Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
File: OBXtD6YgyAGqqabxT2WW1-yXUKE.mft (raw, json)
Hash identifier: zJaVPe7j2w+sKeEyk+T8lSLu2eYSyy4zgh5JpCpGTf4=
Subject key identifier: 0E:DD:74:90:1A:56:6F:D8:3B:A5:5A:2F:94:91:29:15:0C:C8:AB:D6
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 019A5119EDC76A955DF250816EE7A892065D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 23:00:44 +0000
Manifest this update: Tue 04 Nov 2025 23:00:44 +0000
Manifest next update: Wed 05 Nov 2025 23:00:44 +0000
Files and hashes: 1: OBXtD6YgyAGqqabxT2WW1-yXUKE.crl (hash: FY0EO7rOmbxRXi3ybq2mYa/qROX/MQiJplSAU66DlGA=)
2: u-w9Flj7fkevQpf-dpXISzIby2Y.roa (hash: +ftWzfsK6bMqWx5+3ThvbgDjBdiFZmrC2eI3EPi2YVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ed:c7:6a:95:5d:f2:50:81:6e:e7:a8:92:06:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Nov 4 23:00:44 2025 GMT
Not After : Nov 5 23:00:44 2025 GMT
Subject: CN=0edd74901a566fd83ba55a2f949129150cc8abd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:9c:4a:07:a7:be:9a:12:41:69:dd:92:35:
ea:f5:16:fe:6b:37:b3:a6:dc:29:e6:03:fc:62:48:
e9:99:06:2c:ec:35:d4:99:34:ea:71:72:bf:56:46:
6a:27:30:3b:62:7c:8a:cb:97:36:67:c4:e6:c5:d0:
4a:1a:68:8a:6f:b7:f6:6e:6f:d4:24:37:77:43:bf:
4e:ee:a1:c1:71:f4:ac:ee:26:b7:a0:c8:6b:8d:11:
19:c4:fd:66:42:79:b4:21:8a:b6:02:04:28:ab:98:
21:a0:0a:92:91:0b:92:65:8d:24:9d:94:cf:26:eb:
c7:37:5e:3a:20:cb:3d:0b:52:b6:c4:d5:01:11:8e:
4b:7b:0b:c4:d1:28:1c:55:4f:18:ea:4c:b3:7a:cf:
65:f0:c2:ec:32:fa:f3:b3:02:d1:c6:3f:81:a2:07:
0d:34:a0:af:ff:f0:9b:c6:3a:50:a2:dd:8d:67:ed:
e8:7c:22:7f:7e:1a:4f:4a:9b:71:ab:1f:6f:da:e9:
64:94:a7:2f:db:7a:5a:c0:bb:e7:c0:ed:c0:ce:f0:
fd:56:51:fa:47:57:37:dc:68:e6:5e:89:51:05:8b:
4e:cd:82:12:69:b6:0d:18:28:5e:1a:47:1d:10:4c:
cb:c7:42:95:52:92:bd:ed:26:58:0c:78:29:23:b8:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:74:90:1A:56:6F:D8:3B:A5:5A:2F:94:91:29:15:0C:C8:AB:D6
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fb:91:c1:1a:b4:9c:50:9c:9b:fe:21:ba:bc:70:fc:64:bc:
da:10:b3:7b:85:87:b5:82:24:23:c1:85:e4:c1:63:d3:9a:d6:
88:9e:0f:bb:62:1f:09:46:1e:1a:92:72:7e:b9:e8:89:75:6f:
9d:3e:6a:af:0b:27:3b:f5:21:32:29:be:89:eb:13:63:a2:04:
03:84:3e:92:2e:d2:4f:14:4b:df:01:0e:4d:52:1c:2a:b7:73:
dc:2d:4e:de:98:0e:be:17:be:ee:97:32:7e:49:d1:26:43:92:
1e:c5:51:90:40:86:c1:a0:f5:86:d6:c0:64:79:04:1e:6a:f4:
e1:2f:44:fe:f2:43:9f:38:ba:b8:86:96:95:ef:fe:bc:88:db:
84:34:b5:76:9e:d8:bd:3d:18:61:52:4e:50:3b:02:f8:79:b9:
81:7d:d4:0a:a4:99:f2:99:d1:12:51:4e:84:91:1b:1f:c7:01:
df:da:36:ec:03:17:e6:93:38:19:d2:e0:da:8e:61:31:39:67:
ff:0f:f9:de:c4:a9:87:3a:46:3c:cf:89:46:3c:d4:bf:bd:5b:
eb:5d:c8:f4:d5:03:ee:10:b4:6c:71:45:06:81:f5:01:80:ab:
ca:69:99:c0:c7:b8:f1:51:f1:d9:41:36:98:27:0c:da:f6:97:
7b:94:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:51:30 2025 by rpki-client