Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: GbvxDDbHO9Wy3QD+7NWeHvi4pOtBPMTTY9tMwwqtHMA=
Subject key identifier: 9A:80:7A:7B:27:E1:EB:67:09:03:04:FA:38:9A:01:14:3D:84:0C:57
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 019A0110DA17DC40C3FE30CCA36783EB7E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 10:01:12 +0000
Manifest this update: Mon 20 Oct 2025 10:01:12 +0000
Manifest next update: Tue 21 Oct 2025 10:01:12 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: kOdUd0BJh7m4b0s0dCs4QgMWNUQ.roa (hash: tZ3TxxDR2EXxSPIMDVq3TJt9N6UyL2XMXlm7RgpGHLk=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: WeqMDkzai4p/fC8ju36oAMbyy4YfJCPAkzlnWhwigiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:da:17:dc:40:c3:fe:30:cc:a3:67:83:eb:7e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Oct 20 10:01:12 2025 GMT
Not After : Oct 21 10:01:12 2025 GMT
Subject: CN=9a807a7b27e1eb67090304fa389a01143d840c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:3c:bf:81:74:ad:ca:75:04:16:36:55:b8:
10:d7:c8:0d:1d:39:dd:18:5c:9e:5f:47:d4:66:45:
8f:c2:ad:e9:de:31:e8:07:d2:b7:b5:68:f6:fd:71:
d8:f5:72:53:dd:92:78:c7:5d:3e:a3:34:be:f9:c7:
34:1a:15:08:b7:19:40:7d:27:b3:29:18:c0:c6:67:
82:3e:90:9a:c4:99:32:f4:cc:be:c6:eb:d7:08:be:
e5:af:63:48:9e:f9:c8:53:3e:9f:fd:69:2b:55:91:
f5:ee:54:68:94:eb:c9:2e:6a:fb:38:46:42:43:41:
87:8d:42:38:dd:8e:26:6c:1e:7d:cc:12:7e:c2:fb:
6e:60:88:5b:9c:15:60:c5:8d:34:af:ec:07:78:4a:
46:31:5e:53:f6:6f:c9:36:f4:96:f3:2e:dc:f4:c1:
42:97:3b:8c:40:b4:00:89:ea:e3:89:b9:3b:30:b6:
c7:62:04:c5:49:99:2d:cc:20:75:e3:c4:45:53:3b:
ba:ee:29:b1:71:27:52:d8:bc:06:d9:61:58:29:89:
f5:3b:48:a9:f1:63:2c:70:e8:48:1c:12:2a:fb:6e:
41:ed:2c:52:b6:9b:61:60:f8:47:31:73:bb:9a:40:
c5:49:5d:d4:6d:63:07:3a:b2:01:8d:da:c5:c5:43:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:80:7A:7B:27:E1:EB:67:09:03:04:FA:38:9A:01:14:3D:84:0C:57
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cb:86:81:52:f5:80:1a:dc:77:dd:b7:01:93:29:01:ec:a6:
5d:8c:98:b9:b8:6b:8a:de:3c:cf:15:25:9f:09:28:9a:16:22:
aa:f3:67:75:c6:51:08:6f:7e:bb:ee:f6:ff:85:23:c1:44:36:
04:49:95:e1:a4:8e:83:57:79:b8:b0:e7:fe:c4:c8:9f:a5:1b:
5e:93:ea:9b:e5:21:3f:a0:3f:8d:d3:67:17:37:97:b1:30:cb:
31:2a:95:ce:fe:97:7b:4b:d9:bc:9f:a3:65:d7:2e:60:ea:aa:
25:7f:80:da:27:ad:80:bd:78:af:c1:fb:f4:ba:22:42:81:d8:
9e:75:96:f8:e2:22:ca:b6:9c:eb:76:1a:e5:cb:33:3f:02:f9:
34:6a:fc:1d:e7:a4:79:46:1b:37:69:9e:93:85:20:c2:bb:29:
c5:b0:a2:9d:5b:43:d5:1e:18:28:30:ca:ae:bd:a1:3f:18:7e:
1b:7b:0e:78:c7:18:c1:16:4a:95:ac:5d:1e:0f:e2:0b:1d:2f:
26:62:33:0e:17:09:5c:70:3c:6c:9c:98:d1:23:d5:d5:7f:86:
e6:63:36:1e:d3:21:91:8c:94:8e:13:7b:3e:ca:ab:f0:38:1a:
17:4c:36:a9:54:25:96:ab:5b:e5:57:b3:2f:ea:c4:ac:91:63:
8d:c2:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:13 2025 by rpki-client