Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: xZMX1IaVHgnN4izilsz5gz/7gGRm+YPZOPetVi8Axzc=
Subject key identifier: CC:36:D6:85:C2:D7:65:7E:63:ED:F9:C0:82:8B:81:F9:6A:BD:E8:17
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 019921E7E29AF853D0084BE1541BE9AE00B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 02:01:08 +0000
Manifest this update: Sun 07 Sep 2025 02:01:08 +0000
Manifest next update: Mon 08 Sep 2025 02:01:08 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: DW4sCB4vtCWHNv7C2+3nVgdchhopgGhzfQzNTPEMTCM=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e2:9a:f8:53:d0:08:4b:e1:54:1b:e9:ae:00:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Sep 7 02:01:08 2025 GMT
Not After : Sep 8 02:01:08 2025 GMT
Subject: CN=cc36d685c2d7657e63edf9c0828b81f96abde817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:dd:57:a6:57:fa:76:d7:0d:86:6b:6b:87:
9a:9d:43:5e:4b:25:0b:57:21:85:9a:72:e0:06:b6:
b0:ca:b5:e4:35:dc:e3:f6:84:c8:2e:e3:71:fa:35:
65:9e:35:c8:78:9b:ff:65:a5:05:a0:13:c1:3f:ca:
e0:51:19:69:81:d3:6a:60:01:99:81:20:e1:6f:01:
bc:1f:bf:4b:b4:5f:30:1d:74:88:71:1d:3a:aa:28:
24:44:a5:74:a7:42:dd:2f:6f:4c:ab:56:41:01:ad:
0b:eb:6a:5c:cf:c0:fd:d6:34:71:89:48:84:8d:df:
67:44:60:96:b3:13:18:74:21:72:f3:a4:92:45:a3:
29:86:e0:c7:0b:85:52:d1:a3:95:f1:ea:5e:6f:49:
dc:89:5a:45:bc:ba:3d:4b:8c:9f:ca:61:a9:c9:e3:
b8:01:ad:43:93:c5:88:fa:2b:c1:8b:77:cc:f7:61:
60:fa:95:a1:23:e4:ec:32:d2:9b:81:a9:e6:ab:f0:
07:ba:8f:70:c8:e9:67:61:a7:41:cf:f7:b3:83:0c:
68:a2:21:f9:8d:b2:c6:5d:34:86:d2:73:c7:6d:5d:
ba:d4:0b:bf:54:3d:70:79:3f:3c:e4:3a:58:9e:5a:
77:61:a3:e7:4a:17:1d:26:b6:b7:83:a5:24:1b:22:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:D6:85:C2:D7:65:7E:63:ED:F9:C0:82:8B:81:F9:6A:BD:E8:17
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:54:50:28:8e:d1:57:42:11:ee:7a:c4:a2:77:d7:fe:95:f3:
1b:ee:3f:55:99:16:d4:13:be:fa:64:eb:fe:2b:74:e8:e1:ac:
62:14:7f:07:2d:fd:4f:ba:49:89:11:4d:8b:bd:10:9e:fd:c4:
48:22:71:29:d6:5e:fc:f4:22:5f:0c:6f:9c:a5:ff:72:4d:6b:
f9:0a:a1:3f:77:00:a1:e5:90:ce:bf:f0:40:be:21:e6:db:a8:
3a:7d:73:4e:db:c7:57:41:89:9f:88:da:1f:0f:af:55:19:d5:
d7:2c:80:03:2f:9f:1f:68:ab:a5:a8:de:cc:2d:83:35:eb:b1:
2d:86:b5:7a:a3:33:27:7e:0d:14:13:64:45:66:98:6b:33:80:
f5:9a:d1:73:1d:b6:4d:28:98:db:97:a1:61:4e:0d:af:b7:e8:
da:ab:5a:71:c6:a6:ce:53:fe:96:00:6f:bd:c2:51:1e:cc:82:
0f:35:5c:01:06:b8:ff:33:80:41:c2:d2:dd:43:cb:fe:77:ea:
15:70:4f:88:17:75:8b:4f:07:12:cb:7b:b7:e9:54:9a:86:63:
fc:0b:25:54:91:40:06:5c:9e:e1:1e:b2:70:0c:5b:99:c5:dd:
91:c1:b7:23:8b:ca:bf:4a:ab:a2:ae:be:08:bf:67:c5:c6:6a:
64:2c:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:41 2025 by rpki-client