Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: PS7SGgpLCgVZsP27Nm5IPHLV71qrJjjsxUSoyIJQkfk=
Subject key identifier: B7:7F:46:B7:14:23:08:22:1A:96:DA:45:1A:BC:91:B7:C9:F2:53:46
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019A526302048CAFD397A5146C99742AD151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 129F
Signing time: Wed 05 Nov 2025 05:00:11 +0000
Manifest this update: Wed 05 Nov 2025 05:00:11 +0000
Manifest next update: Thu 06 Nov 2025 05:00:11 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: kISIbVVJNiQH9q6y9pMZGuvH9vD4Ss82lWPGqIHCENA=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:02:04:8c:af:d3:97:a5:14:6c:99:74:2a:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Nov 5 05:00:11 2025 GMT
Not After : Nov 6 05:00:11 2025 GMT
Subject: CN=b77f46b7142308221a96da451abc91b7c9f25346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:22:f8:4d:e1:af:b3:14:12:75:f3:e2:33:
7c:e7:14:e9:eb:83:17:b1:60:2d:6e:6f:1d:61:bf:
77:19:1c:ad:2c:1d:0e:de:72:29:dd:14:a0:84:c9:
e7:62:23:57:c2:08:ab:fc:a8:d4:95:fa:97:07:f6:
40:b8:c5:e0:f4:0f:b6:45:db:14:8e:b3:74:2c:c2:
b4:81:bd:b1:02:c0:5d:31:d9:1e:cb:bb:ab:84:08:
86:a4:5c:b5:af:5e:d9:3d:b7:41:dd:b3:4f:bf:16:
df:c0:9d:56:b1:a9:e5:21:c1:b6:a0:db:5d:af:d2:
90:4c:70:21:f1:83:ff:46:d2:02:72:b8:e7:d8:25:
33:f7:e5:0e:0c:ae:86:a5:bf:3f:56:3b:ea:43:48:
d1:0f:64:77:9e:44:4a:4f:93:58:0c:8f:67:a9:94:
2c:cf:55:ba:af:27:33:af:2e:bf:d7:ff:2d:ad:8a:
1a:5e:aa:6b:01:74:7d:08:a9:73:69:3a:36:ea:6f:
c6:04:ba:62:cf:4b:14:05:bf:4a:31:2c:76:23:07:
97:eb:8f:e1:04:f7:e0:b4:19:4f:d5:f8:a6:37:d5:
72:36:15:24:d6:38:9a:8c:fd:09:89:a0:8c:f5:2b:
dd:c4:f6:8f:92:6c:68:17:5c:60:90:52:07:53:bb:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:46:B7:14:23:08:22:1A:96:DA:45:1A:BC:91:B7:C9:F2:53:46
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:07:27:90:ff:7e:5c:d2:a1:e2:08:1c:38:21:90:e0:f4:
9d:65:82:c2:33:34:17:5b:87:8d:7b:df:4e:37:44:fa:c4:ec:
50:d6:2f:d2:a4:80:3c:b6:ae:76:86:92:31:92:12:b8:91:8a:
86:6d:77:0d:59:24:24:95:86:45:20:31:1b:7d:48:5f:31:d3:
c2:74:bc:24:eb:2d:69:69:90:00:3f:7d:db:23:63:96:d5:06:
58:d1:0c:26:41:21:81:75:ad:06:37:4c:5e:af:8f:ea:84:d4:
4b:93:53:79:4e:78:54:79:8a:10:b6:60:0a:95:cb:27:d4:1d:
ad:01:8c:e5:58:5b:c7:c7:32:06:e4:b4:61:33:17:51:f0:8e:
bf:5d:9b:b8:a3:de:47:8e:34:1a:e2:6b:be:4b:da:74:8b:23:
81:05:66:ad:e9:01:49:fa:63:3c:53:98:ff:f6:90:41:ef:94:
df:88:49:7b:a6:0f:48:cf:dc:14:6e:6e:6f:16:b3:f1:30:ce:
bc:48:9b:0f:36:df:66:e8:07:57:db:93:ff:9b:91:0f:6a:44:
c4:44:b4:03:39:c4:8f:c9:62:64:16:7f:80:2f:ad:c6:84:f2:
c2:f4:59:b6:32:e9:be:bf:82:23:a3:5c:ed:4e:74:0f:80:b1:
64:e0:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:44 2025 by rpki-client