Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: m/abbxmTjzKq2fuJ4+/dTF6A0m4F6Oot9WXMitcZ1qw=
Subject key identifier: AA:18:A4:40:9D:0A:E3:45:2A:F6:56:10:38:97:88:9E:FB:73:60:38
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 0199FFFEB7B77601B7F1F0D7C3A3E12AA060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 05:01:47 +0000
Manifest this update: Mon 20 Oct 2025 05:01:47 +0000
Manifest next update: Tue 21 Oct 2025 05:01:47 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: alBCLO3eJYnT2iFd4qIIw8lwOs2yzV9Or1ebGJBO55Y=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b7:b7:76:01:b7:f1:f0:d7:c3:a3:e1:2a:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Oct 20 05:01:47 2025 GMT
Not After : Oct 21 05:01:47 2025 GMT
Subject: CN=aa18a4409d0ae3452af656103897889efb736038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:31:27:45:ed:02:77:5a:f8:fb:24:86:9b:
17:ca:c7:93:20:fe:f9:f7:19:bc:e9:a2:6e:51:81:
22:ca:61:7d:d5:46:e3:db:f2:37:65:25:59:68:84:
0a:f0:36:cc:bb:24:87:11:75:b1:3a:50:d3:e7:e9:
32:2f:65:9e:5c:bb:ba:54:1d:83:39:1a:64:7f:7a:
cc:bb:cb:e4:be:f1:59:d8:1b:1d:a3:7d:fb:c3:e2:
ff:bc:78:f9:6e:bf:19:13:cd:42:ab:7e:bf:98:19:
8a:ce:dd:be:c4:bc:14:15:6b:57:7b:d4:b2:39:5f:
2c:92:5e:0e:4d:01:31:e1:15:86:b2:1e:87:46:c7:
e5:79:97:f6:ae:c1:14:c6:69:48:2b:da:26:d6:58:
6b:be:be:59:74:d4:eb:aa:ac:3f:12:0f:f8:7e:5d:
d4:fc:66:7f:73:f9:1f:18:be:63:ac:44:64:40:1c:
f4:5d:86:51:a2:23:79:12:af:b3:bb:2c:18:90:ec:
d7:91:77:31:63:bb:f0:9a:04:c7:a8:d4:be:8f:92:
e1:e2:3b:2f:d5:f9:5b:95:60:9f:bb:bc:0e:5f:0f:
34:df:0a:24:e8:57:4e:fa:97:44:87:e3:64:7b:b5:
7d:1c:64:73:92:b7:1c:ee:20:c5:53:c9:27:f2:8f:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:A4:40:9D:0A:E3:45:2A:F6:56:10:38:97:88:9E:FB:73:60:38
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:17:20:70:8f:78:6a:1e:18:c4:2d:86:e3:a4:b6:8d:ed:
cf:a3:a2:aa:07:4c:41:9a:6a:a6:39:5c:6b:ae:ab:ea:df:fa:
06:e3:34:fc:43:92:35:56:fa:f3:76:6c:6b:f3:84:a2:ff:3a:
98:73:0c:da:6a:32:6f:1b:24:68:5e:76:2d:8a:39:79:90:a0:
fa:4a:08:2f:52:0e:bf:c1:3d:45:8d:75:db:58:d5:f4:3d:2c:
da:15:39:61:85:0a:70:43:f0:0e:81:8a:bb:1d:62:96:41:7d:
39:95:a6:05:4b:35:b9:00:97:a7:b7:20:dc:30:03:0f:e0:40:
ae:66:74:ad:d7:f7:74:fb:ce:91:ff:f2:96:c2:89:65:87:4d:
96:99:c7:3c:85:d8:c8:8d:62:77:96:a1:cc:85:7a:67:d6:7d:
cc:26:74:9d:7c:6a:66:aa:84:42:44:57:a3:c2:2e:86:87:de:
30:2d:c6:e9:a1:8f:32:4d:ed:21:f7:3c:f1:ad:a8:51:04:84:
1a:8a:01:09:d7:18:92:c9:31:0e:8b:a4:3f:7d:34:ff:6e:22:
09:2d:57:f5:09:7b:9c:1d:46:48:00:bd:cb:96:28:df:fd:e1:
76:94:54:5f:d0:f2:2e:66:2d:22:cf:63:e4:16:19:20:ee:0f:
65:c7:79:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:21 2025 by rpki-client