Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
File: OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft (raw, json)
Hash identifier: RYLrF4at7Y2CclI4FoVQB7SPzC2VJmwmo4G6+VonQ+M=
Subject key identifier: ED:77:9B:84:B4:B9:1E:72:E9:C0:7D:FA:28:C9:94:C8:9E:F6:AF:54
Authority key identifier: 38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
Certificate issuer: /CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Certificate serial: 019873E27AD8AEE1CC8080DF156EE01AE9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
Manifest number: 0CF6
Signing time: Mon 04 Aug 2025 07:01:19 +0000
Manifest this update: Mon 04 Aug 2025 07:01:19 +0000
Manifest next update: Tue 05 Aug 2025 07:01:19 +0000
Files and hashes: 1: OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl (hash: bd3CK+XqQVnbFmpa94p1fp2QnJYxwzUBxMRVRsIy+EM=)
2: b85MZ4WinFf_UE0cBlcSvifgg7I.roa (hash: uJf/EeGTiSuFi2jO3q5f34ZIMuvCCFqx997bjLZrpdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:7a:d8:ae:e1:cc:80:80:df:15:6e:e0:1a:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3814b648dd5742025c3dda5eaa66491ffdb2e5d9
Validity
Not Before: Aug 4 07:01:19 2025 GMT
Not After : Aug 5 07:01:19 2025 GMT
Subject: CN=ed779b84b4b91e72e9c07dfa28c994c89ef6af54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:b9:45:a7:4d:90:83:40:e1:96:02:72:d6:
d6:d7:8b:87:50:d0:a8:15:fd:14:22:ff:99:1b:b6:
86:65:d7:81:fc:a9:5d:0d:f7:98:79:cf:98:d0:cb:
33:66:ee:a8:dc:ff:95:d1:78:22:14:64:1a:c3:b7:
1c:a6:12:4b:b2:fd:52:21:be:97:00:b0:df:7c:df:
d0:5d:e7:31:97:b5:ff:18:85:09:bb:b3:0f:c2:cc:
92:8c:37:77:ec:0d:fb:05:c2:6c:31:a2:08:47:4c:
ce:5c:4b:92:b7:ed:42:e6:55:05:72:04:54:60:c8:
25:35:54:23:f0:21:0e:f0:46:58:a0:ad:68:d4:6b:
23:57:76:14:8b:71:00:18:8b:c5:0a:ef:a7:5a:11:
74:b4:66:84:0b:76:25:7f:19:19:29:ab:98:4d:d2:
21:3c:1f:7e:49:02:ae:44:cc:e3:36:3d:d3:ae:a0:
1b:af:2a:f8:43:39:c9:35:31:ee:6c:b0:cb:79:a7:
2d:58:f2:7d:68:f1:46:26:f7:2d:fa:09:3d:96:1c:
50:15:c9:e4:69:c7:7f:cb:2e:93:16:71:62:08:2a:
8a:57:46:f9:1c:8c:0a:57:61:74:70:e8:4a:78:b3:
ca:70:39:45:95:24:6b:d6:eb:af:ef:a5:71:c6:14:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:9B:84:B4:B9:1E:72:E9:C0:7D:FA:28:C9:94:C8:9E:F6:AF:54
X509v3 Authority Key Identifier:
keyid:38:14:B6:48:DD:57:42:02:5C:3D:DA:5E:AA:66:49:1F:FD:B2:E5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBS2SN1XQgJcPdpeqmZJH_2y5dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/12df2d-94f1-4d10-94a4-1f8368801fdc/1/OBS2SN1XQgJcPdpeqmZJH_2y5dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:1e:b3:01:7d:41:0d:24:ae:a2:76:3d:56:4e:b7:7a:c4:
