Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: ZFbxSXcU6QT2EV4N7xaoWP5TT2il93hbJqH601M0E6M=
Subject key identifier: 54:DE:4B:96:73:47:0D:F9:98:B5:1B:A4:3B:37:6B:B6:1E:76:79:C5
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 01987C7762068DDB576F8678146C8CEBE205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 23:00:55 +0000
Manifest this update: Tue 05 Aug 2025 23:00:55 +0000
Manifest next update: Wed 06 Aug 2025 23:00:55 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: g6WQWe8I5OuTNH0mTdDiT9J0/oljpT/YDDDVV+vSk6Q=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:62:06:8d:db:57:6f:86:78:14:6c:8c:eb:e2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Aug 5 23:00:55 2025 GMT
Not After : Aug 6 23:00:55 2025 GMT
Subject: CN=54de4b9673470df998b51ba43b376bb61e7679c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:56:dd:6b:0c:61:4a:5e:d4:71:a5:d0:71:
ee:8c:f9:9d:04:a9:b9:44:ca:d5:f4:db:a3:6d:9c:
ab:84:03:03:76:be:2a:40:d2:57:10:17:ce:0a:7e:
1c:dc:4c:4c:7d:7d:d8:c6:b5:50:64:14:a0:a9:f2:
be:52:01:10:4e:96:7e:e8:8c:c2:c8:1b:74:67:51:
4d:ce:2c:36:d7:ed:13:ed:86:5b:cc:62:b2:70:37:
87:8a:c0:f6:aa:a1:cc:43:a6:74:fd:ca:0f:b7:43:
ed:df:a1:ab:33:04:eb:0d:fe:52:1e:82:ef:0e:c3:
23:ae:c3:17:1a:ec:df:ab:7a:f9:af:ae:7e:fd:74:
40:98:ae:1c:27:45:07:c9:03:ed:29:eb:44:a8:4d:
b5:8b:cd:03:a3:cc:3a:21:1d:03:17:96:cc:b4:4c:
7a:75:9a:59:03:c1:c5:f7:57:99:08:a2:6b:34:0f:
d0:5f:96:e8:3a:84:6c:5f:1a:eb:ff:eb:88:a2:a8:
73:b0:a7:f2:a1:93:8a:51:29:23:9e:5b:7a:aa:69:
ad:73:53:49:d6:fa:66:53:31:bc:a8:53:e5:9d:df:
2d:e2:64:60:93:db:a6:de:34:c8:13:4f:75:08:ea:
d5:d0:42:01:0f:9b:91:36:30:14:d9:b9:ac:6c:e0:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:4B:96:73:47:0D:F9:98:B5:1B:A4:3B:37:6B:B6:1E:76:79:C5
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a1:5e:97:97:b6:57:b2:c8:a8:bf:fb:eb:5a:a6:f4:e6:5f:
61:63:e4:51:90:9c:a2:da:d1:3d:d1:48:bb:f2:49:bd:ec:a0:
78:3e:de:ce:b5:78:2c:bb:2c:2f:51:2c:66:e4:6b:d6:82:4a:
81:5a:93:bf:56:07:75:94:cd:f7:17:3b:71:24:21:58:7b:6b:
54:3f:ea:6d:20:7a:90:92:2c:60:ce:92:0c:3b:7f:7d:4b:12:
01:e4:bc:1c:d8:dc:41:87:a2:dc:7f:0b:dd:28:79:c6:0e:19:
dc:d7:66:c0:7e:70:86:e6:db:e0:71:4b:20:19:48:50:60:45:
55:ad:76:86:c9:f4:5b:85:16:ac:3d:5b:ba:c0:59:db:5e:e6:
40:01:e6:ef:82:c7:e0:2a:3e:94:03:16:32:2c:33:14:8a:23:
91:0e:4a:cc:01:b7:f4:2b:36:8a:6c:e9:57:cd:75:cc:ad:83:
ab:f6:e9:32:68:9f:7e:b8:b5:da:2d:6b:32:1a:f7:a6:59:b5:
64:4f:47:3c:00:6f:db:30:b4:f4:f3:59:d1:d5:57:c7:04:f8:
78:d7:73:8d:7a:1b:04:e0:21:e7:56:be:c4:38:44:02:4c:b6:
69:14:15:97:65:11:2d:8e:f5:4e:41:58:67:d0:1b:2a:ce:46:
6e:87:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:44 2025 by rpki-client