Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: GQfrKSPliovrjkJBTJE6exBCyWHPzSt1lgSt9d1L8x0=
Subject key identifier: F3:D4:5C:F8:EB:3B:56:9B:19:86:18:73:EE:13:05:C8:89:3F:CE:5E
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 019A50E27C2D1B3E4D56D1283E3275155DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:00:11 +0000
Manifest this update: Tue 04 Nov 2025 22:00:11 +0000
Manifest next update: Wed 05 Nov 2025 22:00:11 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: dWeMlkCdZT+tKqq9yjhvAu6eyiaihjLyFNpLK7jplXs=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:7c:2d:1b:3e:4d:56:d1:28:3e:32:75:15:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Nov 4 22:00:11 2025 GMT
Not After : Nov 5 22:00:11 2025 GMT
Subject: CN=f3d45cf8eb3b569b19861873ee1305c8893fce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:53:b2:3a:b0:2d:95:dc:a4:c0:c8:83:04:
90:e6:bb:db:26:10:00:7a:5b:e4:b2:44:c5:06:dd:
3f:00:e7:83:90:0c:3e:4b:f5:cb:e2:8f:39:fc:81:
66:02:eb:c2:23:43:3f:9e:25:8c:7f:7b:20:da:9c:
ce:f4:7e:3e:50:8b:fc:32:e8:55:a7:8a:05:be:91:
3a:43:86:0a:1e:9c:90:05:04:88:05:de:fa:50:df:
8d:37:c4:28:66:7a:7a:15:ff:fa:1f:df:3b:6f:1c:
35:cd:2d:4e:8f:77:4e:00:1a:ff:bc:ee:b9:e9:0e:
3c:92:69:6f:b2:e2:bd:96:7c:71:43:82:3e:70:a5:
0b:6c:0f:64:84:90:79:d1:ff:25:3f:07:cf:12:92:
43:8f:cd:6d:ec:47:4d:d9:40:51:01:2a:4d:92:0c:
3d:53:ff:ff:1e:1f:d5:3e:54:9b:7c:f3:9a:45:94:
bb:d4:92:7d:90:cf:d0:4a:55:3f:ff:39:9f:9a:a6:
55:1a:96:b2:e5:51:30:c4:01:86:1c:29:3c:3b:07:
6e:d0:78:55:5c:af:f7:8b:fc:2b:63:9f:90:ba:54:
b1:e0:bc:d0:b9:31:3f:f2:a9:0a:57:76:67:57:c5:
d5:af:11:41:a5:b3:36:00:23:60:be:73:0e:c6:21:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D4:5C:F8:EB:3B:56:9B:19:86:18:73:EE:13:05:C8:89:3F:CE:5E
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:50:0d:f1:bf:34:97:37:51:5d:c5:1f:5a:a3:1a:2c:99:7a:
3c:a6:b7:15:e3:af:71:53:14:2f:74:12:7c:d7:4b:f7:c3:b0:
85:df:66:e2:95:c7:b1:2f:8c:cc:ae:c5:92:b5:aa:8f:71:66:
ac:d7:0d:7b:ca:61:e7:11:9e:92:98:06:10:7f:d8:82:0e:2d:
42:76:28:2b:73:1f:af:cb:a9:c4:92:d7:83:b9:c0:cd:d9:1e:
d5:15:2a:9f:2b:4a:22:9a:2f:d2:f5:a2:78:e2:46:96:94:73:
8b:f3:eb:69:5d:31:52:c2:a3:a8:39:70:4e:0e:bb:7e:19:12:
cb:91:a4:3e:dd:73:b7:bd:41:48:92:70:31:9f:89:1c:de:5e:
2a:89:14:31:1d:71:aa:b7:f7:3d:52:75:da:a0:cd:d7:d5:80:
d7:10:b3:06:4c:80:b9:b5:23:48:5c:21:f2:f0:aa:2b:61:4a:
1f:cc:8c:52:44:b7:87:ea:fd:c0:72:38:7a:af:b9:f8:85:0b:
72:eb:27:2f:15:0e:be:7f:1f:9b:c1:80:b8:4e:42:ae:e6:13:
8b:e4:52:fc:0b:13:bc:b2:41:61:5e:c6:41:60:8f:ad:50:6b:
e0:ca:ca:07:ad:08:2f:b7:e1:e9:60:81:0d:5f:8b:05:2a:9f:
b5:f9:10:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:37 2025 by rpki-client