Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: qz23aRMDlOqfD5LTmZXSrnTOwD+HoDJJ/kxmpSczJsI=
Subject key identifier: BF:B5:60:F1:7E:A5:EB:56:C8:E9:F5:66:91:30:F5:DB:1B:B3:98:6A
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019A7293570570EFFB8AC85EAC531A03165B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: yyeih2N8tLYaNkrP6BZzwu8xqA+ZTjbEJBYNKH2Pdxw=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:57:05:70:ef:fb:8a:c8:5e:ac:53:1a:03:16:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=bfb560f17ea5eb56c8e9f5669130f5db1bb3986a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:a8:58:db:c7:e8:cf:5a:18:3a:ba:b2:4f:
9f:5d:fc:48:58:6b:fd:8f:46:df:14:8c:a1:96:76:
4e:3f:cb:43:c8:2c:fc:bd:ec:4c:27:ce:ee:44:f3:
bd:e7:09:85:b7:53:67:13:95:14:c6:a2:64:a8:a7:
3e:02:1b:2c:67:65:4a:35:97:11:9d:dd:76:e5:43:
93:e1:68:cf:66:26:ed:88:ce:5c:5a:41:66:ee:13:
30:b0:81:2b:0b:65:d1:ef:8d:34:a1:91:61:f8:e8:
ee:92:a8:06:7d:7e:87:3b:4f:6d:4c:ed:51:d4:51:
73:53:28:57:57:d4:c6:48:a9:a3:1a:66:c3:ce:e7:
04:01:91:72:3b:c0:43:77:2c:d4:1d:83:ae:51:4a:
47:39:82:ab:97:9b:fb:fc:18:95:2f:a7:08:85:ac:
df:87:29:de:f8:b9:ef:63:0e:63:25:fa:78:ad:7c:
f4:e2:aa:e5:8f:2f:03:e6:29:9d:7d:59:d2:63:cf:
8e:42:20:e4:8b:8c:bb:d4:17:db:61:a1:81:c6:6e:
53:8e:af:e0:9d:23:18:e3:75:68:45:35:3f:2d:64:
0f:b1:6c:65:7d:88:23:f6:11:60:8b:54:59:0c:3e:
33:a0:7e:01:48:1b:aa:82:af:37:96:18:db:59:d9:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B5:60:F1:7E:A5:EB:56:C8:E9:F5:66:91:30:F5:DB:1B:B3:98:6A
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:34:99:e5:df:2e:96:9b:ad:81:af:0d:34:97:1a:dc:d7:1b:
bb:7f:e0:47:0d:1e:ce:b3:18:f2:09:8c:de:b4:7f:38:73:30:
8b:74:03:4f:ba:85:cf:6c:3c:6f:33:a8:2a:a9:37:95:61:5c:
13:ce:a3:e4:cb:df:e9:44:29:c1:a4:ea:8b:91:7f:66:3a:d7:
b8:45:83:fe:7e:41:de:96:76:ec:b6:c9:69:7d:5f:5c:a5:87:
91:df:92:13:4f:e5:8e:9c:e3:12:2a:22:8a:20:38:06:31:3f:
0c:18:b4:64:9d:35:ff:da:f1:72:e5:ea:10:1a:86:94:64:d3:
8e:b6:b0:2a:a4:b4:c6:a1:9a:1d:ad:52:ed:b9:9a:37:62:14:
cd:cf:e6:7e:06:b3:e0:57:ec:6d:3c:7b:af:99:17:77:c2:58:
c0:71:f4:14:72:f5:aa:88:a6:28:aa:fc:4f:d1:8d:67:ee:f5:
b6:ba:09:04:58:31:a7:1d:db:7b:c3:24:fb:cc:f5:17:9a:f0:
c7:3a:32:e7:25:21:23:1d:de:59:94:c2:14:20:b0:3c:16:d9:
92:e5:a4:45:92:a4:f6:69:0f:b7:4c:29:8c:c3:99:f6:62:c0:
d5:af:bc:61:80:2a:d5:49:85:c4:dd:ba:12:ff:ef:7c:83:27:
20:36:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:02 2025 by rpki-client