Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: 5fii8LyOkTykbtcOR4IKsmLqSCEGG3LKcPtodx+VGl4=
Subject key identifier: 51:E2:18:B9:AB:4E:54:EA:C4:9B:4C:8F:F9:8E:38:FF:16:B1:55:EF
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 01989825433C33E7C6F2B1BE4B69C9CFA871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 10BF
Signing time: Mon 11 Aug 2025 08:00:35 +0000
Manifest this update: Mon 11 Aug 2025 08:00:35 +0000
Manifest next update: Tue 12 Aug 2025 08:00:35 +0000
Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: pZZ6/52/MLg6yAkCrCHKx22OLjE1MPFsmXjnjmyeyl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:43:3c:33:e7:c6:f2:b1:be:4b:69:c9:cf:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Aug 11 08:00:35 2025 GMT
Not After : Aug 12 08:00:35 2025 GMT
Subject: CN=51e218b9ab4e54eac49b4c8ff98e38ff16b155ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:6a:9b:b3:b1:3c:5a:35:4b:e4:68:3a:f9:
08:41:2d:74:e5:0d:e1:75:2e:8c:98:ec:5e:86:bc:
1a:71:03:39:c8:22:23:97:c9:fb:b1:9f:0f:c3:16:
3c:e3:cd:2b:3f:87:9a:24:c5:65:40:52:3a:34:ab:
ae:88:f5:95:8f:33:22:36:e4:44:cf:b8:b0:2c:df:
9f:4c:1b:90:57:7c:7e:1c:3e:37:fd:dc:e5:b8:c1:
ba:f6:a9:9c:02:eb:ec:98:17:47:dd:41:8d:6d:a5:
75:c2:84:39:50:e4:70:41:16:83:36:78:f3:c5:68:
7e:08:8d:fd:26:20:79:a0:a1:e2:c8:e4:4d:1d:d9:
a7:57:01:45:a7:5e:dd:00:41:5f:3f:e2:25:b1:aa:
47:f0:c3:ff:73:f6:29:42:f0:38:78:77:11:c6:d5:
0b:62:16:aa:30:e4:d4:d2:14:54:61:b8:e2:54:e2:
b1:7c:9b:12:13:0c:2b:28:ad:2a:10:1d:2b:35:73:
d9:23:ab:4b:08:5e:d7:6e:44:4c:b3:bb:9f:0b:a6:
56:c9:8e:4d:27:79:2d:59:e8:58:c5:80:52:08:4b:
55:b8:01:ec:f2:bf:9b:98:3f:d9:52:16:47:4d:89:
b8:01:7a:e1:16:d7:92:c0:27:12:4b:9d:59:bb:18:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E2:18:B9:AB:4E:54:EA:C4:9B:4C:8F:F9:8E:38:FF:16:B1:55:EF
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a9:86:be:a8:9a:8a:c8:13:f8:b0:7a:87:59:cb:bc:de:b0:
14:b4:cc:96:ad:d8:c7:5d:f3:77:e2:da:59:4c:06:6c:1a:72:
e9:b6:5d:2d:2f:f4:bd:b8:a5:49:0f:a3:c1:54:4d:86:1c:98:
b1:c5:a8:74:6e:a1:e9:45:60:94:d3:42:60:3a:27:da:df:7c:
96:d0:6a:d8:22:f0:0b:66:a5:b0:9e:c4:8c:04:91:46:c9:50:
93:15:6e:02:64:c7:3d:fa:da:7e:24:28:05:90:d5:c1:d9:f2:
df:f5:e5:af:18:06:c5:b4:b0:0e:bc:b0:0c:f3:fd:a2:10:a8:
96:ba:80:d2:88:b5:db:81:29:a3:55:fd:4d:85:be:9c:05:ab:
f8:a5:df:3d:06:41:16:bd:af:11:b7:0e:7d:99:e4:ac:17:89:
9d:3f:3e:bf:ec:e8:20:c9:4b:4e:ab:ce:0c:4f:26:e4:70:1a:
79:b6:90:57:68:14:0e:bf:46:59:8b:e2:57:8a:f2:28:08:14:
03:2e:9c:f1:a3:a0:ef:0f:bb:d3:b7:e4:d4:c9:e1:e4:c4:cb:
5d:47:27:b1:96:86:20:c7:ce:3e:c8:2c:29:6e:97:fa:8d:9c:
49:10:91:8e:d6:24:78:47:6a:74:18:43:61:c9:99:37:d2:70:
ee:05:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:17 2025 by rpki-client