Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: IH3v1tmCQyu/YmgWNGsFz5h/4i8nk4D6p0sq5StFQH8=
Subject key identifier: 5B:E5:3A:58:1D:3D:9C:9F:3B:B9:20:76:58:74:84:AD:C3:5D:24:AA
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019770079746C3585B3207205CF308DB9CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 20:00:34 +0000
Manifest this update: Sat 14 Jun 2025 20:00:34 +0000
Manifest next update: Sun 15 Jun 2025 20:00:34 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: 3L3DFyiAmA+DBiJThHKcqgH8qovXIVs7ZJM0TIDAhTA=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:97:46:c3:58:5b:32:07:20:5c:f3:08:db:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Jun 14 20:00:34 2025 GMT
Not After : Jun 15 20:00:34 2025 GMT
Subject: CN=5be53a581d3d9c9f3bb92076587484adc35d24aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:58:26:49:8b:bc:4a:f2:c4:9e:13:bb:ec:
5b:91:3a:6e:a2:ed:66:3f:95:f6:bb:01:02:2d:8a:
a5:04:72:94:fe:5d:1a:cf:19:65:3f:95:75:39:2e:
9b:65:74:5c:d7:05:7e:ec:d2:33:09:68:46:63:a0:
db:32:df:4a:1f:7b:12:70:fc:f2:66:b2:cc:43:1d:
68:e3:5b:82:e7:eb:f0:a6:98:3b:a6:61:ee:fa:06:
7b:29:19:ca:97:fc:36:ca:19:72:d9:e8:6e:8c:16:
e8:54:c2:3a:22:91:5b:76:07:e5:2c:f5:2b:b3:c4:
6e:64:92:ef:3e:aa:ea:84:24:31:5a:6e:41:10:38:
62:d3:d2:8f:6c:6c:f1:90:56:4f:1a:20:3c:71:b0:
06:d3:a6:95:28:50:d0:92:5d:90:94:bf:e6:98:84:
7a:10:ae:30:2a:c0:a8:8f:c3:ba:3d:80:7d:b7:2c:
c2:9d:25:b0:d2:6a:96:bd:78:9f:11:61:f3:0b:fe:
95:a0:e0:21:d8:3c:dc:ca:a0:4b:55:d3:80:b5:dd:
b2:52:7f:6d:28:ed:57:35:09:7a:d3:48:6b:c3:e5:
1f:5c:51:2e:ae:f3:5a:41:2b:3b:2f:e0:7b:55:87:
e3:0e:46:d1:09:97:3a:5d:bc:f3:d5:0b:90:8c:d2:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:3A:58:1D:3D:9C:9F:3B:B9:20:76:58:74:84:AD:C3:5D:24:AA
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fc:26:5a:16:a4:ac:9b:6e:bf:5b:0a:ca:68:b3:f1:35:c7:
e3:6d:89:71:5f:12:57:76:28:54:94:0e:b0:6d:ec:6c:64:ae:
f7:e2:1e:24:22:31:d0:97:6a:7b:fc:de:c9:a4:33:7f:58:ff:
4b:2d:de:73:f0:1f:20:a9:90:ff:4c:56:74:92:b2:6b:97:33:
20:83:74:2d:65:11:0b:8a:fd:9d:d8:20:41:71:8b:3c:57:38:
d8:26:fe:20:ad:50:e7:47:1c:7f:0a:76:e5:3a:1c:48:7c:0d:
f2:5f:49:e9:d6:93:f5:59:cb:c5:0b:03:6e:87:78:2d:47:69:
5a:0a:4b:d4:3d:80:a8:bd:f6:af:18:22:7f:ce:cd:6c:c1:ec:
f4:38:55:40:53:3d:6f:87:72:45:2e:d4:24:1c:1e:33:48:0e:
19:95:2b:24:1d:40:10:04:6a:e5:83:be:ae:c6:29:a0:c3:88:
17:5f:97:d6:e3:db:db:6a:67:af:ad:29:b7:65:60:8b:47:2e:
9e:a2:b5:1d:97:9e:cd:c7:c1:64:e6:3b:d5:4d:22:e0:e6:65:
4b:f0:74:ff:6d:49:77:a3:1e:de:ca:2f:dc:11:3d:06:2b:59:
04:0d:45:65:d5:ab:61:7f:bd:03:9d:46:b1:a4:48:f4:53:56:
13:84:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:59:07 2025 by rpki-client