Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: J6p5+ZB/wbtwzcbNuDQJoJcTA49CIVftWCXR7GmGZxo=
Subject key identifier: 34:87:25:92:1A:21:E2:61:3C:92:47:39:85:E0:CA:65:67:79:6C:2A
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 0198D515DCDD798DF49C4C94DB3F0289341C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: lHfzRz7lqEKbHsj/rsyauoTw+cvNQP2X0Zqnpa9j9Ls=)
2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:dc:dd:79:8d:f4:9c:4c:94:db:3f:02:89:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=348725921a21e2613c92473985e0ca6567796c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:52:e6:bb:2a:02:92:d4:fc:35:03:e0:42:
e2:c0:f4:31:38:18:d1:5a:7c:d6:18:1f:fa:77:b0:
96:27:50:3e:86:cd:b3:f5:b5:0b:4c:3c:a7:87:a4:
b6:7c:99:cb:b2:e6:07:0f:af:29:b2:9f:d2:56:64:
29:0e:ca:07:8c:b2:c0:e1:40:d1:20:0b:e9:29:b8:
41:2c:f3:4a:64:52:22:2a:99:fa:bc:22:b6:48:1d:
2d:f9:ae:54:77:b1:fd:a1:d4:19:d1:c0:a4:78:ae:
1f:74:38:ee:f1:70:a6:d1:8b:f8:bb:ce:60:7b:8e:
5e:94:86:76:4c:06:a6:a6:74:06:4b:c1:a2:07:8b:
85:5f:2c:dc:c0:fd:ed:02:dd:d4:22:a0:e8:dd:b7:
8d:be:35:a1:6a:40:9b:01:70:4e:4d:1c:ef:d0:8c:
75:69:4d:44:f9:19:52:a3:d9:0e:69:21:a3:94:fc:
5a:ef:48:2c:15:a2:f9:44:e5:03:68:fa:f6:bf:db:
e2:8f:e5:59:f8:50:9d:c1:de:6e:ac:05:ea:47:a3:
5b:b7:00:a0:8f:78:db:bf:30:e3:78:ae:2c:08:64:
51:05:7a:da:06:ee:3b:a6:d1:3a:f5:6c:de:08:7b:
37:45:8f:56:eb:c7:95:e2:08:bd:93:6e:ba:de:ef:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:25:92:1A:21:E2:61:3C:92:47:39:85:E0:CA:65:67:79:6C:2A
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6b:c2:de:bb:e3:31:a9:f2:43:9a:e7:3f:51:0d:a0:65:78:
6c:19:c3:1e:ca:cd:0d:73:cb:5c:61:6a:a3:06:a0:44:27:2f:
94:bc:6c:11:13:6c:36:44:80:f5:47:08:a9:f2:f1:20:3c:ff:
54:fb:29:51:83:49:75:89:fb:2d:74:42:09:8c:e0:a3:89:1f:
4f:52:3b:55:23:52:be:82:d9:fc:5a:47:a5:ff:87:c0:c7:8a:
41:82:0b:d6:f2:4b:82:fd:6e:8b:93:61:2a:5d:b5:33:45:4d:
98:38:c5:83:90:81:8f:1f:29:14:d7:b0:49:9b:d6:2a:20:7c:
bd:b6:85:7d:cf:65:05:51:66:e2:40:ad:3f:88:ef:2c:87:2c:
64:03:2b:16:6f:c6:bc:f4:2b:64:8a:15:be:33:3a:b1:2c:b2:
c6:f6:20:f0:5a:a0:eb:48:d6:1f:0a:6c:ce:ea:44:f9:d9:81:
2c:ea:5a:95:fd:a6:88:f5:4b:55:57:3d:52:62:a8:f3:07:81:
18:de:eb:15:43:cc:2f:6f:de:3a:4f:66:cf:79:72:d4:ad:24:
49:bb:ee:6e:d2:e4:d4:e4:ef:31:da:83:50:d5:dc:be:ec:4a:
bf:77:19:d6:24:f1:e2:a1:af:b2:a7:72:70:ea:3b:d3:dc:96:
f7:e4:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:26 2025 by rpki-client