Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: 82SfrIjIqoMwCXP3DMvhKnt/r90cj8I5eQ9dH4PVekU=
Subject key identifier: 6D:FD:64:32:E1:B1:69:D2:36:7A:99:2A:D9:9E:5E:FE:71:16:12:7F
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019A50E283C2C52238A2118203B74DE41542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0AF7
Signing time: Tue 04 Nov 2025 22:00:13 +0000
Manifest this update: Tue 04 Nov 2025 22:00:13 +0000
Manifest next update: Wed 05 Nov 2025 22:00:13 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: GDAc7uwNBAWeDp29zzq6CE1EAQFIwPQp8ZosIf89kFo=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:83:c2:c5:22:38:a2:11:82:03:b7:4d:e4:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Nov 4 22:00:13 2025 GMT
Not After : Nov 5 22:00:13 2025 GMT
Subject: CN=6dfd6432e1b169d2367a992ad99e5efe7116127f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:37:8f:cf:01:5b:f8:24:9b:88:75:a8:61:
2a:53:b9:53:82:81:22:5d:b4:f6:af:33:fb:39:da:
e7:d7:81:b3:55:36:28:48:56:b3:34:6b:a3:e2:cf:
4d:f2:23:6e:a6:db:2a:17:1f:1b:83:95:28:84:28:
0c:88:2d:68:9f:10:1b:4a:07:a8:fc:cf:4a:a9:ee:
41:fd:ed:a2:a6:a7:8e:c9:f8:bd:c3:f5:f0:f9:05:
ee:34:09:5e:67:32:48:6d:53:27:40:55:27:0b:70:
b8:ec:40:a4:0c:23:67:8c:00:f6:9a:19:61:f0:d5:
2e:99:94:3b:f9:4e:c8:85:aa:8a:a8:06:55:e1:29:
42:6f:fc:59:bb:b3:00:51:7d:f0:bb:5d:9a:3d:d8:
28:96:e5:6e:77:bf:3e:ee:e2:bf:c5:e1:07:a8:b0:
7a:d6:46:9b:18:b1:ac:8d:33:f3:54:02:29:2a:e8:
f9:b3:d8:84:3d:42:7b:60:72:3f:a8:58:85:2d:f4:
af:8a:e3:b2:5f:8e:c2:d5:ca:57:b2:a9:95:18:76:
72:6c:87:65:2c:4c:56:ea:e0:8d:7d:6e:0a:93:a7:
ae:cb:c1:da:48:b4:e3:4d:0f:00:00:d6:58:47:de:
01:50:8f:8e:2d:d3:82:80:62:e7:88:5b:8e:e8:73:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FD:64:32:E1:B1:69:D2:36:7A:99:2A:D9:9E:5E:FE:71:16:12:7F
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:c0:c1:8a:f2:84:09:8d:23:92:9c:de:19:e2:e8:a0:f9:
ee:bb:db:a4:eb:27:29:62:41:35:d4:ed:44:a1:a2:b6:20:eb:
c4:72:8c:87:f1:b2:35:4d:e9:1e:f7:58:98:fc:5d:ef:7a:36:
82:de:58:2c:59:c3:79:c7:e3:84:07:75:34:76:1b:2a:f0:1b:
60:47:50:b9:1d:d6:3e:8f:6a:a1:e0:3d:fe:2e:5c:36:0b:0b:
25:96:fc:26:91:36:f6:41:04:69:44:de:3c:7d:93:37:70:2b:
68:fc:9b:53:cb:9e:73:1e:aa:83:e8:7a:a4:d6:49:b0:99:2f:
2a:00:25:c0:6e:2f:4c:69:ea:ec:c4:b1:b6:44:20:46:e5:fb:
8b:9a:59:12:cd:be:24:bb:9a:d3:66:f5:ce:9e:d7:34:3b:64:
3c:26:6a:e1:63:ef:f9:82:27:9b:76:33:8d:75:f3:a6:a8:a0:
46:a4:a1:12:f0:f5:6e:60:ff:b8:04:aa:1b:79:00:1a:17:b9:
51:cb:e6:1d:a9:d1:62:eb:d3:9c:c3:b8:81:cb:6a:11:a9:c7:
8d:45:99:60:bd:7b:c4:bf:bd:00:7a:42:96:e8:52:a3:22:8e:
5e:dd:32:92:c4:f1:ba:27:00:e3:12:ba:77:10:dd:15:91:2b:
90:d6:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:45 2025 by rpki-client