Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: utytNjcKmIxUVwetHEJyoqV5JK8Wb7lOE5WhJdZ4XkM=
Subject key identifier: 5B:01:E4:89:13:EC:DC:DD:BD:6E:D5:2B:3E:20:7C:35:92:AF:DB:79
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 0198D4044994257475C1E0EAF7B25D9E4B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 11D9
Signing time: Fri 22 Aug 2025 23:01:47 +0000
Manifest this update: Fri 22 Aug 2025 23:01:47 +0000
Manifest next update: Sat 23 Aug 2025 23:01:47 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: Tb+e8OVhias9js6afyHx3okaj5qpN6Lhj+XP3AuAshk=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:49:94:25:74:75:c1:e0:ea:f7:b2:5d:9e:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Aug 22 23:01:47 2025 GMT
Not After : Aug 23 23:01:47 2025 GMT
Subject: CN=5b01e48913ecdcddbd6ed52b3e207c3592afdb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:a1:79:a4:7a:6f:56:5e:7a:f3:d6:25:bd:
5e:10:18:74:50:40:f8:75:a2:6e:1f:29:9e:5e:8f:
0e:0e:a6:34:cc:32:93:d4:17:20:a5:07:4e:a7:2f:
9a:30:36:0f:1b:bf:76:fe:2b:06:32:f3:e3:38:09:
d5:6e:03:8c:82:7c:85:0e:07:84:1e:28:f6:a6:05:
37:06:eb:22:f6:93:46:4b:a9:d1:2e:9d:a5:58:2a:
50:dd:c5:c8:6b:f8:c2:9c:62:b3:33:e5:80:7a:f2:
69:8d:fd:94:7c:ce:70:c2:f6:10:76:77:fc:95:45:
09:79:ce:08:02:8d:c1:fe:27:6c:fd:51:0b:2e:6c:
4d:63:3c:f1:de:f6:f9:a8:c0:d8:91:4b:f1:8c:b5:
2a:75:f1:d3:04:be:0b:96:84:d7:d4:71:da:5f:34:
da:10:12:9a:bb:8c:a2:d8:54:0e:e8:06:01:89:af:
fa:64:71:db:f2:b8:3f:a0:b9:cb:5a:f6:34:1e:ca:
a6:5a:a4:48:20:af:68:fe:3b:9c:9e:ab:c1:50:d5:
d3:62:fb:8f:a0:14:99:7e:04:81:a3:92:72:c6:ca:
5b:73:ec:ed:7e:7c:df:97:6f:a7:c6:3f:9c:44:66:
43:78:73:63:b7:56:c7:bc:3d:12:36:38:c5:bd:4d:
b2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:01:E4:89:13:EC:DC:DD:BD:6E:D5:2B:3E:20:7C:35:92:AF:DB:79
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f7:29:e4:f5:96:d8:87:b0:36:4c:6e:1d:2d:81:36:35:d9:
92:30:38:b4:83:e8:22:98:fd:16:bc:ab:7d:9f:ed:b5:10:78:
c7:9c:a2:5a:f4:ab:21:fd:c2:f2:ce:6b:d9:87:d6:03:cd:12:
4f:77:2b:17:62:77:00:c6:23:f5:ac:a7:d6:ad:7c:fc:87:f1:
a2:3f:0e:45:89:51:42:4a:2b:59:62:46:36:b8:92:c0:04:f4:
d9:0e:38:12:68:8d:55:98:0e:19:7d:bb:58:e8:3f:5d:96:4d:
a6:ef:22:68:57:ad:2b:a7:73:50:04:b1:e1:58:d2:47:9d:21:
ac:55:d8:94:fd:f8:f7:75:fd:ab:e0:7a:fe:68:db:18:03:94:
cb:ba:2a:c7:f8:b7:06:cb:9d:ed:81:0c:f9:15:fa:7b:93:20:
31:ae:bd:d1:2d:c5:7c:78:34:62:99:f2:e9:96:1b:58:79:ba:
2a:f0:fc:fb:07:53:48:57:8e:13:7c:67:e4:48:98:62:87:a1:
5c:ba:5b:b6:d5:4b:d0:2f:8a:69:2c:79:fd:bc:17:1d:67:8d:
ed:da:91:63:08:7d:42:41:6d:3a:c0:81:49:f6:bd:41:76:bf:
bc:33:93:4a:c2:18:9b:96:d8:35:8f:c9:40:cf:f4:25:3d:ee:
63:1a:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:38 2025 by rpki-client