Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: ego95FnZD/bxcRdSWEtAX5IltQtaXU9I3yle344Rys8=
Subject key identifier: 74:57:4C:62:2C:4B:9C:BE:80:24:F9:4A:E1:84:59:E8:8C:19:1B:93
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 019A533F270D7BE4657BE6CDED14898BE885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0FD5
Signing time: Wed 05 Nov 2025 09:00:38 +0000
Manifest this update: Wed 05 Nov 2025 09:00:38 +0000
Manifest next update: Thu 06 Nov 2025 09:00:38 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: /ZuHwr8vnarTzDk1Tr3K2yNZMXgQKXeoW257Ugp21J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:27:0d:7b:e4:65:7b:e6:cd:ed:14:89:8b:e8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Nov 5 09:00:38 2025 GMT
Not After : Nov 6 09:00:38 2025 GMT
Subject: CN=74574c622c4b9cbe8024f94ae18459e88c191b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:17:ea:60:eb:de:0f:8e:54:d5:fe:a0:b1:
ee:91:88:e7:f0:3a:b0:5c:61:21:aa:d7:55:ba:3d:
15:c6:95:30:30:9d:b8:ce:54:29:66:b8:b9:04:52:
35:08:f7:84:b0:51:93:f4:94:81:fe:c4:dc:82:c7:
60:8e:ef:4f:f2:73:cc:6f:f4:02:c1:65:a3:5f:78:
d0:db:b3:a4:76:18:e0:65:fd:4e:c8:df:61:72:22:
d5:5b:05:72:16:7b:6f:09:1d:f0:c6:e4:39:c4:a2:
d2:79:07:66:ec:46:33:b0:5a:c1:ef:59:49:05:ed:
0f:f5:36:ce:59:e2:f7:61:d9:8d:74:00:1a:63:3e:
3c:44:a4:38:54:b7:39:b7:e2:c1:39:dc:24:80:9d:
ca:53:ae:1a:4f:3f:96:f6:2b:19:f4:5c:0c:c3:1f:
d5:1b:1f:80:21:82:03:fb:fc:d9:4c:3e:07:87:39:
70:73:8b:2d:0e:d5:1a:9b:5b:53:a8:eb:0b:a7:84:
29:92:78:ac:f1:1f:b5:f6:88:d7:0f:23:97:c8:bd:
8e:43:3e:e7:7c:4c:23:b4:42:8c:59:42:92:12:0b:
f9:38:48:1a:40:7e:d2:f8:05:a4:3b:5d:96:f1:05:
52:25:a9:b1:75:d3:e9:02:a5:6e:68:a8:e7:a4:65:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:57:4C:62:2C:4B:9C:BE:80:24:F9:4A:E1:84:59:E8:8C:19:1B:93
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:e3:f2:a7:94:08:87:66:dd:66:2a:d3:cb:86:ec:5a:69:
0c:e6:fb:29:fd:37:14:55:dd:bc:15:62:60:12:9f:d5:23:71:
20:47:e9:48:e1:6f:4e:db:ce:48:72:62:80:15:a9:91:4a:2f:
94:6d:fd:f0:93:85:fb:6b:18:95:4e:72:aa:88:9b:79:1b:68:
81:2f:62:81:9b:30:a3:87:14:48:88:c8:96:b5:67:f7:d2:e8:
1f:d9:94:a5:3b:73:c1:c1:aa:f2:2f:6f:33:3c:d0:86:6e:69:
d8:b7:5b:9c:c1:60:aa:77:cc:10:19:e8:90:a6:ff:e6:3c:67:
2c:dd:d7:2d:b0:61:1d:10:ee:57:4b:7f:60:02:f4:66:71:53:
98:f6:fd:0c:e2:54:62:c5:c5:93:dc:5d:89:3a:2e:65:c8:c3:
b2:13:8b:23:1e:fa:b9:dc:9d:cd:cb:84:2f:df:b9:67:5d:09:
38:74:33:97:76:5e:2a:20:4f:38:80:14:d0:6d:be:9a:10:d0:
bb:c0:67:04:35:ad:fa:b9:9f:9d:19:d4:cd:2a:49:e1:38:7d:
14:b6:fd:eb:39:81:47:3e:af:e5:72:08:9f:4f:9a:7f:0b:8a:
6b:8f:a4:e0:68:07:5d:f4:5a:15:bf:48:bb:ec:22:6c:5d:9c:
c2:87:ee:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPycNe+Rle+bN7RSJi+iFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjcxZWI4ZGYxNzFlNjQyZjFiMmI5MDQxOTAwMWYxZmM0
NDVlNGQwHhcNMjUxMTA1MDkwMDM4WhcNMjUxMTA2MDkwMDM4WjAzMTEwLwYDVQQD
Eyg3NDU3NGM2MjJjNGI5Y2JlODAyNGY5NGFlMTg0NTllODhjMTkxYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+wX6mDr3g+OVNX+oLHukYjn8Dqw
XGEhqtdVuj0VxpUwMJ24zlQpZri5BFI1CPeEsFGT9JSB/sTcgsdgju9P8nPMb/QC
wWWjX3jQ27OkdhjgZf1OyN9hciLVWwVyFntvCR3wxuQ5xKLSeQdm7EYzsFrB71lJ
Be0P9TbOWeL3YdmNdAAaYz48RKQ4VLc5t+LBOdwkgJ3KU64aTz+W9isZ9FwMwx/V
Gx+AIYID+/zZTD4Hhzlwc4stDtUam1tTqOsLp4Qpknis8R+19ojXDyOXyL2OQz7n
fEwjtEKMWUKSEgv5OEgaQH7S+AWkO12W8QVSJamxddPpAqVuaKjnpGXXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRXTGIsS5y+gCT5SuGEWeiMGRuTMB8GA1UdIwQY
MBaAFKG3HrjfFx5kLxsrkEGQAfH8RF5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYt
MDY3MmVhMDQ0MGJiLzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mMDg4YmQtNTAyOS00OTAzLTk2MTYtMDY3MmVhMDQ0MGJi
LzEvb2JjZXVOOFhIbVF2R3l1UVFaQUI4ZnhFWGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvbj8qeU
CIdm3WYq08uG7FppDOb7Kf03FFXdvBViYBKf1SNxIEfpSOFvTtvOSHJigBWpkUov
lG398JOF+2sYlU5yqoibeRtogS9igZswo4cUSIjIlrVn99LoH9mUpTtzwcGq8i9v
MzzQhm5p2LdbnMFgqnfMEBnokKb/5jxnLN3XLbBhHRDuV0t/YAL0ZnFTmPb9DOJU
YsXFk9xdiTouZcjDshOLIx76udydzcuEL9+5Z10JOHQzl3ZeKiBPOIAU0G2+mhDQ
u8BnBDWt+rmfnRnUzSpJ4Th9FLb96zmBRz6v5XIIn0+afwuKa4+k4GgHXfRaFb9I
u+wibF2cwofuIw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:25 2025 by rpki-client