Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: +znkSKaPSW6s/qPinLrHfkA4tiqzj0sLt4WLhL3wGdo=
Subject key identifier: 83:69:6C:1C:09:BF:22:68:8A:C0:53:9D:12:67:F2:A0:6F:59:FD:3B
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 0197C5A582C56E1C1F45D7C3E31D3E0EE87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 114D
Signing time: Tue 01 Jul 2025 11:00:47 +0000
Manifest this update: Tue 01 Jul 2025 11:00:47 +0000
Manifest next update: Wed 02 Jul 2025 11:00:47 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: 9XUSncQH9RLrgMUrgT1abF+usPnQLDVwV+2irHT5+cU=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:82:c5:6e:1c:1f:45:d7:c3:e3:1d:3e:0e:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Jul 1 11:00:47 2025 GMT
Not After : Jul 2 11:00:47 2025 GMT
Subject: CN=83696c1c09bf22688ac0539d1267f2a06f59fd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:cc:d3:f9:b4:f7:2e:b9:f0:4b:11:41:2b:
0f:32:be:46:15:de:68:51:59:fb:ed:e9:a6:e0:c4:
3c:ab:5a:8f:eb:af:bc:9c:a0:20:74:ea:0b:a0:a9:
dd:cd:5f:0f:73:ed:d3:17:6d:f7:81:71:ef:b2:32:
e5:0b:e4:bc:0f:50:a9:7b:3b:86:9b:3d:eb:d9:3e:
1c:1a:27:40:7c:8b:12:aa:4e:c7:73:33:a2:7e:bc:
06:cf:f8:7b:60:56:b4:5e:8a:a3:28:18:26:06:02:
1c:7d:9d:a4:ad:3f:73:56:d0:9b:c1:2d:93:3e:77:
ac:6d:36:e9:2f:52:68:55:21:9e:a8:c3:ec:85:a4:
d5:68:05:57:81:4b:5f:3e:1e:e2:41:21:85:ea:77:
51:68:a9:fb:e2:11:1a:3e:ac:4c:c9:38:e0:8c:7e:
7e:b3:48:13:17:8a:a1:0e:a3:ec:99:07:cd:37:94:
d8:28:bf:54:f0:b1:4a:77:5b:91:22:16:51:a0:a1:
13:b3:6a:a3:e3:b8:d3:2b:02:98:90:57:ec:93:7a:
f9:e2:ed:34:f4:47:24:fa:a4:4f:8f:36:32:80:7a:
8d:07:31:b8:72:0e:56:e0:d3:51:8b:7f:14:34:3f:
15:78:3a:3a:e6:7d:0d:64:5d:bc:1a:fc:c9:23:14:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:69:6C:1C:09:BF:22:68:8A:C0:53:9D:12:67:F2:A0:6F:59:FD:3B
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:13:00:46:5f:0a:8a:fe:22:0b:91:80:7a:65:9c:be:34:
77:3a:5b:61:b8:a1:77:54:de:e0:e1:28:ff:23:a2:e0:33:5e:
c7:28:3e:ce:47:2f:66:08:c4:78:d6:3a:ca:3a:76:fe:4d:14:
3c:e1:8f:be:13:9f:e2:6f:67:80:ca:5d:e6:aa:93:57:04:b0:
66:38:e3:51:28:8a:bd:39:4e:df:28:49:68:36:e5:1a:4e:ed:
34:63:3a:d5:af:ba:59:55:80:cf:96:c5:cc:cd:57:3d:3e:66:
75:0d:08:80:58:a6:91:a6:3d:fb:2a:92:9c:76:cd:5e:c7:4a:
2b:3b:4b:d4:56:9a:56:da:af:35:92:d3:3d:25:6e:cf:2f:c6:
c8:68:ae:8f:b7:bf:2c:34:d8:02:cb:c3:fb:0c:a7:3d:8b:a5:
fa:46:e1:28:f3:bb:55:40:ed:71:85:5c:5a:0d:bc:81:8b:45:
ea:27:17:5c:c2:4f:54:79:86:ee:15:5e:82:d0:6c:18:42:82:
e3:ba:4b:f5:cb:43:94:43:4c:26:0d:af:18:2f:cc:25:22:28:
02:cf:7b:db:21:3a:ad:25:73:23:21:cd:f7:29:3f:9a:85:4c:
9d:f4:f3:46:5d:2f:1d:51:0e:0d:57:41:78:a9:e4:f4:4d:a1:
72:12:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:03:17 2025 by rpki-client