Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: P9SFbPrcHKLCrkicbYYEHoFaMX4cnL604I/t8731oEg=
Subject key identifier: 4E:6F:32:FC:02:2F:93:01:FF:20:72:97:78:91:4E:AA:E2:84:A4:94
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 0198D472B4F340B649F24AED869B738927F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0A32
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: RFT/raOdOjMMx7FUxn8pT+/bZKCBNQKHZA95+gAbLKE=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b4:f3:40:b6:49:f2:4a:ed:86:9b:73:89:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=4e6f32fc022f9301ff20729778914eaae284a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:b9:c4:43:8b:61:cd:32:0c:49:33:99:5a:
f1:5c:cd:f3:d7:e3:a1:14:a0:ef:c1:d4:22:13:70:
30:d3:22:1f:e9:ed:ff:de:21:0f:35:62:72:ac:4a:
4b:86:bd:9d:7c:c9:d0:e7:39:a0:11:22:f3:fa:0a:
35:9d:8a:92:2f:8f:c1:f7:2f:e5:0a:62:3a:a9:7f:
95:3f:bc:ac:c4:45:d0:b4:8c:1b:76:b7:b0:09:00:
0f:00:2b:d8:1f:97:a7:2d:ae:d4:34:d6:cf:62:ec:
f4:8d:ae:c9:d3:46:71:f8:b1:eb:b2:0b:28:2f:84:
0c:2b:fe:9c:fe:23:5a:4b:5d:e2:a9:d5:0b:42:d2:
b8:4c:11:e6:44:7b:03:ea:27:4a:8a:65:d0:0e:c2:
f8:99:48:e2:8e:d3:72:8b:56:72:7d:2e:83:63:d4:
27:c0:f7:9f:ee:c5:18:ee:d0:d8:ea:d1:20:75:a9:
f1:a6:17:be:f1:08:70:7f:6c:9b:07:3f:a6:2f:6a:
93:49:6b:c3:f0:50:5b:ba:be:4a:a9:fe:ad:fc:01:
e7:eb:33:b2:df:a5:0a:81:94:e0:76:07:2d:dd:81:
40:ce:5f:55:4e:07:6e:77:7e:af:f7:00:30:1a:88:
c1:af:98:0b:b3:61:dc:19:91:e4:94:3c:0a:f8:75:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:32:FC:02:2F:93:01:FF:20:72:97:78:91:4E:AA:E2:84:A4:94
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:79:b8:49:11:fd:6c:e2:6b:f6:a0:af:68:36:f2:6e:cc:
fa:90:cf:7d:6b:ad:78:03:df:2f:5d:a0:c7:2a:12:71:31:0a:
c3:11:d0:42:fc:83:97:09:9e:ae:5a:99:20:fd:7a:50:80:17:
40:e3:dd:ab:f9:f8:fc:c7:be:e4:1c:10:8f:d3:0e:46:d4:9b:
c3:f7:40:1d:cf:11:e1:29:02:71:59:be:70:d5:f9:6e:95:a6:
4a:ab:82:09:ac:ac:77:f6:d6:de:4a:1f:00:6f:48:45:20:8f:
bc:46:bd:f6:6d:38:b4:9a:69:74:52:b3:aa:3c:71:bb:47:4e:
0d:f1:4e:91:e4:d4:c4:27:53:ff:d8:72:f2:ad:9a:c6:04:b6:
78:be:e2:54:bf:0a:a5:ac:18:6d:aa:76:e2:f9:8f:f8:84:5c:
33:b7:eb:6a:33:b0:1c:72:f4:11:d5:37:60:e9:e2:5b:6f:a9:
7c:68:fc:84:0c:51:71:ad:3a:08:c9:5e:7d:80:00:a2:fc:5f:
06:fd:67:f3:aa:7f:4f:a5:0a:e3:6c:54:09:0c:a5:ab:88:1d:
15:9a:38:eb:1b:69:65:2d:11:a0:4c:c3:c1:cc:e1:9c:0c:4f:
74:d4:f2:6c:bd:de:ee:38:fb:15:8c:36:b3:74:8b:e9:87:e1:
3c:da:5a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcrTzQLZJ8krthptziSf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz
Y2M2MjQwHhcNMjUwODIzMDEwMjIzWhcNMjUwODI0MDEwMjIzWjAzMTEwLwYDVQQD
Eyg0ZTZmMzJmYzAyMmY5MzAxZmYyMDcyOTc3ODkxNGVhYWUyODRhNDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKG5xEOLYc0yDEkzmVrxXM3z1+Oh
FKDvwdQiE3Aw0yIf6e3/3iEPNWJyrEpLhr2dfMnQ5zmgESLz+go1nYqSL4/B9y/l
CmI6qX+VP7ysxEXQtIwbdrewCQAPACvYH5enLa7UNNbPYuz0ja7J00Zx+LHrsgso
L4QMK/6c/iNaS13iqdULQtK4TBHmRHsD6idKimXQDsL4mUjijtNyi1ZyfS6DY9Qn
wPef7sUY7tDY6tEgdanxphe+8Qhwf2ybBz+mL2qTSWvD8FBbur5Kqf6t/AHn6zOy
36UKgZTgdgct3YFAzl9VTgdud36v9wAwGojBr5gLs2HcGZHklDwK+HVRzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5vMvwCL5MB/yByl3iRTqrihKSUMB8GA1UdIwQY
MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt
NjUwOTZkYmNhYzMwLzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw
LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV15uEkR
/Wzia/agr2g28m7M+pDPfWuteAPfL12gxyoScTEKwxHQQvyDlwmerlqZIP16UIAX
QOPdq/n4/Me+5BwQj9MORtSbw/dAHc8R4SkCcVm+cNX5bpWmSquCCaysd/bW3kof
AG9IRSCPvEa99m04tJppdFKzqjxxu0dODfFOkeTUxCdT/9hy8q2axgS2eL7iVL8K
pawYbap24vmP+IRcM7frajOwHHL0EdU3YOniW2+pfGj8hAxRca06CMlefYAAovxf
Bv1n86p/T6UK42xUCQylq4gdFZo46xtpZS0RoEzDwczhnAxPdNTybL3e7jj7FYw2
s3SL6YfhPNpaDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:20 2025 by rpki-client