Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
File: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft (raw, json)
Hash identifier: 8FTJbd3S6P0Q9RTx6hEFVPWlxM+SenH+S7rAhxaq9ug=
Subject key identifier: AA:A3:F9:5B:49:9F:B0:25:17:9A:7B:55:74:2B:15:C4:4C:E5:31:B1
Authority key identifier: 39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
Certificate issuer: /CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Certificate serial: 0199FDD9FAFB1891DA139FA83B75A41B629D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
Manifest number: 164A
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: 8iSreq9sFy4jQpPohIGSY5mGVho.roa (hash: JWocgKBNIhnSVWHkP0cAfvpMZaqkdklTc5KStlxqdMY=)
2: OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl (hash: /U3OzMDTBn/7937bLWXDOdOfrRmN/0PfAZWa0P+Mcdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:fa:fb:18:91:da:13:9f:a8:3b:75:a4:1b:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398f7106bed10fe7ffc65bbd64adbedc9dbd525e
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=aaa3f95b499fb025179a7b55742b15c44ce531b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:36:45:79:bf:fb:b4:24:7a:0c:93:53:d2:
7d:b0:2c:6b:43:1a:0c:e4:55:d5:e3:15:7c:fa:38:
2f:e7:f3:f7:a8:df:46:e1:6d:c7:aa:67:c2:7b:c7:
1e:78:25:51:84:11:fc:fc:48:5d:12:28:e0:c4:7f:
5f:6f:d1:75:ef:6c:a7:e2:32:ca:6c:de:db:d5:20:
83:46:84:19:36:22:c8:ba:c1:05:5c:44:cc:75:fe:
7f:78:9a:64:e1:9b:0d:ab:29:f9:87:60:68:29:8d:
36:51:7f:a3:4d:76:64:20:5a:87:5c:b8:3d:7a:36:
97:fe:62:ed:85:c3:28:da:62:3d:14:a1:bf:eb:a6:
11:5e:39:5f:24:b2:59:96:a9:8a:62:fa:d5:02:db:
99:e8:95:e9:33:50:80:cf:28:51:b7:0e:7b:71:ee:
41:50:f9:87:de:bb:e9:fa:da:dd:90:15:4b:60:7e:
87:68:7a:c8:40:e9:e5:64:45:c0:35:d3:90:67:12:
f5:37:80:31:b4:ec:9b:6a:55:7e:93:e8:04:4b:37:
cb:d0:83:4e:a5:27:d8:29:b9:86:91:f6:9f:14:7d:
54:00:c8:57:cd:32:e7:6b:25:4a:e4:24:f0:1a:97:
e9:2f:68:62:e3:7c:7f:76:1d:c8:cd:42:32:58:cb:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:F9:5B:49:9F:B0:25:17:9A:7B:55:74:2B:15:C4:4C:E5:31:B1
X509v3 Authority Key Identifier:
keyid:39:8F:71:06:BE:D1:0F:E7:FF:C6:5B:BD:64:AD:BE:DC:9D:BD:52:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f3d2f4-9263-4ece-9db3-e081a5b41432/1/OY9xBr7RD-f_xlu9ZK2-3J29Ul4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:71:21:36:43:d9:0b:7d:7a:55:fe:8a:7e:da:a1:60:c6:
35:ee:0b:ce:7e:67:75:57:43:3b:2b:ee:a6:68:04:1b:73:e4:
e8:b9:69:9b:40:91:bf:fe:99:80:d0:8b:70:b2:4c:06:5a:c7:
1a:a9:c7:cb:1d:4f:28:49:ae:ef:bb:00:0a:10:54:f4:d5:a3:
10:25:d7:5d:0e:38:6d:40:91:f4:51:99:5b:10:c3:34:89:e4:
44:dc:cd:ea:75:06:60:8b:eb:d5:bf:c3:28:1f:54:6b:14:d1:
59:76:16:3a:56:76:20:84:a8:53:78:c1:ae:9d:c7:c8:06:4b:
40:70:40:ea:13:ca:d9:1c:70:65:ce:06:46:e4:a8:50:e0:f0:
c2:40:5a:e7:17:ed:8e:f7:22:cd:34:51:aa:a7:fa:ab:e1:fb:
5c:ad:f1:97:22:e1:53:cf:2a:f5:15:b1:df:f2:81:25:b0:d2:
0a:b0:03:bf:64:c0:8f:2d:d7:d6:fd:a6:b0:91:15:ed:3a:57:
69:fc:73:3f:59:ad:7b:75:80:c0:2c:d0:bf:bd:66:be:68:48:
b5:79:64:78:b3:16:c4:fa:c7:fc:e4:34:d4:64:58:26:4f:3d:
84:cd:c0:4e:55:90:23:e4:5d:d3:48:30:9e:d6:6a:4f:96:b2:
bb:b6:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:29 2025 by rpki-client