Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
File: oBocfbuaFXGlv0kkqz_FBJMUX08.mft (raw, json)
Hash identifier: 45CDij1V1zojZPYzaBJHYTwvZio9LxaQ4w08WjR4wC0=
Subject key identifier: 23:98:2F:48:6F:33:7A:47:72:50:4F:B4:00:20:85:EF:DA:9F:22:62
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019A4C98720ED739906E9654EC16FC601AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
Manifest number: 0805
Signing time: Tue 04 Nov 2025 02:00:50 +0000
Manifest this update: Tue 04 Nov 2025 02:00:50 +0000
Manifest next update: Wed 05 Nov 2025 02:00:50 +0000
Files and hashes: 1: oBocfbuaFXGlv0kkqz_FBJMUX08.crl (hash: sbmKLD1QmjLA/pph6V9wm7TYsp2Jt2oBJwQqHd4Bc90=)
2: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (hash: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:72:0e:d7:39:90:6e:96:54:ec:16:fc:60:1a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Nov 4 02:00:50 2025 GMT
Not After : Nov 5 02:00:50 2025 GMT
Subject: CN=23982f486f337a4772504fb4002085efda9f2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:f6:01:65:1b:73:b9:27:6c:70:89:81:97:
8f:40:88:12:bb:a9:4e:f2:c1:de:61:f4:71:d6:6c:
2d:e3:2f:60:62:c1:dd:3d:07:2b:bb:6c:d5:21:8d:
9e:e3:98:5a:89:ec:60:17:24:5f:51:c2:ee:15:67:
d3:b3:4e:3e:9a:15:8d:b3:2b:0d:6a:6f:84:aa:b4:
4a:da:4d:1f:bd:e2:7f:46:d0:76:7a:27:62:b7:e9:
55:ef:a0:34:b0:6f:12:d0:54:9e:68:37:6a:2d:fa:
ac:e9:9f:0c:f8:41:90:bb:bd:6e:8d:13:e8:c5:a9:
74:a4:71:1a:59:90:74:9c:b9:36:8a:79:cd:7e:28:
b9:7d:99:a2:17:4d:2d:14:36:6f:6b:81:6d:f3:d2:
d6:9a:a4:0a:74:ed:2d:1e:ad:ab:dc:b1:ce:39:e5:
ea:2b:3c:86:4e:37:ea:15:97:fd:e0:c1:97:12:89:
94:57:51:78:d8:77:b0:6e:69:be:ec:8f:f4:7c:bd:
3b:cf:c6:40:02:68:f3:71:68:7a:20:e2:cf:9f:d1:
05:d3:d7:ec:f4:4d:d4:f5:8f:6e:52:0a:bb:ca:01:
4c:2f:b2:82:17:55:c9:0d:38:d3:7d:4c:16:dc:b9:
fd:27:83:01:fc:2f:27:fb:a9:6b:a7:2a:01:19:a5:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:2F:48:6F:33:7A:47:72:50:4F:B4:00:20:85:EF:DA:9F:22:62
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0d:cf:d2:ab:da:47:8c:79:e4:bc:ef:96:51:2c:a7:0a:9f:
62:51:67:fc:e7:5b:ea:29:39:0c:1f:b7:4a:a7:10:8b:71:6b:
3e:d1:b0:b5:60:5b:99:cb:a7:58:1f:51:50:0b:19:09:a9:d5:
3c:81:c9:74:52:9b:4f:d1:0f:06:59:a3:90:2c:ea:d3:04:04:
0a:1a:9d:8d:6d:d1:40:e8:9f:1d:4f:9d:88:56:d4:80:62:7a:
ae:96:5c:8a:8e:f8:52:e3:f3:c6:71:f3:7a:60:dc:0c:b3:d2:
8b:78:68:6e:5d:d0:0f:15:af:6c:4e:07:29:ca:f0:5e:07:80:
6e:f1:05:6f:03:0e:c7:b5:e1:75:b2:f7:fd:a3:79:51:7e:77:
fd:40:50:6f:64:5b:f6:e0:ee:23:e3:ef:87:00:16:a7:57:a3:
5f:cf:75:38:39:8a:97:d0:11:6b:f1:b5:d2:eb:14:3b:9d:9b:
1d:3e:af:dd:db:e0:2f:95:8e:75:4e:09:a8:17:34:e9:48:0c:
3f:e7:e2:95:fb:e3:0c:cd:a9:90:ee:9c:87:5f:1e:86:1d:ae:
83:b9:b4:36:95:43:71:5f:7a:c4:27:b4:0c:26:af:7d:36:d7:
46:0b:1c:84:72:4b:97:e8:5e:d0:c1:d9:c3:3f:ea:07:c8:24:
ab:31:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:33 2025 by rpki-client