Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: zRhsGIET8pN/EM5aoU/plPEbX5s2Zc4JpqvwED02O04=
Subject key identifier: 1E:FC:AB:7D:4E:B4:F9:FB:F7:A1:AB:04:F9:D3:97:D7:90:12:C5:EA
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019A4EF4BC04EEAC96C7DBA93E54980116CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 13AD
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: q+CcH9ieqsi/h9HqCx9skWBsJb9ABGFCmsY03rE4Rqc=)
2: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (hash: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bc:04:ee:ac:96:c7:db:a9:3e:54:98:01:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=1efcab7d4eb4f9fbf7a1ab04f9d397d79012c5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:89:f6:9d:95:8b:a4:47:6a:83:4f:07:ce:
26:18:22:1a:d6:b0:94:4f:d1:d8:dd:32:af:33:37:
f1:02:81:81:93:09:07:44:17:7f:7b:6c:85:67:91:
e0:a1:f9:d6:a5:ad:53:18:c0:1a:75:0c:7e:79:18:
52:d9:99:c4:d2:6f:fe:23:6e:60:9e:6b:18:30:1c:
d5:25:2e:8f:c9:1f:dd:2a:b5:9f:f9:ef:06:cc:b2:
70:df:d3:99:74:e9:91:e9:b4:2e:28:b1:95:45:78:
ef:01:de:3d:b0:6f:f4:40:1d:ea:76:c9:2d:45:b8:
3f:19:45:4e:f0:3a:99:b3:d3:cc:d7:ce:54:c3:12:
4b:e7:fa:31:0d:d6:72:a1:4c:72:84:05:0c:5d:10:
f3:28:12:32:e1:a7:4e:1f:85:73:d1:7f:1f:cf:02:
8d:b8:b3:61:cf:9f:38:84:2e:3f:a8:b1:96:6e:01:
6c:b6:66:6d:a2:d8:3e:e0:98:81:ec:1d:2e:ab:cf:
1e:f4:40:7e:a6:c3:d5:84:24:e5:f6:58:ba:06:93:
8c:e5:25:47:b9:a4:3c:00:f6:9b:81:6a:40:30:15:
06:e7:af:51:28:41:b5:a5:fb:f2:03:40:6f:fd:e9:
3d:19:d8:27:09:76:33:ae:64:72:42:29:f8:c4:85:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:AB:7D:4E:B4:F9:FB:F7:A1:AB:04:F9:D3:97:D7:90:12:C5:EA
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fe:9e:e9:8a:c6:cc:62:77:e1:f8:09:7d:b1:dc:67:28:e8:
11:23:e4:b4:b6:93:44:3b:20:21:ca:52:81:ce:b7:9f:93:88:
37:b2:68:9c:fd:c6:a5:07:c8:ec:ce:a3:cb:88:8b:19:e2:c9:
32:d9:e3:50:40:5e:4b:01:19:a9:41:4c:6c:0d:80:86:73:d6:
1e:dd:9e:2d:51:5a:ce:f5:68:02:1a:03:25:04:c3:48:8e:8b:
bd:06:c3:44:0b:54:5d:90:e5:46:ce:49:70:58:4c:6f:30:02:
e6:d1:6b:8c:62:cc:ea:cd:90:e1:c5:3b:c9:3e:d5:6d:03:b3:
7e:32:bf:a2:05:85:9a:b7:a1:26:07:d3:16:6b:56:a1:5e:7e:
15:50:8f:b6:3d:e3:bd:d5:87:1f:fc:54:7a:45:1b:66:46:b5:
6b:60:e3:4f:7b:9d:50:91:33:38:4d:dc:f1:df:e1:46:7d:09:
35:fa:7b:61:e2:e9:be:6f:e2:c9:60:b6:c1:5c:36:1b:ed:b8:
c6:0e:9a:3d:b4:d3:56:0c:53:61:e6:ea:9b:63:d8:2c:02:08:
46:40:2b:f1:5d:31:a8:ca:db:cd:a2:fa:5b:dc:59:aa:2e:f8:
95:0a:fe:16:a8:8e:f6:3f:f7:d3:64:09:ff:9a:79:25:b4:7d:
7c:ed:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:54 2025 by rpki-client