Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: ucU7N8/VnjbsjfMKI5nlw9lBwr7x9eGeeZP2ITjb0Xo=
Subject key identifier: 3F:25:FB:40:5F:61:52:76:F8:A7:AE:74:22:02:F8:A7:0D:EB:86:3A
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019881673A210F9CF2EE68E99045FB6906B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0A07
Signing time: Wed 06 Aug 2025 22:01:22 +0000
Manifest this update: Wed 06 Aug 2025 22:01:22 +0000
Manifest next update: Thu 07 Aug 2025 22:01:22 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: 3BJQSpLA3u1/gKMmkchJCjbx0F20f8VzIL4dlOPym5o=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:3a:21:0f:9c:f2:ee:68:e9:90:45:fb:69:06:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Aug 6 22:01:22 2025 GMT
Not After : Aug 7 22:01:22 2025 GMT
Subject: CN=3f25fb405f615276f8a7ae742202f8a70deb863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:b0:f3:70:93:38:31:5d:dc:6e:48:55:d1:
ac:46:8e:e2:a5:c8:a4:1a:b6:d2:a9:03:87:33:7d:
a5:e8:fc:a6:5f:92:e8:83:0b:4d:0a:45:96:b2:a1:
6b:ee:6f:f8:9a:b8:bc:24:6a:5f:13:1d:f9:fb:a7:
e7:72:df:e7:72:23:fd:4a:d0:7c:72:e0:6a:0b:1a:
ce:99:4d:67:ca:13:bd:a7:02:fd:74:68:4b:47:e5:
73:b5:cd:71:bf:00:69:99:7a:7e:28:b7:68:2b:26:
a4:f1:82:f6:ab:8d:1e:c5:3c:7c:6f:f4:cc:00:fa:
99:67:08:5c:b7:c1:c0:0f:3e:c6:e5:b4:ea:44:2b:
34:53:ce:f0:5c:8c:e4:ab:66:08:5f:43:07:2e:d1:
da:19:7f:c6:7d:ec:8d:8e:7d:26:45:84:ef:b5:4e:
08:87:0b:fc:88:81:91:8f:13:52:99:dc:8e:59:ac:
a1:9a:c1:a4:c6:91:ef:97:7d:f4:bb:6e:7d:e5:c9:
e6:09:4b:b6:37:90:4b:ca:20:1b:d8:47:1b:7d:b0:
be:a8:f9:18:64:4f:77:a7:14:f4:0d:3c:46:a4:3d:
46:2e:11:7e:45:4a:06:b0:47:ef:09:f9:5e:2f:80:
b6:22:29:4a:9b:99:b0:34:fd:9d:fc:14:ec:3a:a3:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:25:FB:40:5F:61:52:76:F8:A7:AE:74:22:02:F8:A7:0D:EB:86:3A
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:af:02:2d:51:13:be:0a:b1:05:a3:9c:9a:b4:43:24:c9:f4:
d8:01:b6:5c:04:d9:bc:7b:0c:73:79:b4:d6:34:c2:93:27:63:
54:15:f1:62:25:6f:c4:19:18:d9:ff:c1:de:1e:66:f9:76:37:
3e:66:ce:73:cf:ea:59:ef:81:e6:ee:72:2d:21:1e:bf:38:ed:
8c:10:a0:41:9c:98:b9:ab:f4:7a:8e:a9:9f:7b:fd:4b:ae:2b:
bf:33:27:23:7e:17:69:d5:c3:65:00:06:4a:b8:e6:71:af:69:
a5:3d:82:38:b2:f7:b9:99:32:81:b2:26:04:38:08:5a:a6:aa:
e1:45:81:94:ba:23:06:30:1a:d2:3a:b9:0e:87:cb:77:e4:b0:
0a:2a:dc:30:96:5c:3f:2a:e1:9e:b3:0e:32:87:2e:91:a4:41:
70:66:5d:0c:60:8d:86:bd:70:b5:ec:12:7c:52:9e:17:2b:92:
ee:95:27:d2:1d:df:01:f8:29:75:a4:1b:88:9b:12:dd:34:ee:
4a:20:ce:8d:46:ac:6d:a8:0b:25:03:b4:16:90:f9:87:0d:50:
7a:c1:7c:54:12:d3:4b:93:be:20:d6:8a:1f:10:c2:1f:65:a0:
98:19:26:61:29:1c:95:b8:1c:81:36:23:61:cd:36:99:ab:b4:
b0:74:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:44 2025 by rpki-client