de:fd:b7:53:2d:43:0e:ee:1e:93:35:ef:5f:90:88:9b:8e:59:
dc:1a:f5:a1:20:8b:0b:a6:75:1e:97:8f:22:26:e3:0c:81:d6:
9b:a5:6d:08:ed:56:73:7a:65:6f:c4:93:c7:2e:eb:fe:d0:27:
1f:10:59:b9:7f:bc:30:4c:7b:7f:4b:db:60:fe:6d:7f:45:38:
26:ad:1f:87:13:bb:6d:37:6c:a9:f9:10:80:9c:0e:b8:94:5c:
75:63:ec:3e:01:9f:8a:dd:ed:3a:77:2b:6d:cb:76:92:5b:a4:
d6:52:4c:e8:28:1f:b7:73:a5:52:af:49:b9:0a:5d:67:d2:20:
6c:a3:30:d3:0f:35:b1:c5:ca:af:a5:77:74:ad:d2:c2:2c:67:
33:99:b5:1a:ed:e2:19:cf:8c:db:36:70:d3:a2:4c:45:ab:df:
1f:53:fb:cb:ef:35:e6:df:1a:43:d3:c9:4f:85:dc:98:de:44:
ca:4e:ae:bf:59:fc:35:5f:98:7a:f7:81:9f:d3:02:1b:88:02:
af:23:05:4e:2d:75:11:72:19:8e:c2:78:f9:50:b9:6c:7c:ec:
1e:18:d8:e1:96:82:9a:68:dd:3a:ce:d5:70:ae:58:c7:76:1a:
b0:c8:89:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4nrYruHMgIDfFW7gGunOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MTRiNjQ4ZGQ1NzQyMDI1YzNkZGE1ZWFhNjY0OTFmZmRi
MmU1ZDkwHhcNMjUwODA0MDcwMTE5WhcNMjUwODA1MDcwMTE5WjAzMTEwLwYDVQQD
EyhlZDc3OWI4NGI0YjkxZTcyZTljMDdkZmEyOGM5OTRjODllZjZhZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+5RadNkINA4ZYCctbW14uHUNCo
Ff0UIv+ZG7aGZdeB/KldDfeYec+Y0MszZu6o3P+V0XgiFGQaw7ccphJLsv1SIb6X
ALDffN/QXecxl7X/GIUJu7MPwsySjDd37A37BcJsMaIIR0zOXEuSt+1C5lUFcgRU
YMglNVQj8CEO8EZYoK1o1GsjV3YUi3EAGIvFCu+nWhF0tGaEC3YlfxkZKauYTdIh
PB9+SQKuRMzjNj3TrqAbryr4QznJNTHubLDLeactWPJ9aPFGJvct+gk9lhxQFcnk
acd/yy6TFnFiCCqKV0b5HIwKV2F0cOhKeLPKcDlFlSRr1uuv76VxxhRkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO13m4S0uR5y6cB9+ijJlMie9q9UMB8GA1UdIwQY
MBaAFDgUtkjdV0ICXD3aXqpmSR/9suXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQt
MWY4MzY4ODAxZmRjLzEvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8xMmRmMmQtOTRmMS00ZDEwLTk0YTQtMWY4MzY4ODAxZmRj
LzEvT0JTMlNOMVhRZ0pjUGRwZXFtWkpIXzJ5NWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedQeswF9
QQ0krqJ2PVZOt3rE3v23Uy1DDu4ekzXvX5CIm45Z3Br1oSCLC6Z1HpePIibjDIHW
m6VtCO1Wc3plb8STxy7r/tAnHxBZuX+8MEx7f0vbYP5tf0U4Jq0fhxO7bTdsqfkQ
gJwOuJRcdWPsPgGfit3tOncrbct2kluk1lJM6Cgft3OlUq9JuQpdZ9IgbKMw0w81
scXKr6V3dK3SwixnM5m1Gu3iGc+M2zZw06JMRavfH1P7y+815t8aQ9PJT4XcmN5E
yk6uv1n8NV+YeveBn9MCG4gCryMFTi11EXIZjsJ4+VC5bHzsHhjY4ZaCmmjdOs7V
cK5Yx3YasMiJug==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:38 2025 by rpki-client