Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: JD8xQ7jpeMlCVT/CP1YUs68pAzwKuzXxZYksaaBVGjs=
Subject key identifier: 4C:A5:E2:65:ED:E3:04:88:67:5B:5F:0A:4C:D5:8C:C4:80:61:EA:E6
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 01987B9CE484F1149FF63376DF04E4CCAD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 162B
Signing time: Tue 05 Aug 2025 19:02:16 +0000
Manifest this update: Tue 05 Aug 2025 19:02:16 +0000
Manifest next update: Wed 06 Aug 2025 19:02:16 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: L694owT6fxzdeqtITWN878BRVntjK68FS8WSxU8wFkM=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:e4:84:f1:14:9f:f6:33:76:df:04:e4:cc:ad:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Aug 5 19:02:16 2025 GMT
Not After : Aug 6 19:02:16 2025 GMT
Subject: CN=4ca5e265ede30488675b5f0a4cd58cc48061eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:ce:77:50:76:82:dc:38:93:4f:87:99:fa:
dc:a5:93:fe:03:26:11:05:05:81:95:b4:93:ed:c7:
28:0a:16:3d:6c:74:b0:ac:62:a9:9d:df:a7:de:e7:
55:6a:ab:d3:3d:ed:a7:a4:9c:93:9a:01:5d:9f:f5:
75:a3:ed:35:70:9b:c7:5a:c2:70:52:76:66:c4:ac:
c5:63:29:fd:64:cc:bf:2c:35:c3:6f:22:a9:e9:23:
4e:7b:ad:d4:3d:75:51:dc:1a:35:a4:77:d2:38:89:
88:03:11:1f:a2:1d:93:be:99:29:c6:71:c0:1f:6a:
2f:a3:63:f6:56:06:94:90:fe:f4:90:0c:c8:46:d0:
ca:a2:b5:39:f3:82:95:3e:18:78:25:14:ac:be:0e:
85:13:d3:dd:7f:5c:da:90:de:96:b3:91:0b:4b:fe:
f3:b1:77:26:41:ee:b4:4f:dc:b8:fa:7e:f1:12:3d:
8e:33:46:77:24:48:d9:9c:25:9b:55:23:b1:f0:3e:
3e:69:2c:c5:b6:20:d9:c7:9b:50:81:bd:8f:40:72:
40:4f:d8:fe:d8:bc:ad:bc:0c:2c:c6:a4:8e:1b:24:
76:3c:ea:8e:8e:0d:56:7e:04:70:43:df:38:65:c7:
8c:24:d1:af:b6:f9:00:c8:9c:ea:78:11:29:ff:a2:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:E2:65:ED:E3:04:88:67:5B:5F:0A:4C:D5:8C:C4:80:61:EA:E6
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:56:5b:cd:1f:e5:62:e5:50:ac:6f:ef:72:7e:4f:f2:27:98:
93:15:97:dd:c3:f0:8d:6d:58:37:72:56:5b:41:aa:ce:ea:aa:
eb:ba:75:40:2b:8a:32:fb:c5:e3:9f:dd:c6:93:4c:39:6c:01:
0f:be:e0:39:59:6f:d1:3e:2a:80:89:3e:19:17:9b:0e:70:3b:
8c:f5:b4:fd:cb:5c:f3:38:c6:02:cf:1b:05:13:ba:49:00:83:
c1:7d:49:11:65:1a:85:f2:12:a6:73:1e:dc:c3:d8:81:50:7d:
a0:9a:53:ba:fe:d0:80:e7:d4:43:7c:4f:28:86:09:29:34:2f:
b0:b1:b3:0a:98:74:ce:6d:82:59:a8:f3:86:8c:64:c6:a3:80:
d5:5f:86:da:db:91:79:db:7e:00:28:3a:d0:97:1c:36:6a:58:
f8:3d:5d:1e:2f:ff:81:c8:f5:7d:e4:b9:90:89:27:7f:0c:14:
9e:08:16:13:f2:c1:63:5d:a1:14:99:f2:53:b4:d5:fd:a9:05:
cb:a2:e1:a4:51:28:48:c4:a7:dd:97:51:83:8a:e4:ea:c8:7e:
cd:e9:1a:f1:3e:23:44:ce:5e:c0:ca:89:bd:25:05:61:f4:94:
11:0f:a7:c9:87:51:d6:48:7a:f1:ec:e9:15:5c:4c:12:bc:c2:
4e:ee:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:48 2025 by rpki-client