Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: hpsDtKOMGkBrmzppcGj2UzHkjNqVNK3VK6NXyk9naCE=
Subject key identifier: 02:2F:62:64:28:39:64:87:46:D8:4D:4C:06:CD:C4:1C:53:AB:98:41
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0199FBEACABC0E4465092FEBF88545283420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: evjqQGQt8AudEkPlStS1ySepGerG9eRUufs8nbjCRUI=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ca:bc:0e:44:65:09:2f:eb:f8:85:45:28:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=022f62642839648746d84d4c06cdc41c53ab9841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:3a:2b:5f:22:34:0f:5f:81:d8:be:1f:d8:
63:ea:08:b1:1a:53:4e:99:18:d2:ef:cd:d6:2f:61:
58:d5:29:8e:07:7a:c0:2e:3d:f5:ee:91:5d:fe:3b:
a8:79:b2:4f:45:27:11:31:91:e7:33:35:75:86:da:
71:1b:2e:fd:5f:3b:74:cc:1f:fc:80:b5:57:a7:74:
4b:da:5c:8a:25:45:dd:a9:8f:af:96:e1:fc:ad:90:
0b:48:84:c7:81:20:ea:26:f2:56:b5:d8:fd:95:77:
41:a3:c7:c0:93:c0:bb:d3:f2:ac:60:b6:97:1d:f6:
ee:f5:bc:40:88:c8:4c:88:00:0f:24:cd:93:40:dc:
66:02:e4:80:84:12:b6:ef:e7:c2:d3:cd:8e:b3:9b:
7e:35:3f:b3:12:f0:94:9d:ac:83:77:30:b0:a8:44:
71:29:72:74:09:f7:06:fd:b4:b8:48:d0:19:9b:e1:
db:84:24:6e:06:d5:e4:d8:e8:d9:67:c9:a7:8a:33:
63:51:64:ea:9b:44:8e:44:af:2f:de:ce:d7:13:55:
22:33:52:6d:58:c9:55:ca:64:a0:7c:11:e8:e7:8b:
07:ef:1d:3f:f7:f8:04:e1:12:d4:3a:03:6d:bc:6a:
63:53:17:5d:fa:02:51:49:bb:81:8d:40:5b:f4:40:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:62:64:28:39:64:87:46:D8:4D:4C:06:CD:C4:1C:53:AB:98:41
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:40:34:4f:54:62:eb:e0:0a:6d:2e:64:ab:45:36:94:9f:59:
17:a7:5a:29:61:b2:58:13:88:5a:c6:31:c7:e9:96:e0:33:dd:
5e:1d:7e:46:66:50:46:58:ee:57:19:5d:0d:81:82:e2:7c:51:
89:b9:3c:9a:cf:08:54:61:5f:17:16:89:0a:b7:e7:12:03:4a:
48:93:b4:b2:fb:54:62:dc:b3:bd:5d:58:09:b1:a9:e5:3d:c7:
d2:85:1c:c2:95:03:30:23:00:f9:0d:1e:9c:ce:72:61:09:d2:
d6:e1:7c:c2:fe:ba:0e:c0:2a:ab:39:16:94:24:dc:9e:63:6a:
7c:c7:38:d9:43:52:7d:b1:3d:a1:6b:ef:57:59:6a:67:1c:a4:
b1:42:f2:16:dc:da:27:18:43:05:89:06:1e:49:19:0b:8d:d7:
b5:fb:32:63:bc:4a:43:4c:13:e3:4d:a8:77:63:b8:cc:d4:0f:
03:7d:ee:4f:6f:cd:53:78:61:29:35:b2:49:d4:ef:91:eb:ec:
74:6e:93:d4:0f:f8:37:0b:62:be:22:1f:98:82:f1:b4:26:81:
69:fd:b9:e2:cf:8c:d8:b4:72:77:fe:2d:d5:d8:91:8b:2b:d6:
99:53:18:33:e9:16:9e:df:f8:d6:84:ec:26:df:a4:58:7d:b6:
29:c6:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:14 2025 by rpki-client