsbSndNcZCXbWy82O0JVRw=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: 0tz4bHC/pwn1wDzvGl2ZEwZPEEezu7Hj3vgVfTpI4to=)
3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:b5:f8:ed:ab:4b:06:b6:f3:67:82:f3:37:59:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Aug 10 18:01:07 2025 GMT
Not After : Aug 11 18:01:07 2025 GMT
Subject: CN=142b7b9401880ff082eaa6cbc5d1e0042977d42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:c3:85:58:5e:46:e1:d0:d2:b8:d3:32:38:
6b:be:85:49:44:c4:58:b1:7a:e0:6f:59:6c:16:48:
61:49:26:4e:0f:a0:7e:62:b4:3d:ec:2f:24:23:e1:
79:12:80:1a:1f:78:79:be:d5:ee:ca:56:f3:89:4b:
b2:e2:dc:30:e8:0d:8c:a3:2f:e0:ab:bd:9d:b2:96:
72:37:98:f1:ea:7b:ce:dc:a9:0b:f5:e4:8c:08:6b:
b6:40:56:d8:a7:7c:13:2a:51:84:3b:1a:a7:48:2c:
25:ef:01:4c:f6:ac:c0:98:f5:65:45:7d:01:7b:da:
f6:cb:c2:fd:89:56:61:7e:bc:40:49:ec:4c:36:df:
2d:0b:29:50:72:2f:d6:e6:5b:3d:83:fa:81:62:a6:
47:ea:99:70:c4:21:c7:b5:3e:a3:ef:c1:cc:15:90:
59:84:76:b8:bd:57:13:46:86:5a:9f:9f:24:66:87:
40:9f:a8:06:1c:df:78:f6:59:f9:19:df:4b:42:47:
a0:14:43:cd:58:55:95:f8:8e:6a:dd:43:cb:b2:cb:
ee:27:22:85:1d:44:f7:12:e5:2d:f2:01:30:16:a0:
c0:ba:6b:ef:48:52:5f:a5:94:25:2d:12:2a:ff:39:
a0:78:dd:47:01:d2:ef:04:ff:5b:43:6e:3a:2f:d8:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:7B:94:01:88:0F:F0:82:EA:A6:CB:C5:D1:E0:04:29:77:D4:2F
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:5c:d7:4e:29:40:9a:87:d7:16:fc:b6:59:22:12:e5:eb:
7a:51:c5:83:02:98:3e:ed:5a:40:47:98:50:77:70:56:63:01:
0f:47:10:5c:8c:a3:de:2a:7c:af:56:b6:f6:99:1b:44:cb:d2:
88:1a:a5:dc:09:13:e8:8b:37:52:7e:f7:55:7e:d2:9c:15:fe:
45:0c:8f:1e:e1:f9:a0:7f:28:c6:e1:6c:b4:de:b0:3c:f2:75:
d9:e7:89:66:21:90:61:07:91:28:c5:a0:6e:b4:95:8a:d1:9f:
fb:47:6b:fd:74:12:95:e9:78:d0:57:5b:06:c3:6f:7f:f2:ea:
24:43:8d:3f:06:80:2c:67:4a:8a:b6:10:da:36:7c:40:18:8c:
ae:f5:75:4f:05:40:86:58:b4:31:4f:59:b3:56:d3:62:ec:1f:
8f:3b:6c:a7:00:5b:5c:67:bb:74:e5:0c:07:31:8e:8d:e3:ec:
03:a9:18:05:57:e0:03:48:7e:0f:50:16:29:bf:20:cc:82:31:
0a:e2:2f:43:2e:a7:f2:4f:ce:52:64:1f:ed:87:57:e4:16:3a:
99:8c:26:81:60:7e:e7:e9:bf:26:d3:ae:54:09:a0:1a:dd:e4:
f4:9b:e9:ad:fb:d4:9c:a6:97:43:40:a9:f8:dc:eb:ec:a0:8a:
3e:c1:18:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJLX47atLBrbzZ4LzN1mCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZTM5YjQxMDc0YzdkNmFkYzhlZTI3NGUyMzlmN2I4ZWIz
NTg1ZTkwHhcNMjUwODEwMTgwMTA3WhcNMjUwODExMTgwMTA3WjAzMTEwLwYDVQQD
EygxNDJiN2I5NDAxODgwZmYwODJlYWE2Y2JjNWQxZTAwNDI5NzdkNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWXDhVheRuHQ0rjTMjhrvoVJRMRY
sXrgb1lsFkhhSSZOD6B+YrQ97C8kI+F5EoAaH3h5vtXuylbziUuy4tww6A2Moy/g
q72dspZyN5jx6nvO3KkL9eSMCGu2QFbYp3wTKlGEOxqnSCwl7wFM9qzAmPVlRX0B
e9r2y8L9iVZhfrxASexMNt8tCylQci/W5ls9g/qBYqZH6plwxCHHtT6j78HMFZBZ
hHa4vVcTRoZan58kZodAn6gGHN949ln5Gd9LQkegFEPNWFWV+I5q3UPLssvuJyKF
HUT3EuUt8gEwFqDAumvvSFJfpZQlLRIq/zmgeN1HAdLvBP9bQ246L9h2dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQre5QBiA/wguqmy8XR4AQpd9QvMB8GA1UdIwQY
MBaAFA/jm0EHTH1q3I7idOI597jrNYXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUt
MDRlODEyZDQ4ZTcyLzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8xM2VhMWYtMGJjMS00NTdjLThhYjUtMDRlODEyZDQ4ZTcy
LzEvRC1PYlFRZE1mV3JjanVKMDRqbjN1T3MxaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF9c104p
QJqH1xb8tlkiEuXrelHFgwKYPu1aQEeYUHdwVmMBD0cQXIyj3ip8r1a29pkbRMvS
iBql3AkT6Is3Un73VX7SnBX+RQyPHuH5oH8oxuFstN6wPPJ12eeJZiGQYQeRKMWg
brSVitGf+0dr/XQSlel40FdbBsNvf/LqJEONPwaALGdKirYQ2jZ8QBiMrvV1TwVA
hli0MU9Zs1bTYuwfjztspwBbXGe7dOUMBzGOjePsA6kYBVfgA0h+D1AWKb8gzIIx
CuIvQy6n8k/OUmQf7YdX5BY6mYwmgWB+5+m/JtOuVAmgGt3k9JvprfvUnKaXQ0Cp
+Nzr7KCKPsEY1Q==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:21 2025 by rpki-client