Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: cYpMUX0MWApJn8e+BFGUCxnJNgKaGvjclecfVMEBIXs=
Subject key identifier: F5:D4:7C:63:47:56:EC:F1:2F:43:3F:FB:92:EB:64:50:9C:70:9B:6F
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019888B2597CDAB47C97FDD8321A659851EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 11B2
Signing time: Fri 08 Aug 2025 08:00:46 +0000
Manifest this update: Fri 08 Aug 2025 08:00:46 +0000
Manifest next update: Sat 09 Aug 2025 08:00:46 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: NBqzcNAZf6X1IonjHUFtnqmey+FwNxPUMDZliw8z4K8=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:59:7c:da:b4:7c:97:fd:d8:32:1a:65:98:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Aug 8 08:00:46 2025 GMT
Not After : Aug 9 08:00:46 2025 GMT
Subject: CN=f5d47c634756ecf12f433ffb92eb64509c709b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:1d:34:91:77:5a:59:be:5f:82:62:a9:32:
28:22:94:a7:d4:8c:be:ab:d2:77:18:98:6e:9b:f8:
b2:60:07:99:4d:f1:41:81:0d:99:61:5a:ff:0e:8a:
25:fc:d9:6f:57:ee:41:8a:b4:9f:d6:31:ed:df:01:
41:cf:e2:e3:24:e2:00:dd:e2:6a:a0:df:47:00:a1:
92:50:86:92:c3:da:66:ed:95:3b:82:a4:dc:53:a5:
19:c1:30:e4:34:3e:d2:52:f1:f3:a4:81:ed:7c:d9:
2e:af:b6:b4:fb:1d:c2:fc:1d:56:ba:67:2f:b4:0d:
2a:6e:20:40:4f:55:54:c7:14:40:c8:4b:ab:80:0a:
43:13:9b:5a:a2:60:9d:ad:e2:3f:b7:1f:34:c7:af:
49:a0:dd:fa:21:2f:01:5c:21:41:f8:db:5f:38:91:
5a:a6:98:d5:ae:fb:3c:f1:47:39:76:88:6d:f6:61:
ef:f8:09:75:73:2d:30:23:0b:ef:d3:e9:72:29:a8:
f9:56:d4:15:85:d6:19:45:a3:0a:08:e4:06:cf:7e:
e5:46:84:83:13:6c:1f:dd:f9:7a:f2:44:07:21:13:
1c:37:bd:b9:43:b6:0d:d9:b4:71:7a:58:a1:34:51:
d2:9f:1b:6d:ce:1e:7f:3d:d2:29:18:14:8b:3d:06:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:7C:63:47:56:EC:F1:2F:43:3F:FB:92:EB:64:50:9C:70:9B:6F
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b0:3e:c8:44:28:72:79:65:17:28:c4:47:f2:ac:de:7f:7f:
3c:0e:2f:1a:91:09:bf:b9:05:ec:a8:e9:1b:e1:91:4d:c8:dd:
db:8b:08:2e:96:05:07:bb:ba:7c:7e:b7:57:73:70:00:39:52:
53:08:a5:3b:18:33:e4:6c:cf:81:e9:d2:15:7a:c5:d2:09:63:
f9:16:d5:df:30:0c:e0:9b:8a:fa:9d:1f:09:e7:f6:dd:10:e9:
84:7d:29:63:62:9c:6d:e8:55:2b:9a:0a:4a:45:c1:6d:00:6b:
55:8f:b3:0d:3b:fd:5d:b0:f2:92:7a:20:62:f8:4e:34:62:4d:
98:2f:8c:66:86:bc:8a:9c:5c:a5:6e:e8:9a:f8:34:92:ca:d1:
d4:50:60:eb:89:db:5b:6f:83:af:e5:29:79:be:ab:cb:9b:1b:
56:31:22:b8:c2:e5:5c:e9:21:d4:cd:12:1d:e3:15:05:d2:0b:
54:82:47:e1:66:a1:b2:36:80:3d:21:28:5e:86:6b:ca:d2:4c:
89:50:3d:2d:f3:d0:d7:38:5f:a2:58:cf:7f:b7:5a:c8:cf:22:
3d:64:92:a8:bc:02:b1:76:62:7e:c6:f9:4f:46:61:3f:36:91:
85:76:3e:47:d2:3b:3d:94:91:a0:15:1a:08:5f:76:93:dc:45:
42:04:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:59 2025 by rpki-client