Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: OITp8I6EF3k4fEoXUHKQLU9Uz6oXIAABybtsQUYvuzY=
Subject key identifier: 36:44:FB:78:2B:BA:BB:DC:A0:93:4D:76:05:41:09:66:17:1F:EB:3D
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 0198D4A832E08CF8388C719342975F0650DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: HmAw2TF4B05Gatg0SuEdZXyTBK0Tr0to2XKE2t6bFa4=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:32:e0:8c:f8:38:8c:71:93:42:97:5f:06:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=3644fb782bbabbdca0934d7605410966171feb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:35:4b:9f:9a:83:23:df:1a:b4:99:a6:51:
e2:cf:0b:97:25:7d:94:83:36:cc:16:64:87:ab:2c:
cb:43:51:27:44:a8:ec:e8:3e:df:38:b0:21:df:34:
90:28:e7:44:fc:ec:ea:69:be:66:a1:e2:0f:e1:12:
56:3f:80:7c:0d:b9:fa:04:25:2c:d5:8d:22:d4:72:
80:e2:f6:11:28:32:05:65:a6:25:f9:48:bc:72:d2:
ca:3f:0f:9c:00:b1:a6:5a:04:f9:2d:ef:bf:e2:70:
3e:57:d8:80:2a:59:48:b4:fb:80:be:43:e5:40:5f:
c9:f5:b6:8b:2f:06:a3:95:e0:e2:69:3a:fc:15:fe:
57:7f:7c:4c:54:a0:e3:e2:db:24:62:61:8b:c0:9b:
78:b9:8d:c9:a2:4d:fd:7b:d3:18:20:3c:d8:00:18:
5a:8b:1e:6c:37:a5:a2:13:bd:0d:ac:0a:b6:d2:36:
ae:5b:20:73:d9:48:3d:b3:0f:e4:23:28:32:48:39:
60:0d:af:b2:45:16:91:0e:8f:15:54:8b:04:3e:e8:
66:1d:3e:75:e3:af:2d:ce:78:a8:22:5f:dd:bf:7f:
0f:c7:cd:5c:bb:bd:8a:9f:ef:d4:01:ab:a1:17:10:
50:3c:f3:af:ed:80:d2:ef:10:cf:7f:0c:ac:b9:96:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:44:FB:78:2B:BA:BB:DC:A0:93:4D:76:05:41:09:66:17:1F:EB:3D
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:51:84:30:8c:a4:f2:3f:04:48:84:f3:01:7c:a2:0c:c3:81:
9c:2e:18:90:08:c1:ff:65:fb:e9:da:5d:b4:35:f7:37:2f:23:
1a:90:45:e6:15:32:e6:db:4e:34:67:17:28:8a:c6:f1:43:44:
0d:f6:e2:8d:ed:bf:32:9e:67:ca:0c:87:ad:e7:21:b2:80:74:
3f:99:2f:94:cc:da:73:82:12:a5:6d:16:8a:3f:b4:33:8f:f4:
bd:e9:a2:12:ba:59:c9:83:02:cf:0b:2f:c9:81:d7:e1:45:f9:
74:53:cd:90:c2:a6:d0:59:e4:62:1e:9b:99:69:de:db:37:d5:
65:d6:e5:61:59:b0:1c:d5:01:b3:aa:e7:0d:be:c6:83:0d:af:
9e:a1:81:79:67:dd:3b:b6:9a:6c:ce:e0:25:64:0e:e2:c2:8c:
c6:b8:ed:17:e4:de:5e:66:70:75:a7:8b:4b:ff:19:4a:1e:e6:
5e:4b:bf:f9:c7:80:d4:27:fc:78:1e:ef:80:a6:a4:aa:b6:74:
96:61:ac:0f:4c:5b:e2:ff:dd:cc:b8:98:3e:66:04:e3:f3:b3:
94:fc:de:35:61:c2:14:33:f5:e5:e3:24:e2:4b:ec:5e:fc:d3:
20:fa:b7:65:e5:1f:f4:df:f4:b5:e8:c6:35:1e:d6:7c:de:6a:
5c:0f:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:41 2025 by rpki-client