
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: zAP+iSfzIStHahd48qurtdzqat30DM/Ov1ZmYUpbsJI=
Subject key identifier: 61:80:E8:9E:9F:A9:82:F4:28:C4:01:4F:3B:CA:31:47:5E:2B:A1:19
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 01987D8BA0E3073D127B5B67D6C4EAB9858F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 04:02:39 +0000
Manifest this update: Wed 06 Aug 2025 04:02:39 +0000
Manifest next update: Thu 07 Aug 2025 04:02:39 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: zmBoV4GqMX3p8PVpROoOf4M5p7nkaQfEklAwPcvhHmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:a0:e3:07:3d:12:7b:5b:67:d6:c4:ea:b9:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Aug 6 04:02:39 2025 GMT
Not After : Aug 7 04:02:39 2025 GMT
Subject: CN=6180e89e9fa982f428c4014f3bca31475e2ba119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:a6:b4:5a:d5:d3:05:04:c6:f9:cd:8b:c8:
4e:16:cb:f2:52:2a:77:42:f8:51:d0:53:0a:32:45:
2e:26:82:c4:34:a3:f6:37:ef:36:ca:3b:aa:23:20:
32:3f:82:d5:4d:b5:8b:8c:08:9c:cd:83:60:8d:06:
46:bc:65:5c:db:91:9e:7c:6a:6d:9f:3a:cd:d0:c9:
55:8d:16:d1:7a:46:4f:ef:4e:29:48:2a:b2:04:cf:
6d:24:b3:1c:d6:f7:fc:cb:58:f2:16:4c:19:b9:cf:
40:6b:16:ae:ae:fc:62:15:4a:1c:e7:06:43:c4:de:
b6:3e:8c:57:57:47:0a:90:52:79:15:e5:16:72:e9:
1c:4e:e7:f8:13:a0:ea:e4:dd:e3:f2:6f:8b:96:ad:
c7:3b:9e:db:d1:b2:97:5c:16:23:bd:e8:d0:1c:8d:
d3:42:f0:bf:0b:60:2b:ac:e7:92:ca:69:b9:74:c9:
d0:c4:d1:13:86:6a:0a:10:87:7b:30:de:f5:37:17:
ac:6e:89:d2:ff:f8:f2:dc:3d:df:fa:88:43:95:fd:
9c:87:11:ac:e9:c9:a2:59:be:ee:6c:f4:d6:e1:59:
42:5f:8d:e9:d7:43:35:9d:fa:8b:dd:b6:4e:e7:39:
fb:28:c7:4a:b2:5b:12:44:a2:27:c3:24:9c:e8:02:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:80:E8:9E:9F:A9:82:F4:28:C4:01:4F:3B:CA:31:47:5E:2B:A1:19
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:4a:f4:e2:b3:c2:8f:1c:7e:45:26:54:29:41:12:48:48:
c2:e7:4d:ce:6a:8a:a7:79:bb:a6:f6:68:43:80:46:99:87:3d:
8b:d1:8b:6c:7d:8e:ac:8c:19:44:22:53:43:70:61:60:28:92:
f8:2e:97:00:fa:9a:c5:15:5b:61:cd:48:f6:c6:c4:cd:33:76:
45:d8:a4:30:53:d0:58:fc:81:19:63:36:23:06:b8:8e:eb:fe:
7d:76:1c:7e:e9:66:00:ae:0e:4c:1d:37:f2:05:24:82:7e:f1:
6a:57:11:8c:ac:e3:d1:d0:c8:6b:3f:ab:82:c4:9a:6e:1d:eb:
8d:a9:10:df:e9:32:9c:ae:2e:da:9b:1b:42:ac:23:bf:36:c6:
a0:f6:df:bd:7e:b9:44:55:31:07:51:3d:10:94:c8:ca:08:10:
31:15:20:c5:51:db:fd:c5:ed:bf:db:7c:a9:1d:23:6f:33:08:
53:b4:71:e4:91:66:1e:d5:4b:11:b4:a3:a3:61:da:39:01:fe:
c2:30:d6:64:03:76:8d:e1:3f:2b:11:88:a7:39:c2:f5:47:80:
e3:d4:8f:c8:3a:77:f9:b6:5b:61:26:16:98:e1:83:e0:fb:33:
97:f6:bd:41:d8:a6:1d:d8:19:95:91:f3:dc:d9:6e:d4:0e:8d:
5b:76:07:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:13 2025 by rpki-client