Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: ZpYSUs08lijZPlBqNYko6JvAYA/aXJrOcMBR+ElL4zA=
Subject key identifier: F7:EF:BC:A7:4F:93:FF:F5:E4:C4:D0:02:11:61:BE:EE:38:17:66:0B
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 019A4DE18C4FEE67DF87C8D403223CD60F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: KugsCmSQzAVlGMBiaaY1TV9v9uo1RptDCSR9YhuTtXk=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8c:4f:ee:67:df:87:c8:d4:03:22:3c:d6:0f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=f7efbca74f93fff5e4c4d0021161beee3817660b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:5f:4d:14:42:92:9a:1d:e3:5b:5d:c6:06:
ce:5f:a9:3c:1f:14:be:ef:cb:fe:2d:38:28:a3:4f:
0e:00:1e:99:71:f3:c1:40:ba:c4:a5:9f:74:a8:80:
2d:e7:ff:19:8a:18:a0:c6:fa:ef:74:fc:23:de:bd:
27:92:6d:c7:6b:14:23:ce:33:ac:67:5d:5f:07:13:
0a:a2:fc:dd:3b:39:cc:ac:0c:cf:08:71:80:66:21:
36:66:ce:b3:a9:6d:d9:e4:e1:cd:76:46:ea:86:99:
26:c6:e5:b7:31:ed:61:09:1a:7b:73:7f:12:e0:4e:
06:92:dc:23:3d:38:9d:fc:2d:61:cd:35:2e:6d:b4:
b4:12:74:fb:61:01:be:8e:e0:54:b0:e3:97:8e:31:
c0:b3:ea:dc:08:e9:ec:82:93:ec:d9:79:99:ee:49:
dc:d6:28:9f:7f:6d:9a:64:db:d3:06:b3:3a:0c:fb:
28:bf:d0:57:3f:b4:8a:02:47:bd:e6:87:67:1b:98:
50:83:d2:d1:e7:05:17:40:80:fa:5c:75:f5:43:b8:
a1:f7:b7:57:4d:e4:b7:37:e6:4a:39:5f:33:81:92:
93:49:2b:91:af:cd:9d:11:09:af:4c:c4:99:76:e3:
33:c8:42:72:7c:fd:2f:90:73:6e:9f:ae:2d:14:4c:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:BC:A7:4F:93:FF:F5:E4:C4:D0:02:11:61:BE:EE:38:17:66:0B
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:7f:69:80:d6:e1:45:72:40:f4:8b:a8:0d:e6:87:b9:bd:
f3:fa:7d:f8:d3:0e:66:d5:bb:29:d7:38:a0:52:f9:18:47:eb:
e6:5d:bd:7d:ba:ca:ce:b4:c1:d7:26:10:98:86:8b:7e:37:03:
65:b0:50:84:09:ee:a5:d1:57:bb:75:75:f3:14:18:b1:67:c6:
92:6f:8a:4d:9e:a8:5f:a2:0f:ec:88:cd:36:a5:52:3d:95:53:
28:5e:96:e0:21:9e:62:e0:8a:e0:b9:3b:5c:ad:09:51:0c:c8:
e1:80:31:d4:b2:55:5a:c4:36:70:fc:e0:66:7c:88:5a:6f:21:
ac:f2:31:2a:dc:79:92:63:45:dd:96:7a:f7:01:0f:3e:18:64:
cb:b4:8b:0e:1d:18:ea:36:d2:66:a1:bd:a5:a8:36:20:af:1b:
da:da:1d:6d:5f:42:91:10:1f:cc:5b:80:8a:06:f1:a1:cc:ee:
4f:5b:76:a2:64:e0:e7:d8:e1:c5:47:48:b2:5b:a0:06:5c:d3:
6a:6d:ad:33:fb:3b:81:37:fa:18:de:a8:2e:4d:a6:1f:ba:6b:
30:0b:56:db:a3:1a:43:98:ca:68:12:0c:67:02:6a:96:ad:89:
14:d1:2c:35:9f:5e:5d:df:b3:46:8f:23:87:1f:9c:55:d4:90:
2d:52:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:46 2025 by rpki-client