Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: v9yLKbHgjWOy2BT1s1ak86qNh4UZB4yalTafPBVUC+Q=
Subject key identifier: F2:99:F9:52:70:A9:F2:73:F4:00:02:AB:A3:CF:4C:EF:81:FE:BA:5D
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 019874191166CCED6752A2C387621D95600F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 08:00:56 +0000
Manifest this update: Mon 04 Aug 2025 08:00:56 +0000
Manifest next update: Tue 05 Aug 2025 08:00:56 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: 0XJYgdJEWGApu86bZIrPp6LKkzzvq5z+PJ9tf8OUlEg=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:11:66:cc:ed:67:52:a2:c3:87:62:1d:95:60:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Aug 4 08:00:56 2025 GMT
Not After : Aug 5 08:00:56 2025 GMT
Subject: CN=f299f95270a9f273f40002aba3cf4cef81feba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:cc:61:34:62:81:ae:65:55:d7:b1:73:67:
67:88:65:ae:2d:ec:65:3c:90:b0:dd:f9:25:76:12:
31:f8:17:8d:f9:cb:51:38:2c:6f:12:02:ac:72:be:
05:04:a6:37:77:fe:1c:90:d8:55:5d:04:d6:9a:47:
8f:75:d9:c0:3a:15:a0:20:30:d4:bc:21:0a:55:ef:
34:a9:cc:ba:3a:27:de:6c:24:2f:77:76:fc:88:0e:
ed:98:10:18:d9:07:28:72:6f:ab:41:76:77:f1:7c:
f9:6a:6a:84:03:84:92:d3:72:fe:a3:1e:ca:89:56:
40:aa:de:28:0e:b8:f0:4c:7b:15:5d:17:29:37:07:
b4:54:85:9d:b8:ea:6d:c8:9d:e5:5e:a4:39:dd:62:
1e:c3:49:31:93:a0:33:ed:39:76:fc:6e:95:ce:bc:
2c:0b:4f:1d:fd:73:77:25:d1:cb:b7:15:8b:bb:29:
97:c4:c0:d4:83:a5:f0:d7:7a:39:58:f6:3a:56:88:
1b:1f:25:40:44:28:1c:d6:e8:95:ab:0a:76:24:9a:
72:83:1f:e3:a5:70:d9:fb:dd:60:ce:a2:97:04:08:
d4:a5:06:7c:de:ad:6d:e6:57:5a:ed:f0:90:53:98:
5b:6c:5e:22:4d:71:1b:ce:ab:8c:a7:43:a9:94:82:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:F9:52:70:A9:F2:73:F4:00:02:AB:A3:CF:4C:EF:81:FE:BA:5D
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:43:ae:15:92:64:56:b1:cb:89:fa:8d:2a:50:b4:f8:d9:f4:
45:b4:60:ee:ce:c4:5a:1a:d3:2b:6b:d3:6e:bc:4a:f6:fb:a5:
ac:79:3a:ea:89:60:b0:df:bb:5b:9d:e7:9a:e3:0e:88:5b:1f:
43:e9:ef:ff:4f:1f:51:cf:64:9e:72:df:e4:ec:49:58:e0:73:
e0:e6:d5:4a:b5:36:ad:92:d2:75:d4:29:f9:e6:16:30:4d:5e:
b9:db:d6:e9:e0:ec:2a:6e:8a:17:a9:eb:85:72:87:e1:65:0f:
64:70:4b:fa:36:f1:96:2f:72:8c:c0:1b:dc:44:45:ef:bd:74:
6b:63:57:15:83:f7:d5:e8:fc:3c:af:e9:75:5f:3b:03:ce:4a:
b5:6a:53:1e:be:cc:e4:4f:c9:0b:53:00:74:b0:40:30:b1:93:
ea:b0:cb:38:6d:42:8b:86:1d:ac:b9:6c:75:b5:5c:aa:40:07:
d4:8e:7f:42:5c:5a:10:a5:0e:fe:f7:6a:0f:da:74:3b:14:3a:
d7:37:c6:65:28:40:9d:b7:97:2a:86:53:82:5b:93:8d:86:a6:
5f:60:f7:2a:ac:e2:de:1b:b5:24:45:2d:7d:c1:b1:13:16:a0:
2d:16:72:e0:0b:05:0a:06:27:5b:97:4d:a3:f6:be:89:d4:9c:
3a:98:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:09 2025 by rpki-client