Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: trBo7VH/grinDIHdwEH85CAuYOJPW/yk1afwdGkbsOE=
Subject key identifier: 6C:BE:17:EB:F1:F3:D1:EC:27:35:5A:42:9A:52:AE:2F:D3:91:BD:2B
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 019847E46CD658783ADAEF453193B3C4E435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:00:09 +0000
Manifest this update: Sat 26 Jul 2025 18:00:09 +0000
Manifest next update: Sun 27 Jul 2025 18:00:09 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: zr51hGjsCvAucQyrRqklW97lulzeMD/kpukGZSx+C9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:6c:d6:58:78:3a:da:ef:45:31:93:b3:c4:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jul 26 18:00:09 2025 GMT
Not After : Jul 27 18:00:09 2025 GMT
Subject: CN=6cbe17ebf1f3d1ec27355a429a52ae2fd391bd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:bf:72:a9:2d:a7:11:b3:9d:15:1e:39:81:
da:9d:66:86:a7:54:72:75:9f:ca:f4:11:79:69:01:
3c:7a:90:bc:7b:38:90:cd:4a:d8:fe:c9:ab:f7:66:
be:f7:76:64:fb:f7:53:82:25:d8:0f:26:de:0b:42:
e8:c3:9c:fd:bc:b8:3f:52:22:ba:37:84:78:75:d7:
df:e1:f7:02:f9:25:0b:ba:04:ad:c8:15:aa:b0:2f:
92:58:c8:49:52:30:d6:f4:8c:44:31:01:d2:70:36:
4c:80:e3:aa:e3:a8:3d:29:46:b0:78:d3:09:85:de:
65:00:e0:6f:b0:61:0c:c8:06:59:e0:fe:de:3e:d6:
b8:54:ec:06:9b:7c:67:99:28:b8:0b:0c:b4:1b:14:
b9:e4:ee:a6:16:7d:f0:1a:49:9c:89:83:e7:44:f6:
64:1a:67:e2:a6:12:fa:0f:f2:9d:33:16:02:f0:5f:
9b:5d:85:70:ee:f3:1a:19:6b:8e:90:78:ec:09:b8:
94:41:f3:a5:e8:a8:e8:b1:73:16:22:6f:a6:d5:46:
65:55:83:f5:8c:74:6e:41:36:d2:56:6b:c6:1d:ad:
ce:9f:d8:09:22:13:a6:46:dd:24:64:4c:ee:32:92:
d4:6e:c9:80:74:d0:3f:7e:86:cf:06:3f:2d:48:a0:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BE:17:EB:F1:F3:D1:EC:27:35:5A:42:9A:52:AE:2F:D3:91:BD:2B
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:de:24:9c:f8:3e:f4:0b:a8:9d:28:30:04:60:eb:4b:de:80:
5d:36:f3:2e:6e:47:6a:91:85:76:4f:d7:23:bb:b1:cb:06:25:
cf:84:ba:f0:a7:83:ec:e2:09:d5:45:38:b9:32:d1:99:9f:f3:
3b:a0:a5:b7:b8:4f:d5:c3:dc:eb:f4:03:00:7f:22:47:c2:06:
d4:43:ec:33:e1:67:34:80:5d:60:0d:04:fa:a6:29:f6:d6:b0:
ae:82:0f:7b:e0:fa:a7:48:0d:9f:8c:d4:59:00:1f:66:11:e2:
24:ce:fe:0b:43:2d:ae:8b:93:ff:08:be:70:c2:ee:58:79:56:
51:f5:4c:46:2e:07:ad:01:33:74:7c:a5:14:ea:1e:b2:98:04:
1d:c9:57:b8:df:2d:99:24:b3:97:78:7b:5a:c2:17:a2:6c:e6:
7a:eb:ef:9c:f1:9d:e2:be:c1:0d:53:46:21:21:e7:18:07:66:
29:03:3b:4b:df:0c:1f:24:dd:af:96:c2:c9:83:58:86:06:a4:
6c:32:09:0d:36:6d:88:11:60:ae:30:45:bd:b8:17:37:fa:8b:
7d:4b:da:22:bd:7f:5a:ef:5d:3b:44:c7:20:e0:a2:77:12:cc:
58:8d:c8:8b:66:9c:af:45:78:20:e3:54:ff:2e:4c:c4:ec:fb:
90:d6:0c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5GzWWHg62u9FMZOzxOQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5
OWVhMzEwHhcNMjUwNzI2MTgwMDA5WhcNMjUwNzI3MTgwMDA5WjAzMTEwLwYDVQQD
Eyg2Y2JlMTdlYmYxZjNkMWVjMjczNTVhNDI5YTUyYWUyZmQzOTFiZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuue/cqktpxGznRUeOYHanWaGp1Ry
dZ/K9BF5aQE8epC8eziQzUrY/smr92a+93Zk+/dTgiXYDybeC0Low5z9vLg/UiK6
N4R4ddff4fcC+SULugStyBWqsC+SWMhJUjDW9IxEMQHScDZMgOOq46g9KUaweNMJ
hd5lAOBvsGEMyAZZ4P7ePta4VOwGm3xnmSi4Cwy0GxS55O6mFn3wGkmciYPnRPZk
GmfiphL6D/KdMxYC8F+bXYVw7vMaGWuOkHjsCbiUQfOl6KjosXMWIm+m1UZlVYP1
jHRuQTbSVmvGHa3On9gJIhOmRt0kZEzuMpLUbsmAdNA/fobPBj8tSKDi7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy+F+vx89HsJzVaQppSri/Tkb0rMB8GA1UdIwQY
MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt
NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx
LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd4knPg+
9AuonSgwBGDrS96AXTbzLm5HapGFdk/XI7uxywYlz4S68KeD7OIJ1UU4uTLRmZ/z
O6Clt7hP1cPc6/QDAH8iR8IG1EPsM+FnNIBdYA0E+qYp9tawroIPe+D6p0gNn4zU
WQAfZhHiJM7+C0MtrouT/wi+cMLuWHlWUfVMRi4HrQEzdHylFOoespgEHclXuN8t
mSSzl3h7WsIXomzmeuvvnPGd4r7BDVNGISHnGAdmKQM7S98MHyTdr5bCyYNYhgak
bDIJDTZtiBFgrjBFvbgXN/qLfUvaIr1/Wu9dO0THIOCidxLMWI3Ii2acr0V4IONU
/y5MxOz7kNYMTg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:08:56 2025 by rpki-client