Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: yEQrd3bpbQ8mWiq3yrg72IatJFkJbsyOAOC4EKRAPz0=
Subject key identifier: 1A:D2:22:69:05:3F:62:EF:B1:46:ED:D4:9B:BF:55:DE:44:64:9C:B9
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01988F22C0E9DEC053974C8DD77EB791EEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 14:01:16 +0000
Manifest this update: Sat 09 Aug 2025 14:01:16 +0000
Manifest next update: Sun 10 Aug 2025 14:01:16 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: nkSKZ/kDuPWWsn4Coni0iikKtIZssbF2HtirQg/V7Bw=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:c0:e9:de:c0:53:97:4c:8d:d7:7e:b7:91:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Aug 9 14:01:16 2025 GMT
Not After : Aug 10 14:01:16 2025 GMT
Subject: CN=1ad22269053f62efb146edd49bbf55de44649cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:d1:8c:a8:f1:d7:d1:34:13:11:53:74:09:
99:b8:54:c7:9c:c3:cc:aa:6a:12:31:e4:7a:79:ab:
77:3f:06:8e:f2:74:57:6f:c2:d8:44:f1:f1:53:ce:
a4:af:24:42:c7:36:44:e1:5f:c8:cf:4e:4c:cc:96:
d6:4c:d1:1d:d7:ba:56:ad:ed:ef:37:f8:74:e6:1f:
dc:22:22:34:00:d6:e3:95:20:82:ed:e6:9d:e4:d1:
81:46:d1:09:70:e8:79:4a:52:93:92:cf:fc:df:d7:
bd:d0:e3:f7:5d:9f:d6:85:83:e3:1b:d4:18:7b:8a:
d7:83:49:88:1f:13:6e:4c:44:71:9b:4a:8e:fe:d5:
c7:96:ea:5a:71:66:6d:e8:df:c6:53:60:b0:ec:fc:
a9:ca:78:4a:b6:51:b9:57:2f:3b:f2:23:18:70:4e:
de:ac:74:44:e4:ca:29:c0:4d:42:cb:e1:cb:50:3a:
ed:74:ca:68:ca:2d:c1:66:b4:05:36:bf:f2:b2:dc:
57:85:9e:8b:90:dd:98:20:bd:82:a6:18:d4:1a:c1:
c5:d4:cf:b0:50:87:80:f8:80:5d:db:a3:d8:af:5a:
70:fb:50:fe:e0:e2:17:d6:1b:c9:53:35:41:01:da:
21:df:26:82:76:7e:81:ee:ec:51:32:6d:5c:ea:8b:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:22:69:05:3F:62:EF:B1:46:ED:D4:9B:BF:55:DE:44:64:9C:B9
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:11:30:18:8c:73:be:20:86:85:88:49:e1:94:ea:4e:fe:26:
65:51:25:4a:8d:2c:e5:c8:1a:85:9b:ba:fc:00:d6:ef:f6:89:
92:81:80:23:67:7a:52:1e:d9:bb:05:8c:7f:71:52:c3:7e:3f:
5f:d0:6b:4d:5a:b5:a0:e0:c2:1d:01:bc:4e:3f:65:b7:d1:f2:
88:8d:62:54:8d:66:3c:62:46:50:e3:46:7e:17:50:20:f2:e2:
e9:7b:29:33:37:e9:4c:f9:20:c0:ea:8c:39:0b:51:50:5f:2b:
7d:7b:43:68:1a:33:cc:2a:88:d8:4a:97:3e:9b:e8:4f:a8:b9:
8f:37:de:be:f3:87:49:51:2a:b0:05:d2:ca:da:1d:4f:6c:49:
d3:6d:a6:4f:2e:d7:0e:98:14:38:6d:41:d4:59:10:b3:6c:76:
b3:29:16:e1:5e:d3:cf:60:07:1f:47:73:94:4a:66:59:7d:0f:
f0:76:1a:59:5f:d8:7f:d6:5a:06:da:64:76:63:a5:fc:50:cf:
d6:0b:91:de:29:f5:67:81:55:27:88:4f:04:4c:75:d0:18:09:
3a:38:f9:b2:0a:5d:b9:47:1f:d4:5c:2d:af:e5:c1:d8:ba:ab:
3e:9d:f6:cf:71:17:f1:0b:06:5a:e4:58:d8:9e:47:7c:49:0d:
0e:37:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:06 2025 by rpki-client