Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: dwYesWbFcjnKQ1jMoswkvsyJC6mSqLdg4XHLt2cJB9A=
Subject key identifier: 9C:3D:08:31:46:58:77:3C:0A:E2:38:69:EC:72:F1:2B:CB:83:D8:D3
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 0199FDDA34C248C1733EE7C0C4D2151F3AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0ACC
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: +Q5XwqkPLQOxHGTBKeb0FUAuNOiIumq6NDYEwEA4W9Y=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:34:c2:48:c1:73:3e:e7:c0:c4:d2:15:1f:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=9c3d08314658773c0ae23869ec72f12bcb83d8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:78:40:0c:e4:41:86:e8:8c:92:54:40:1b:
55:6d:f3:de:c6:e7:6b:19:65:67:20:cb:25:8b:45:
45:a9:c2:65:50:3b:1b:28:db:73:92:e6:1a:65:41:
ba:85:95:a8:56:be:0b:7a:49:1e:e5:94:bb:cb:99:
35:c8:1d:0f:a7:aa:07:a5:87:47:31:1b:ac:66:51:
a6:65:3a:ad:be:e7:5d:cb:ea:49:fa:23:d4:09:c0:
dd:10:5e:00:3a:f4:32:1b:a7:ba:6e:8b:8c:7b:88:
1e:56:29:10:c1:c5:1a:ea:4e:58:04:e4:54:fe:7d:
d4:d7:0e:fd:6b:b6:cb:d7:eb:69:fa:e9:95:b7:3b:
33:a4:96:15:ed:88:59:ad:1f:b8:56:67:4c:2e:01:
f8:a1:2e:24:4b:53:e7:10:9b:c9:03:5f:4f:d4:c2:
d6:74:c0:13:b5:20:89:30:53:96:cd:7e:e9:eb:f3:
ae:50:79:fd:56:e9:fb:f8:1e:59:ed:40:9d:e4:2f:
46:bf:24:7d:91:b4:95:33:ec:ea:54:73:27:e2:19:
8b:33:ae:c7:0c:f0:b2:e0:06:62:f5:19:6e:3c:fb:
64:6b:dd:ce:e9:36:3c:69:ca:10:61:58:f0:b6:44:
1a:69:35:6b:2c:0f:45:09:43:10:fb:a6:b6:d4:8a:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:08:31:46:58:77:3C:0A:E2:38:69:EC:72:F1:2B:CB:83:D8:D3
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5a:fa:c9:dc:bd:3c:7e:9d:c8:2b:6c:aa:fe:83:80:37:0e:
cc:0f:ef:2c:4c:8e:2e:0f:26:25:d3:b1:f5:af:f8:a1:aa:bf:
63:dd:e7:f4:d9:2b:18:fd:7b:25:51:fc:1a:94:88:ad:ef:f2:
4d:3c:fc:05:aa:0a:19:1a:c9:7f:90:66:f4:f5:3a:c7:2e:8e:
42:8b:b7:44:0f:64:3e:fa:c3:88:5b:01:bb:f4:46:bd:3e:38:
66:8d:6b:08:6f:f0:a4:41:f0:d0:03:4c:a3:31:d3:bd:59:22:
aa:57:ea:e6:bb:54:79:3d:f7:50:c6:e6:d4:94:79:65:5d:23:
8e:73:4d:a5:ea:bf:15:67:9a:d7:01:0a:af:2b:e5:87:83:4c:
9f:37:ac:47:9f:d0:27:62:43:fb:18:25:cd:54:e8:8b:09:f3:
c0:a5:9c:e7:00:15:2a:f7:67:de:61:20:fc:c2:b6:98:4b:fc:
32:52:7d:e9:5a:c0:fd:26:38:e5:92:6a:e5:54:2b:10:d4:c0:
50:7d:83:ef:c6:63:1c:80:27:19:00:05:62:dd:88:26:39:96:
c4:b2:9e:7f:85:27:fe:04:99:1e:9e:dd:2e:63:95:cc:36:86:
50:ad:cc:d1:07:b7:aa:85:b8:6a:14:e7:ff:df:2e:41:59:b3:
c7:b5:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:02 2025 by rpki-client