Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: LZI0/kkVm3Su/qyOcCydozsT7eccPIWhjzJTFhn0N9U=
Subject key identifier: C4:40:18:A3:F7:F8:3E:68:AC:38:9F:D9:B4:B9:9D:C4:9D:32:4E:84
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 019A522C42F36BB46FD9C1CA66E925F7A672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 10B0
Signing time: Wed 05 Nov 2025 04:00:23 +0000
Manifest this update: Wed 05 Nov 2025 04:00:23 +0000
Manifest next update: Thu 06 Nov 2025 04:00:23 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: OCoBGuylP+hcp8lgQJ3x3rXysSCVG+hb4aRw4MfsfRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:42:f3:6b:b4:6f:d9:c1:ca:66:e9:25:f7:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Nov 5 04:00:23 2025 GMT
Not After : Nov 6 04:00:23 2025 GMT
Subject: CN=c44018a3f7f83e68ac389fd9b4b99dc49d324e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:39:06:88:ea:87:53:4f:a4:69:67:3b:08:
3f:ec:3b:7a:3c:36:2a:44:78:de:6f:a6:87:e6:ad:
9d:40:68:cf:a9:ba:e7:45:0c:81:89:d2:ce:30:29:
4f:cb:ba:f3:48:89:b6:58:65:1d:2c:de:da:5a:69:
c1:90:4e:12:5f:40:48:09:41:c4:d3:a6:21:32:46:
f0:d2:0c:06:ff:f0:a3:ee:fa:c0:81:7f:ff:ab:2e:
d9:14:6e:fc:76:36:0c:a8:36:32:24:d3:22:49:41:
8d:b9:06:c7:44:97:83:14:0b:25:57:87:ba:4a:8c:
05:d4:b1:6e:58:02:ab:8a:94:44:12:35:e3:e1:84:
31:ed:ad:27:6f:0b:16:51:e4:35:d0:4a:0c:de:f0:
2d:9e:e3:ad:9f:13:01:cb:26:29:6e:73:cd:4b:92:
f9:e2:c3:c5:28:13:a0:2c:85:54:5b:cf:82:1e:f2:
d2:fb:91:7d:66:23:c1:f6:f8:25:08:66:c1:bf:6a:
ce:d9:60:8b:d3:75:7b:2b:08:4e:11:7a:c8:91:19:
ba:bb:0b:3c:cb:d6:15:82:60:22:55:c4:d5:1e:03:
b3:f9:52:92:7a:89:28:5b:78:54:16:08:18:40:a9:
73:0b:b0:6d:14:da:fa:12:ed:0c:2f:1e:fb:de:be:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:18:A3:F7:F8:3E:68:AC:38:9F:D9:B4:B9:9D:C4:9D:32:4E:84
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:90:6d:1c:48:ba:5c:58:a4:f7:08:8f:3b:ad:65:0a:eb:
23:44:27:a0:66:fd:38:81:8e:5a:a5:a3:c5:68:13:e5:a0:8a:
c5:a2:e6:02:73:46:f9:91:38:56:60:1c:f5:82:71:05:6e:7f:
c3:a8:2c:c3:29:a4:23:44:fd:92:db:87:f5:58:ef:82:0a:0e:
da:13:03:6d:55:f2:e4:4c:33:5c:b9:9c:eb:6d:c1:b7:f6:b4:
18:08:9f:6a:30:98:64:76:b6:c8:2d:75:04:52:b5:82:25:88:
a8:4f:0c:73:e9:d6:4c:b9:62:ad:df:2c:11:40:27:da:a7:07:
a9:07:3c:d5:71:5d:e0:a4:3b:02:9a:3a:a7:bb:0b:e7:df:b2:
a6:e9:3a:98:24:2d:53:bc:a7:d6:72:9e:14:90:1d:e5:36:01:
7d:bc:e6:c3:b6:cf:e4:41:c0:d0:56:ad:96:50:19:98:bf:3d:
34:f0:f4:a7:c8:e9:fe:2b:54:e6:47:6d:3b:68:94:89:13:a1:
32:b2:7a:f8:f6:68:83:a5:62:93:9e:e0:22:b7:e1:50:67:f8:
fd:c9:5f:97:20:08:78:dd:a5:cd:b6:c5:d5:53:59:43:21:7b:
19:14:3c:07:9c:b8:1f:c7:30:12:11:92:82:fd:b9:8c:20:45:
a7:17:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:20 2025 by rpki-client