Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: 91IJ88eUxS4rtP/ghA0Tm1JCUd5rYOh4e7Q1LGqp0u0=
Subject key identifier: 59:73:45:C4:B7:FD:A8:B1:C4:54:EF:31:CF:D1:87:58:28:DE:8C:0E
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 0198C9B85033625EA7B2200FF608BBC6A989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1643
Signing time: Wed 20 Aug 2025 23:02:36 +0000
Manifest this update: Wed 20 Aug 2025 23:02:36 +0000
Manifest next update: Thu 21 Aug 2025 23:02:36 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: RJrw/I7GjQ9931OUrCWGhIoYhaforcLHVZQoWBcS2lo=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:50:33:62:5e:a7:b2:20:0f:f6:08:bb:c6:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Aug 20 23:02:36 2025 GMT
Not After : Aug 21 23:02:36 2025 GMT
Subject: CN=597345c4b7fda8b1c454ef31cfd1875828de8c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:a6:a6:6e:88:c9:d5:e4:47:50:b4:5d:41:
00:14:0c:4e:8e:1b:3a:8e:6c:78:e4:21:70:4c:1b:
1b:3a:50:a4:17:b1:af:b8:18:b8:11:e9:f6:75:ca:
e8:5d:53:ee:7f:32:fa:f3:3e:f5:60:ee:e7:e8:00:
8f:1b:30:4e:dd:58:ea:5b:3f:00:54:d8:32:ca:9c:
52:56:56:e4:eb:12:f7:c3:81:36:3a:89:f5:cf:74:
9a:13:9e:6b:80:0a:31:3a:20:9f:04:e9:eb:ab:7e:
e0:89:d7:48:35:25:30:aa:79:d0:e0:14:fe:ed:cf:
93:69:3d:24:cd:ae:8a:f4:ef:dc:b8:e7:8c:51:cb:
3c:44:53:ba:f1:2f:10:33:56:3b:1b:f6:7e:c7:8f:
5e:1b:86:ee:74:d2:c1:6f:e8:dd:6d:ed:5a:f7:68:
ad:0a:98:dc:55:92:70:77:cd:ef:f9:68:19:3e:5d:
12:4b:9f:9c:fb:87:30:ba:3c:fd:d8:79:5c:32:7f:
94:49:83:c6:e2:b2:5a:11:4d:fb:f4:d9:97:b9:92:
3b:e2:63:2f:2f:5f:e4:81:8c:fb:5f:3e:5a:f0:8a:
50:98:cd:39:fa:47:26:4c:50:c0:5e:2f:99:e8:1a:
b3:de:3b:eb:b6:f2:7d:66:90:2c:9b:d3:da:21:75:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:45:C4:B7:FD:A8:B1:C4:54:EF:31:CF:D1:87:58:28:DE:8C:0E
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fc:41:00:2b:ef:ce:2e:44:71:c6:b5:d7:82:a8:6f:49:39:
c6:40:8c:bd:7b:e5:0d:3f:f3:9e:66:45:ad:13:4d:63:62:dc:
5f:db:59:dd:26:c1:8d:0a:13:cd:ee:cd:a5:c9:ab:91:01:f3:
1b:77:ef:a2:0c:8c:eb:b4:2b:a7:32:75:8c:44:1e:3e:04:b6:
d4:24:39:c7:73:87:7a:54:28:d5:ed:8b:27:64:92:1e:97:41:
7e:a1:ba:5a:7f:6e:cb:70:a3:40:a1:71:fa:38:3a:34:ef:70:
c9:23:ee:0b:f1:54:16:c3:9e:33:df:38:c5:81:3d:07:24:75:
22:4e:d0:46:15:72:6a:7c:f3:f8:f3:75:61:2c:03:b5:8a:3c:
86:4c:54:46:fa:2f:7a:4d:51:82:c2:0e:36:d7:5b:c7:97:eb:
b3:ea:81:c3:89:02:c8:45:ae:01:b7:fb:cb:f8:1d:49:1a:2e:
86:ba:99:71:04:e5:1c:c8:75:66:ab:52:b5:6c:d6:8e:6e:36:
73:fe:9b:96:d9:c5:c2:6c:ac:a9:1c:b2:11:f2:9a:b9:dc:68:
f3:6e:ce:73:52:25:ef:16:1a:68:2f:4b:53:be:74:0b:22:8a:
76:c7:22:51:18:1f:fc:6f:9e:f4:c0:df:e0:64:86:56:82:0e:
7f:15:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:58:11 2025 by rpki-client