Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: 0Ey/QTEAKRmNnfdygfDzObb1RbTBZQKUvzjAC9pMfNk=
Subject key identifier: 63:0A:42:16:44:77:86:55:40:39:CA:81:A5:BE:B7:DC:F4:0C:11:29
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 01987C0A0BBF4199ECAA996B378A75951EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 21:01:29 +0000
Manifest this update: Tue 05 Aug 2025 21:01:29 +0000
Manifest next update: Wed 06 Aug 2025 21:01:29 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: Dzpe5hvvinAhcU+GNBQAjtI+B843GPh1CDtQFgRPmJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:0b:bf:41:99:ec:aa:99:6b:37:8a:75:95:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Aug 5 21:01:29 2025 GMT
Not After : Aug 6 21:01:29 2025 GMT
Subject: CN=630a4216447786554039ca81a5beb7dcf40c1129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:14:57:db:8e:95:e7:0f:8f:ff:09:f3:18:
73:54:b4:71:17:b2:30:b2:57:bb:27:8a:f0:ae:a4:
f6:d6:0a:ee:3c:10:cb:88:a8:9a:08:d2:0c:e7:04:
ee:d2:9b:5e:08:3c:07:2f:f6:99:c1:29:b8:a3:71:
b9:b5:cd:e9:83:a0:05:8d:40:40:ac:98:78:c1:73:
cf:16:17:99:f0:14:91:44:3c:6f:ed:8b:82:1d:68:
49:9b:2c:14:0a:97:f0:5b:9a:4f:c9:9e:6d:a5:d4:
52:68:63:59:f4:d8:45:2c:c4:82:2f:76:e0:ac:a8:
0f:6f:ed:c9:9c:72:67:8f:c3:73:b0:5e:be:4f:27:
49:4f:91:95:2f:62:f9:90:b2:49:39:b7:c8:e2:6f:
d9:3b:70:5c:6b:d6:9c:cb:3b:e5:f1:32:1e:5d:f0:
33:f8:30:92:df:8e:8c:45:ce:0d:13:73:9f:3f:39:
5d:7a:9a:e8:27:15:15:42:f8:4d:d3:76:76:93:73:
8a:60:5a:11:a0:70:3a:94:4d:ea:f6:28:10:4b:8a:
1a:b3:c6:2a:5c:a7:05:d6:39:df:96:90:83:c6:2e:
2f:8c:b5:80:3b:3d:d5:f4:8b:b8:00:be:1d:98:0c:
20:47:b2:d8:92:64:e4:85:23:de:1e:99:91:63:01:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:42:16:44:77:86:55:40:39:CA:81:A5:BE:B7:DC:F4:0C:11:29
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:31:bc:52:95:30:15:98:15:f4:f9:9e:31:1e:ee:bd:e6:
d8:e2:7b:27:90:98:dd:55:df:72:5b:12:81:3c:85:93:85:d1:
ea:c7:29:6e:85:21:3e:7e:f3:7b:ff:40:83:90:82:76:9e:67:
13:51:e8:6e:bd:a7:40:82:e2:ab:cf:41:e6:ec:bd:d9:ab:17:
dc:63:c5:dd:73:22:b6:96:91:9d:43:0f:af:9c:f3:03:dd:69:
9f:09:88:ca:8f:36:a8:ab:ad:1f:ec:77:e4:94:83:2e:ac:20:
6b:0b:b2:33:45:51:f3:90:d2:35:15:7d:72:55:42:e1:9e:7b:
0a:e2:b7:87:a7:c2:60:59:2d:b1:79:31:59:39:1c:5a:e1:6c:
15:11:4e:24:98:3c:dc:35:42:15:62:df:3f:7a:13:10:fb:37:
f3:a2:10:02:53:0a:ee:26:13:f5:07:0a:f9:bb:e0:4f:05:a7:
51:7d:27:d0:02:68:e4:57:28:3e:78:20:39:a2:b7:3c:d1:11:
f6:9e:31:c7:11:73:7b:31:a8:f7:58:f9:d0:c3:0d:e9:b8:ed:
c2:27:d6:53:10:f7:ab:90:27:f7:7d:2d:41:c4:d1:22:d5:67:
d2:41:ba:0f:01:3e:d2:4b:a5:83:23:4a:81:2a:a2:95:c4:bf:
23:9a:56:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8Cgu/QZnsqplrN4p1lR7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5
OWVhMzEwHhcNMjUwODA1MjEwMTI5WhcNMjUwODA2MjEwMTI5WjAzMTEwLwYDVQQD
Eyg2MzBhNDIxNjQ0Nzc4NjU1NDAzOWNhODFhNWJlYjdkY2Y0MGMxMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFkUV9uOlecPj/8J8xhzVLRxF7Iw
sle7J4rwrqT21gruPBDLiKiaCNIM5wTu0pteCDwHL/aZwSm4o3G5tc3pg6AFjUBA
rJh4wXPPFheZ8BSRRDxv7YuCHWhJmywUCpfwW5pPyZ5tpdRSaGNZ9NhFLMSCL3bg
rKgPb+3JnHJnj8NzsF6+TydJT5GVL2L5kLJJObfI4m/ZO3Bca9acyzvl8TIeXfAz
+DCS346MRc4NE3OfPzldeproJxUVQvhN03Z2k3OKYFoRoHA6lE3q9igQS4oas8Yq
XKcF1jnflpCDxi4vjLWAOz3V9Iu4AL4dmAwgR7LYkmTkhSPeHpmRYwEw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMKQhZEd4ZVQDnKgaW+t9z0DBEpMB8GA1UdIwQY
MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt
NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx
LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLsxvFKV
MBWYFfT5njEe7r3m2OJ7J5CY3VXfclsSgTyFk4XR6scpboUhPn7ze/9Ag5CCdp5n
E1Hobr2nQILiq89B5uy92asX3GPF3XMitpaRnUMPr5zzA91pnwmIyo82qKutH+x3
5JSDLqwgawuyM0VR85DSNRV9clVC4Z57CuK3h6fCYFktsXkxWTkcWuFsFRFOJJg8
3DVCFWLfP3oTEPs386IQAlMK7iYT9QcK+bvgTwWnUX0n0AJo5FcoPnggOaK3PNER
9p4xxxFzezGo91j50MMN6bjtwifWUxD3q5An930tQcTRItVn0kG6DwE+0kulgyNK
gSqilcS/I5pWug==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:13 2025 by rpki-client