Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: RJLEO0C4Cnkqnj9E3xA2BMp1fTSpjFHGKfbRRlAap3M=
Subject key identifier: 79:BB:8D:66:47:E3:94:99:7F:C1:1A:3E:24:62:92:07:18:77:1D:E1
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 01988F90A994D846BA6393599D9AE34A7223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 16:01:19 +0000
Manifest this update: Sat 09 Aug 2025 16:01:19 +0000
Manifest next update: Sun 10 Aug 2025 16:01:19 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: eVtUvCAUmZ3/9KcvRpJhhsu+BCRzr1ulsZneSsL5Z0k=)
2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:a9:94:d8:46:ba:63:93:59:9d:9a:e3:4a:72:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Aug 9 16:01:19 2025 GMT
Not After : Aug 10 16:01:19 2025 GMT
Subject: CN=79bb8d6647e394997fc11a3e2462920718771de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:77:98:85:32:cc:63:e4:d3:8f:cb:47:2f:
4a:be:85:97:ac:fb:fd:52:ed:60:ed:8c:57:01:1e:
4b:d0:ff:5f:ed:1e:2a:7c:49:6e:bb:d7:c2:20:51:
6a:57:a9:7b:d8:15:0a:55:24:1d:a4:ab:40:e9:dc:
99:5f:6d:37:d8:a7:0e:d9:3b:78:97:d0:a2:ec:9a:
d5:02:d1:ee:5b:9b:d0:60:77:4d:ad:fb:19:92:46:
b0:1d:70:27:29:82:1d:5f:34:0d:83:fd:e6:07:47:
ca:cf:5c:69:c9:9a:0c:a2:f9:85:90:0c:5a:42:bd:
24:9c:99:a5:53:b2:9c:16:e6:12:c7:85:89:5e:39:
db:ec:08:77:b6:11:63:78:83:b5:19:99:75:99:49:
52:2b:77:1a:e3:f2:42:44:c5:5e:d8:fe:a3:1e:01:
ca:2c:9e:2e:2c:fc:cf:b4:2b:dc:59:83:55:df:d8:
a5:01:22:db:c8:1b:af:3b:53:b1:d9:b7:f7:a2:6b:
5d:e1:4f:20:f2:ad:e9:32:3f:07:e5:f1:2c:5f:c5:
0f:1f:19:07:9b:ed:8a:55:da:e4:f4:6d:2c:02:63:
e6:7e:38:ed:7a:d8:a5:f0:a3:f4:d5:c1:16:54:f0:
45:9c:c7:ae:4f:cc:0b:fe:5a:0f:c0:d5:0d:d4:22:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:8D:66:47:E3:94:99:7F:C1:1A:3E:24:62:92:07:18:77:1D:E1
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:56:31:12:4f:24:f6:8e:78:15:e0:6d:27:9f:df:26:9b:
41:f0:09:02:8d:30:c6:4c:77:e1:57:15:7d:3b:dd:b5:4e:b7:
1d:dd:d0:52:41:db:fc:f6:70:e5:16:0b:32:c7:1d:04:bc:b1:
09:aa:ba:f2:de:b9:27:bf:42:ba:91:2c:1d:e0:a9:bb:2b:d5:
50:87:42:d5:a8:52:24:14:fc:01:b0:8e:b7:dd:86:4c:29:24:
89:c2:40:98:eb:b6:83:ed:fc:17:90:4b:f2:44:fc:e0:6a:8d:
8e:3a:3b:1b:63:78:8e:db:c2:14:ae:6e:c3:88:1d:ce:49:cf:
c6:7b:48:55:e3:2f:ba:e6:32:81:0a:12:6b:83:8f:48:e5:36:
23:02:8e:3d:e9:8d:79:de:57:1d:0d:98:2b:d4:1d:a4:13:66:
d4:06:f7:8a:b3:30:bd:3b:b9:20:d9:7b:37:d7:0a:9f:d2:b1:
9f:11:ac:0d:66:23:3e:02:cb:db:7a:7a:2c:0b:66:84:e7:5e:
53:ec:5c:af:6c:5a:9f:ef:ce:c2:5e:ce:23:90:a6:aa:95:84:
34:10:de:51:73:cc:b3:b1:34:4c:2a:13:de:03:cf:e7:70:27:
2f:20:f1:52:1f:c8:29:47:31:21:c7:9c:19:6d:ff:bc:b1:1b:
09:3b:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:50 2025 by rpki-client