Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: Om/gpRqWty8Oht8OH+0AOyaSDXwIEiTbtMNRDPHpVgU=
Subject key identifier: 53:44:8B:0E:D4:4B:B2:9B:77:A9:35:F5:57:2C:10:E2:B6:5D:7F:83
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 0198D4DFFC313E7760391BBABCE4FFA97759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:45 +0000
Manifest this update: Sat 23 Aug 2025 03:01:45 +0000
Manifest next update: Sun 24 Aug 2025 03:01:45 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: fxdP3A4WCh4Dlaf3gdgZO22JkBB7/7+9wsd93raRZUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:fc:31:3e:77:60:39:1b:ba:bc:e4:ff:a9:77:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Aug 23 03:01:45 2025 GMT
Not After : Aug 24 03:01:45 2025 GMT
Subject: CN=53448b0ed44bb29b77a935f5572c10e2b65d7f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:95:43:6d:08:09:c9:81:49:52:11:5d:45:
98:5e:ff:f4:0e:53:07:7c:9d:8f:fd:df:7f:24:a0:
16:40:4e:94:d0:79:94:ca:c6:7f:06:47:82:bc:60:
72:64:7e:fb:52:e0:00:83:32:81:04:6a:42:f4:c5:
bf:72:50:06:58:e5:ac:57:75:25:65:a5:53:02:e8:
15:5b:30:d1:35:d9:1c:51:46:fc:53:89:05:97:68:
eb:00:7c:53:ed:49:78:5a:e2:1a:e0:df:dc:a3:02:
d3:63:fb:b0:23:9f:af:c2:5b:dd:03:4b:ce:b7:4b:
2e:fe:3a:4f:c5:dd:a0:9d:80:ed:10:8a:cd:d0:5d:
bd:e8:06:5e:97:aa:89:41:49:7c:06:2a:06:16:44:
7d:e7:d9:f8:a9:92:0a:e6:1f:0e:d5:ff:ad:2d:6b:
1a:ff:40:a0:58:4c:f9:1f:3e:ad:80:76:56:93:e0:
35:f2:c4:50:c5:c2:cf:5e:96:78:2a:b7:dd:f7:e0:
98:a6:e9:03:91:b6:19:a0:47:fb:6a:bc:94:42:a9:
a8:fc:e0:32:1e:5f:02:2e:3d:8b:a4:e0:05:93:c3:
e2:5b:fb:13:bc:ec:ec:18:d3:23:42:2b:97:07:e3:
4e:ef:3b:5d:a1:4e:94:b1:5b:45:9e:78:85:49:96:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:8B:0E:D4:4B:B2:9B:77:A9:35:F5:57:2C:10:E2:B6:5D:7F:83
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7f:f3:5b:f5:1d:78:c2:01:15:b8:30:52:4e:89:9d:78:73:
98:28:9f:12:e9:3f:8d:36:03:0f:e4:49:77:89:9a:4c:57:7c:
ef:6e:e5:92:07:df:4e:55:cd:14:cf:ec:58:de:16:28:6f:c1:
4d:a3:29:aa:60:d6:a6:cb:51:08:07:ff:c5:63:c7:3d:ba:c9:
c0:dd:68:58:43:25:da:0e:17:38:80:73:e6:38:5a:89:be:dc:
5f:5f:45:11:01:34:7f:2e:b8:e7:24:65:ef:14:77:7a:97:0b:
1a:65:ba:44:1f:66:d7:51:3d:9a:86:ae:5c:c5:31:49:b8:54:
16:2a:65:ae:47:ff:ac:f2:4f:f1:44:80:40:35:20:49:03:95:
cd:37:9b:96:6f:68:e9:94:31:2d:59:13:90:52:c0:3c:2a:e3:
a6:6b:45:c4:f2:15:b2:0d:5f:58:38:e9:23:ed:fd:d9:95:63:
80:21:a4:6a:85:ce:3a:90:e1:49:87:b0:f6:3c:c3:a3:28:bf:
5d:73:d3:49:83:b6:3e:bd:76:7c:74:69:e7:b1:6f:dc:fa:1f:
ce:4b:7f:2e:a0:1f:55:e7:5d:3b:2f:3b:23:1e:7f:92:be:10:
0a:65:f7:27:9e:60:08:a0:84:00:e4:98:3d:9f:52:f1:81:69:
39:0d:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:43 2025 by rpki-client