Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: eeOZjz2CgV4kYuQVLR+ELjHYi//+icMMhpXDkhcDGh8=
Subject key identifier: 88:28:4A:30:A9:A2:FA:34:57:70:A8:D6:72:38:84:B7:3F:78:24:7F
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019A4EF53DA2079440B59041C481E80BB309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 160E
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: imN81gQsroKHeIr/+zT9G9DzidjzC/iVVEUlMf3A58k=)
2: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
3: RgvVQm5i55AP3gZ5KWsISLCa9Hk.roa (hash: OZ0ysfXOwKHpmAoO/4k/2zxN5HNQM5NxSbPzjXOrOvI=)
4: r-rzdWQIevQsRXpy8ArPMXKhl5I.roa (hash: paqGO5ZL3o7kODmIqJwv4WV1pj5fNgUoAM39DR0ohR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3d:a2:07:94:40:b5:90:41:c4:81:e8:0b:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=88284a30a9a2fa345770a8d6723884b73f78247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:7a:c7:bd:3d:45:85:f1:bf:ba:59:48:70:
ca:27:ea:38:d6:74:ed:00:49:a6:dd:aa:e8:15:07:
64:27:66:71:c4:9c:7b:a1:7f:c7:7e:58:86:8f:35:
1e:84:a2:fa:d7:db:f3:f0:92:e4:3f:9c:f7:e9:10:
30:88:88:5c:62:95:0a:d3:fb:96:b2:80:3d:a6:3a:
47:48:0e:f8:82:36:5b:94:25:60:a7:12:33:43:bc:
87:f7:f7:c0:ee:82:7c:8f:9d:f3:b1:4b:4b:65:8a:
47:54:97:bc:23:d6:7d:b8:ba:64:a8:03:dd:76:e8:
0e:eb:1a:8e:46:59:0f:c8:d8:38:cd:77:b9:c7:4e:
c7:bf:29:bf:ef:97:fb:9f:f1:77:10:ec:f0:68:59:
d5:74:af:cd:4d:5d:8f:f4:c0:74:ba:20:99:41:4d:
85:e6:38:cd:bd:26:5f:6e:6b:0c:b8:6a:68:66:54:
a9:74:b4:0f:aa:31:c6:1a:0a:ef:f7:05:78:86:53:
83:43:e6:85:3d:eb:5b:74:1a:42:4a:2a:74:41:36:
d1:46:26:89:82:69:21:18:05:7e:6a:56:6e:35:91:
c9:a0:57:1b:4e:d9:13:e9:57:7d:f5:bb:ee:67:73:
da:16:fa:c1:35:c3:01:e7:65:d8:74:61:97:38:f9:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:4A:30:A9:A2:FA:34:57:70:A8:D6:72:38:84:B7:3F:78:24:7F
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d0:45:16:63:b4:93:cd:6f:e2:37:bc:c7:a6:7f:38:4f:e2:
fd:f8:b0:d8:d9:e4:57:08:aa:19:90:c2:b7:02:41:55:18:25:
90:ae:32:04:e7:ed:8d:01:2b:ec:50:35:ec:b9:c1:10:52:09:
d3:c0:d2:bc:87:fd:69:01:b4:ed:85:83:e6:72:3b:39:07:9a:
5f:04:d3:45:ea:4e:17:61:8f:d6:88:0c:27:20:0f:14:e5:fd:
30:d3:f4:18:26:71:7b:b5:cb:37:3c:3f:3e:62:dc:68:21:72:
52:03:7b:fd:f1:c5:12:ab:6a:c8:65:4b:8c:ab:fa:a1:0d:21:
66:92:67:60:5e:2c:d5:a4:ea:bc:b9:4a:b0:36:e8:2e:9a:16:
52:1a:9f:f7:8c:d8:a7:cf:16:16:79:1d:eb:3e:91:a5:64:1a:
db:f6:b8:f5:91:d4:60:41:34:bd:1f:2d:1a:db:1e:b3:c3:cf:
59:f3:11:00:ad:ae:db:c3:14:b9:13:ba:d0:c2:77:ab:2d:d5:
0b:b4:33:8a:b7:21:ce:13:93:06:a9:30:51:3f:0c:34:fa:1e:
db:ef:ca:02:46:f4:18:39:bf:d2:25:63:36:23:05:66:45:83:
28:fd:85:5e:6c:7e:a1:06:28:a1:d0:d1:49:ba:de:a1:44:f0:
9a:5c:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:23 2025 by rpki-client