Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
File: Obi08Elz83zGn7fCNGj5U_FJQg4.mft (raw, json)
Hash identifier: GXkSlcU3HcG0XK+4xf1Sb68rnN/YURmvKFX69OyGPQQ=
Subject key identifier: 60:98:BC:E2:54:6C:E5:4E:D8:D6:EB:CD:DA:D9:23:3B:A7:C9:06:E2
Authority key identifier: 39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
Certificate issuer: /CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Certificate serial: 019A4F628A00DA40A08F8CBCBEEB92778BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: K5dYt7lb9gS6Y4bTS8duva31gvM.roa (hash: JfUFTyGmQsKMLzEfnb5KXENtjRP1+B6pBuw/0roQoKU=)
2: Obi08Elz83zGn7fCNGj5U_FJQg4.crl (hash: PR7vd2HARoGKFtw14chUYewRZTjUdZdKJnEHp8ZDLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8a:00:da:40:a0:8f:8c:bc:be:eb:92:77:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b8b4f04973f37cc69fb7c23468f953f149420e
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=6098bce2546ce54ed8d6ebcddad9233ba7c906e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:44:3e:11:ea:8d:50:13:9c:97:84:de:a9:
63:cb:04:e9:4b:83:17:bc:6f:70:73:45:20:86:15:
0f:15:60:e1:30:e9:5d:29:ee:28:b2:ad:55:95:30:
58:29:1a:4f:aa:50:9d:59:e1:6a:bf:48:82:eb:54:
a8:45:5d:0f:bc:cd:d5:9e:2b:4b:c7:e2:85:d1:43:
e7:b0:f6:c2:9d:81:4f:11:8c:86:f5:ff:2b:2b:3b:
c5:f5:46:84:0d:19:d1:fc:2c:13:8d:34:36:94:e4:
eb:af:fb:99:a6:58:bd:fb:78:ba:28:33:79:3a:cb:
ce:8a:be:24:24:32:ad:e6:60:ec:8d:a8:d6:be:a2:
07:ba:57:79:0e:a9:38:8d:ac:4e:3a:b9:94:c9:83:
3c:65:02:1d:8d:da:1e:4c:3c:92:1b:49:49:4b:5c:
93:17:98:3c:81:7e:7d:52:8c:37:c8:0c:6a:38:e7:
49:53:06:c7:27:f9:82:01:28:ea:b6:86:05:84:d0:
b0:3a:41:96:b8:98:ce:c6:81:35:df:08:39:ba:b1:
11:7d:9f:a4:69:eb:d5:0a:79:1a:54:a4:84:5e:44:
2e:eb:6c:ee:0a:94:7e:79:2d:1a:d6:15:e0:5a:a7:
f8:3e:fb:6d:85:86:d0:06:45:0b:27:ea:d2:26:a1:
99:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:BC:E2:54:6C:E5:4E:D8:D6:EB:CD:DA:D9:23:3B:A7:C9:06:E2
X509v3 Authority Key Identifier:
keyid:39:B8:B4:F0:49:73:F3:7C:C6:9F:B7:C2:34:68:F9:53:F1:49:42:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Obi08Elz83zGn7fCNGj5U_FJQg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8acc4b-e0a2-4d21-b864-990307d203c8/1/Obi08Elz83zGn7fCNGj5U_FJQg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:64:e8:e0:a9:6e:cf:86:da:94:ac:9e:e1:d5:50:c2:72:
0f:9e:7f:cd:c1:02:6e:e2:0f:a4:a5:14:b9:d7:66:9b:6c:5f:
b2:fc:4c:9a:6f:ba:c9:60:97:7c:21:44:78:4f:b5:b5:0d:d4:
6e:8d:95:9f:b1:c4:dc:44:db:eb:9c:ce:9e:7b:f7:33:79:75:
ce:71:40:c5:de:a4:64:31:5e:c3:cc:76:84:70:0f:a6:d7:1c:
9f:b0:97:98:69:7b:e8:85:6e:68:6b:a9:b7:2a:68:f7:72:56:
5b:f5:71:40:a1:76:80:b8:15:9e:38:42:95:05:04:e0:50:75:
21:fc:43:8b:8d:42:10:70:8d:91:ac:ff:3f:e8:75:50:9f:ed:
3d:14:67:68:f6:41:10:32:67:18:e7:3a:2d:cd:6a:d0:d3:4d:
51:17:a9:2d:55:ad:e7:a1:f1:fb:24:07:65:21:bf:af:88:08:
3f:d0:ee:42:48:01:30:9f:03:6a:55:99:71:2d:f9:2c:7a:b0:
18:72:b4:24:42:d2:3b:7c:29:02:71:0e:77:e3:ac:53:2d:9b:
d2:76:c2:b1:6a:98:45:e3:01:48:24:4b:b3:ab:0c:d5:a2:05:
fc:c5:08:7b:e9:41:e3:2f:a9:c5:ce:3d:13:09:0a:45:a1:b3:
6c:00:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:25 2025 by rpki-client