Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: VVtJ9y7mBuIH2+SCyHpjgj7FVm09p/bv5brWwwpb654=
Subject key identifier: DC:77:0F:1A:94:8B:3A:B4:36:1E:0B:0E:3E:B1:34:F1:B3:80:55:44
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 0199FAD846525D01DCD157E0B006AFD9C6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:41 +0000
Manifest this update: Sun 19 Oct 2025 05:01:41 +0000
Manifest next update: Mon 20 Oct 2025 05:01:41 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: pi992xoeIu0ye/WvLPrffRVISCl90GVftG8I2WY8RCo=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:46:52:5d:01:dc:d1:57:e0:b0:06:af:d9:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Oct 19 05:01:41 2025 GMT
Not After : Oct 20 05:01:41 2025 GMT
Subject: CN=dc770f1a948b3ab4361e0b0e3eb134f1b3805544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:58:a4:64:a9:81:1c:6c:fb:d9:fd:4c:b5:
ec:7f:c8:f6:94:bb:c2:40:e3:83:12:e0:7b:88:55:
9c:ee:07:da:26:74:26:e5:08:bb:6a:6a:aa:dc:ba:
35:66:e8:c7:15:3d:ad:2f:5f:90:b7:03:28:03:f6:
51:a2:05:72:09:a8:8f:40:4b:cf:f9:0e:8b:4a:97:
71:f9:10:2e:9e:3d:84:81:fb:e7:25:14:15:63:54:
af:d1:fd:24:d9:7c:4b:02:26:4b:76:86:96:f3:60:
22:8e:89:e6:08:f4:21:a6:71:8d:be:97:69:21:7e:
66:a6:d0:0f:d6:fa:4b:e1:80:cb:c3:99:37:ad:ad:
88:ab:6e:90:b9:a7:59:c7:57:1d:02:f1:0b:9c:e4:
7f:03:94:a5:3f:48:d3:34:43:57:2d:43:e5:c3:cc:
aa:3b:ca:46:26:ab:3a:7d:1d:56:0d:f8:cb:ac:a9:
d0:f3:f3:bb:50:fe:12:93:34:35:c9:01:04:2a:70:
f6:0a:51:60:9c:11:a3:13:15:aa:79:6a:39:d6:f9:
1f:7b:f0:38:3d:da:66:45:57:c7:c4:15:58:8e:bd:
41:01:46:71:26:15:48:e9:79:0c:61:48:4c:6c:3b:
9d:af:5a:c7:13:bf:67:20:1c:f2:20:ff:09:6d:d1:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:77:0F:1A:94:8B:3A:B4:36:1E:0B:0E:3E:B1:34:F1:B3:80:55:44
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c5:25:de:bb:f5:ad:d1:a8:4d:be:7e:71:36:3c:91:02:47:
8c:6f:fa:81:08:f1:ec:e4:59:79:44:08:35:2a:33:ab:a1:a6:
2b:f3:87:75:ee:ec:30:38:be:81:87:ff:20:e8:fb:42:aa:d1:
e8:b3:f2:3b:d4:9b:2c:29:f1:99:9c:59:30:d3:5c:72:8c:d1:
f8:cc:b9:0e:71:35:8b:b5:f0:79:b2:2e:b0:4b:34:04:c9:5a:
b2:1a:ea:c9:9f:24:35:4f:48:bf:2c:ef:9b:1e:c5:1d:a5:1d:
8d:b8:1e:2c:85:fb:59:2c:6a:e7:64:bf:24:12:f3:17:0e:0e:
71:f7:45:0a:b7:fa:f2:cf:14:8e:f7:77:df:49:c8:d9:20:28:
47:96:f2:fa:45:69:68:fb:1f:04:4e:f1:1e:3d:da:09:84:32:
7d:7d:62:b6:8e:07:aa:f4:84:15:6a:41:c9:20:88:ae:20:86:
56:0c:a6:f2:73:dd:70:01:0c:94:f3:41:6d:a7:ae:94:cb:cf:
a7:c2:a0:25:df:5c:c5:11:9b:86:77:26:0b:55:4b:58:1d:85:
3f:53:55:6b:67:4b:3f:ec:7e:02:7e:3d:e4:3d:c3:a2:e4:0f:
c0:d1:94:42:8b:a3:5b:22:4a:ab:27:81:15:f9:71:57:96:1b:
ac:5b:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:15 2025 by rpki-client