Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: 4VNBR2GxGimhyWht+vH6AdRhaxHle3nVvT8Ln0b0BPg=
Subject key identifier: D3:CA:9E:FE:83:38:D9:34:C1:B5:B4:26:15:D1:A8:AF:D0:C0:7C:1D
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0198D473CC68FB222EB0B2E2AEAAC20CF986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 01:03:35 +0000
Manifest this update: Sat 23 Aug 2025 01:03:35 +0000
Manifest next update: Sun 24 Aug 2025 01:03:35 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: I2+23NMdYtcEE+JfAkr9D4ZV0d9WU+LL/YomE4pcgBo=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:cc:68:fb:22:2e:b0:b2:e2:ae:aa:c2:0c:f9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Aug 23 01:03:35 2025 GMT
Not After : Aug 24 01:03:35 2025 GMT
Subject: CN=d3ca9efe8338d934c1b5b42615d1a8afd0c07c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:82:51:aa:ce:6b:97:03:2a:8d:56:09:2a:
87:e1:9e:ee:3e:da:80:a7:0e:e4:db:87:3b:3c:f3:
e7:16:19:6c:cc:46:b8:59:8e:2e:24:80:54:ad:56:
7c:59:58:cd:5d:e8:82:fc:66:aa:14:f7:00:e8:a5:
c5:18:6f:55:c6:b0:9d:6a:56:ce:51:14:d3:d1:7c:
8b:7f:12:db:3a:ad:ef:e8:53:f8:42:27:0c:16:ac:
d7:c0:a0:2e:b7:8c:18:df:72:b4:37:9f:f2:0b:6c:
4d:0e:25:c6:ac:59:04:22:ed:40:01:47:8c:2e:aa:
65:bc:de:b9:cb:e1:04:d3:de:a0:35:f1:75:36:d8:
53:61:5d:86:ef:60:6e:dd:9d:87:d5:70:c2:c0:b0:
3d:7b:0b:11:1f:8c:08:e7:13:6d:6a:0f:a3:ca:95:
80:ac:5a:46:7c:b1:ff:f5:7c:bf:0b:92:dd:42:e3:
43:e8:21:59:9c:2f:8a:47:ba:5e:6d:ee:4c:f0:0c:
b0:76:ce:8d:f2:43:fa:76:c2:66:35:30:ba:33:cc:
68:ad:3a:3e:41:c5:d8:62:f2:b5:f9:f1:f1:24:90:
f4:c9:e1:ef:95:1e:31:2f:5b:47:7c:aa:74:17:2e:
1a:d1:3f:a4:b8:3f:50:7f:67:ea:40:2d:81:39:fb:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CA:9E:FE:83:38:D9:34:C1:B5:B4:26:15:D1:A8:AF:D0:C0:7C:1D
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ad:00:f3:e2:f0:c5:af:ca:ea:2d:81:67:82:a7:53:d6:5e:
77:1e:f3:75:8d:b3:2f:4c:0b:ec:df:85:72:87:ce:f0:51:b9:
67:91:8d:d6:42:62:21:e8:87:f8:1e:ce:f9:50:d5:46:25:5b:
24:50:dc:e0:14:8b:25:bb:cb:73:70:dd:72:b3:97:01:64:36:
9a:18:db:46:0c:76:4b:41:61:06:d6:18:7d:9c:36:3f:fe:81:
fb:af:6a:0e:ba:f8:67:24:d1:36:c1:92:61:ba:72:de:2a:38:
f7:05:16:f5:94:34:bd:1b:6e:cb:9e:6b:cf:36:fd:e4:dd:50:
d1:45:c3:59:11:44:91:4f:60:3a:c2:3b:59:e8:9b:7a:a2:d4:
e7:80:e0:77:fc:da:4a:84:e9:8e:02:c9:a7:03:5e:9b:61:bd:
1c:cc:40:76:66:f7:b8:65:bb:a6:53:ab:c2:2c:7f:4d:b8:31:
ff:88:80:66:6d:95:5c:1b:0a:45:9c:b4:53:21:a0:2d:c8:ae:
09:35:e6:4f:34:b2:e0:e9:72:6f:56:1e:fe:dd:a9:52:4e:6e:
8f:be:af:5a:83:57:77:1e:03:0c:e8:73:01:57:42:49:4b:ad:
ff:78:35:96:49:8c:91:89:84:af:22:e6:53:4b:47:7c:e5:51:
8c:64:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:49 2025 by rpki-client