
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File: OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier: X6MdveSJ5YPLBf4iNmaMqFFbrisz90UJVsdF6jW+CsU=
Subject key identifier: 5A:88:75:84:7F:74:94:C3:63:A9:20:30:D4:BA:75:F3:ED:89:52:06
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 019849D2DA6F929755FC3906E4D4AB8FC04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:11 +0000
Manifest this update: Sun 27 Jul 2025 03:00:11 +0000
Manifest next update: Mon 28 Jul 2025 03:00:11 +0000
Files and hashes: 1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: Q4A4A64XGEUDPR5QIAqGxVifoKbCz2dJDIyTx/89Dig=)
2: RsGZdVH4KWGZ4OCvnGaMXWv4oaQ.roa (hash: fuepCE8j+3Iy2fKvIdO+nibeCW6A9px2SfnOVg5ddX0=)
3: fYkfiykKnS8ZeTHGRB-UgiJB3G8.roa (hash: r/260Im8uYUydEHgzIf9ZOg2UlQ6MQMr6ct6EbwfvX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:da:6f:92:97:55:fc:39:06:e4:d4:ab:8f:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: Jul 27 03:00:11 2025 GMT
Not After : Jul 28 03:00:11 2025 GMT
Subject: CN=5a8875847f7494c363a92030d4ba75f3ed895206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:09:bc:39:b8:cc:b8:96:c3:de:a3:93:73:
a3:2b:78:77:10:de:fe:fb:74:15:b6:c1:e7:b9:46:
b7:9f:ad:42:e4:2b:76:66:c1:c1:61:fd:47:ab:40:
0b:c8:6a:ed:20:6b:92:14:d2:29:78:a0:e1:31:b4:
6b:a1:e9:ec:d8:24:cb:5c:29:ee:55:23:19:8c:c7:
d2:c9:23:bd:55:a1:52:12:98:28:b2:33:21:41:9d:
79:b8:51:d1:db:38:67:f8:34:d1:2b:3f:ad:b8:c2:
66:fa:ad:bc:3d:f1:1a:fa:39:28:24:96:63:eb:9e:
91:ee:0e:c0:c5:8c:be:63:d3:ca:57:ff:41:cc:30:
61:0d:8a:71:30:b8:48:3b:9e:53:53:3c:f1:08:76:
86:ff:fa:b6:72:74:72:f8:94:7b:ae:74:f7:b5:d1:
a2:29:e8:6f:81:d6:f4:05:4e:67:d2:aa:35:9d:c7:
04:35:1c:c9:2c:5d:2a:f6:d2:f6:1b:b0:c7:9a:21:
e6:06:04:d6:ab:18:0b:0f:55:0d:56:03:6a:69:75:
b1:32:0f:4d:b3:85:e5:98:15:8b:65:4a:97:7b:44:
9a:f1:35:c2:ad:9b:e8:f7:b3:df:06:61:70:ac:80:
4c:7f:ae:66:c8:d8:ac:42:b6:78:0a:a5:b8:c7:4a:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:75:84:7F:74:94:C3:63:A9:20:30:D4:BA:75:F3:ED:89:52:06
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:66:f5:71:55:7e:19:37:11:6b:a4:99:0d:6a:8b:3e:a2:93:
36:04:a8:42:ce:e0:e9:95:3d:68:84:fd:83:3d:13:88:8c:c8:
4c:56:ec:9d:f2:8d:59:90:9c:f3:78:2f:8f:86:27:7b:c2:f5:
c1:0b:38:63:c7:5a:36:b9:75:e6:81:60:d9:a6:ea:a1:ab:88:
af:ff:9e:72:02:95:00:ee:b8:ae:10:f8:4d:5f:a6:df:43:b5:
1d:06:ce:17:96:49:2a:88:92:0e:45:15:3a:3d:ea:4f:90:da:
bb:b9:1e:a5:3a:ed:1a:3f:96:17:e5:4c:f7:9e:cb:94:58:4f:
56:23:80:6b:18:40:62:3c:17:47:68:87:4d:74:c6:68:67:b2:
4b:4c:21:b2:b1:15:9f:64:aa:c5:17:66:a7:5e:e2:c1:08:b8:
92:73:c7:92:ca:8f:ae:05:93:e5:cf:a3:af:e6:6a:63:e2:3a:
30:8b:93:da:cb:74:ab:2c:af:b9:6e:dc:de:61:76:27:84:aa:
55:6c:4d:a9:7e:a9:22:1a:05:a4:bb:98:98:48:1a:bf:17:5d:
67:28:80:53:d0:fb:1e:dc:82:08:40:ec:fe:ca:2c:d7:2b:57:
4b:3d:11:19:8b:87:05:52:2a:2f:60:03:be:3a:15:1a:6b:f8:
60:fc:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:47:50 2025 by rpki-client