Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: m8gHQ1JSQFp6JzXoqXgoehJQipE5VxbgflfLca8bOFE=
Subject key identifier: 4B:74:90:47:9F:7B:22:EE:FC:86:4A:20:A9:78:A5:3E:3D:3F:65:29
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 019A4E862C293661BBC2386BCC49BBAAF275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 11A2
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: JteO8t6S0gc38MWaDxlxRdgFTVeKHzexuIMYiFIxPVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2c:29:36:61:bb:c2:38:6b:cc:49:bb:aa:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=4b7490479f7b22eefc864a20a978a53e3d3f6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:96:e7:e5:d8:cf:d6:86:c1:c4:3f:06:91:
4e:e5:b5:0c:83:a6:75:cb:a1:5f:23:25:23:ed:2e:
cc:e1:fb:8a:ec:85:65:d0:47:d4:5e:85:ca:fc:b6:
bb:72:a2:62:98:e0:7b:ef:c7:52:2f:76:52:e6:70:
fc:21:ac:e8:65:97:18:5f:c2:33:1e:9a:2a:ba:5d:
23:17:88:af:1c:98:36:11:ef:8f:54:ec:ef:f5:0d:
64:b2:d4:ab:b6:72:64:5e:32:31:96:21:3d:8b:f9:
7b:ee:27:39:e1:1a:0c:fd:6f:09:60:2c:db:41:cc:
8c:ae:c3:a2:97:69:2a:f8:54:49:b5:b0:2c:d8:55:
e8:5c:4a:72:ef:ac:af:fa:63:ba:1b:4f:ad:a4:01:
9b:7a:d1:0f:03:61:c4:a6:14:84:ac:af:3a:4a:7d:
5b:a0:15:5a:64:2f:e1:91:5f:83:55:79:c8:98:99:
e2:5e:70:37:42:b1:26:53:a8:64:76:af:be:ff:61:
23:83:a8:94:79:b2:e7:1a:88:fc:01:3d:a5:e7:cd:
54:a1:71:ac:e5:3e:cf:22:3c:c4:78:d2:03:11:a4:
0e:62:ba:d4:43:5e:df:9f:09:4e:cb:ed:6e:6b:d5:
1b:02:97:07:bc:b1:89:91:b0:28:6d:8c:9a:93:7c:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:90:47:9F:7B:22:EE:FC:86:4A:20:A9:78:A5:3E:3D:3F:65:29
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:b9:3b:99:6c:eb:cb:0b:51:b9:e5:18:ae:9a:30:44:db:18:
3d:f2:87:09:dc:9d:84:eb:04:ed:a6:b4:cb:8a:c9:d4:09:97:
c7:4f:52:ce:e0:0d:2c:cd:b0:1d:e6:b5:09:43:52:6e:21:96:
61:58:d8:51:08:ad:ee:3f:fb:52:74:98:2b:70:28:86:29:25:
7a:ea:4c:61:9f:8b:c4:6b:c7:ef:53:81:be:51:5e:cb:a4:b1:
b4:f5:03:b5:13:7b:1b:1a:97:61:be:77:0c:61:8b:dd:f6:19:
de:e0:2a:79:5b:28:af:bd:e7:c7:56:34:16:8f:db:7c:5e:9b:
db:3a:b5:b4:46:bc:a5:09:7b:ee:97:0a:e4:66:41:fd:72:d1:
ea:1d:b2:b5:12:a1:f6:51:fd:5a:6b:ef:e1:f4:b6:ca:c1:a0:
30:60:64:05:7f:70:ae:4e:3b:a4:60:92:5d:c2:4f:a7:8b:82:
36:bc:78:cd:88:65:2a:0b:9a:9a:b1:d7:5b:d9:f0:45:c6:69:
c3:bf:24:7c:72:eb:b2:a2:10:1f:bb:72:f2:e7:d2:dd:4b:ed:
49:62:9e:bf:ba:25:f0:21:28:e5:03:13:a2:1c:b7:ee:c4:a0:
c9:33:d5:66:3f:bf:a1:51:07:b4:90:91:af:4f:a4:4f:69:da:
03:d0:f3:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhiwpNmG7wjhrzEm7qvJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjM5ZDgyNDQ3OWQ0ZGE3YjEyZjY1YzE1ZTVjNDI3MjVm
NTI2MGIwHhcNMjUxMTA0MTEwMDA3WhcNMjUxMTA1MTEwMDA3WjAzMTEwLwYDVQQD
Eyg0Yjc0OTA0NzlmN2IyMmVlZmM4NjRhMjBhOTc4YTUzZTNkM2Y2NTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEiW5+XYz9aGwcQ/BpFO5bUMg6Z1
y6FfIyUj7S7M4fuK7IVl0EfUXoXK/La7cqJimOB778dSL3ZS5nD8IazoZZcYX8Iz
Hpoqul0jF4ivHJg2Ee+PVOzv9Q1kstSrtnJkXjIxliE9i/l77ic54RoM/W8JYCzb
QcyMrsOil2kq+FRJtbAs2FXoXEpy76yv+mO6G0+tpAGbetEPA2HEphSErK86Sn1b
oBVaZC/hkV+DVXnImJniXnA3QrEmU6hkdq++/2Ejg6iUebLnGoj8AT2l581UoXGs
5T7PIjzEeNIDEaQOYrrUQ17fnwlOy+1ua9UbApcHvLGJkbAobYyak3whSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt0kEefeyLu/IZKIKl4pT49P2UpMB8GA1UdIwQY
MBaAFKGznYJEedTaexL2XBXlxCcl9SYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEt
MzFhOTY0ZjhhMzdmLzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEtMzFhOTY0ZjhhMzdm
LzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Lk7mWzr
ywtRueUYrpowRNsYPfKHCdydhOsE7aa0y4rJ1AmXx09SzuANLM2wHea1CUNSbiGW
YVjYUQit7j/7UnSYK3AohikleupMYZ+LxGvH71OBvlFey6SxtPUDtRN7GxqXYb53
DGGL3fYZ3uAqeVsor73nx1Y0Fo/bfF6b2zq1tEa8pQl77pcK5GZB/XLR6h2ytRKh
9lH9Wmvv4fS2ysGgMGBkBX9wrk47pGCSXcJPp4uCNrx4zYhlKguamrHXW9nwRcZp
w78kfHLrsqIQH7ty8ufS3UvtSWKev7ol8CEo5QMTohy37sSgyTPVZj+/oVEHtJCR
r0+kT2naA9DzpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:43 2025 by rpki-client