Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: U87OoQ2AFwGFK2v4B7VXTvhh0nUh9h69Aahd4i7bqOU=
Subject key identifier: FA:13:40:0B:05:60:C8:C8:C1:69:A8:1C:C3:10:F7:26:40:87:39:93
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 01984AE5793E3057D98FD24BDC494EA9557D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 1192
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: pooTwMPg+DNqQRV6QG7W5w0FKlN3XKXriomw9ANyQeY=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:79:3e:30:57:d9:8f:d2:4b:dc:49:4e:a9:55:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=fa13400b0560c8c8c169a81cc310f72640873993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:f4:ce:20:b0:22:d8:ec:da:da:a4:95:42:
b2:f1:6e:15:9c:00:c7:e3:de:3e:c0:83:45:31:37:
68:eb:f5:0a:5b:9a:15:e4:bc:1c:4c:ee:8f:99:a6:
c1:0b:e7:4e:2a:2d:b6:5b:fc:c6:1b:5d:e7:7a:70:
f5:3a:2b:e1:23:8f:68:47:15:b1:2b:98:41:f5:89:
c1:4c:3c:bb:1d:67:5f:bd:4d:6a:c5:9a:4d:61:3d:
a2:d6:88:50:32:22:1d:89:89:db:a8:ab:d1:97:16:
ac:34:ff:18:df:04:2e:b9:13:f9:f2:34:c7:5b:c8:
3e:7c:68:1d:e2:4f:c4:c6:9a:d1:80:30:d7:17:11:
d8:b6:53:1e:31:67:da:16:75:b4:e1:c0:15:19:aa:
8a:ce:2b:3e:a6:e4:1a:05:aa:f8:29:50:38:19:1d:
ab:f7:8c:59:c5:e5:be:ba:90:96:91:51:9f:03:9b:
78:54:99:cc:b2:cf:8c:4e:b9:21:a4:02:28:4d:f0:
d5:d5:c2:63:4b:a8:ba:1c:db:e8:0f:4e:da:3a:f8:
7e:c8:2d:ad:3d:12:12:62:27:0a:50:dd:d2:95:a9:
71:cb:3e:13:64:75:aa:1d:b1:5b:9b:e9:10:bf:f2:
b9:2c:b4:67:d1:56:cb:12:71:7f:6e:ea:5a:a4:ff:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:13:40:0B:05:60:C8:C8:C1:69:A8:1C:C3:10:F7:26:40:87:39:93
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:04:7f:20:60:5f:f2:27:b9:93:48:a9:78:0e:69:41:eb:
57:c4:05:62:e1:d3:65:c2:fe:7b:d0:9a:90:51:d8:7e:2f:c2:
67:ba:0b:03:ae:e4:b3:3c:9c:8a:04:2e:7d:27:23:15:0a:20:
76:88:f4:c1:c4:2d:c0:b4:38:38:ca:38:ac:a5:18:0b:71:b5:
1f:d6:e8:a3:5a:77:eb:23:6d:14:69:a7:c3:b2:d4:e8:d9:a2:
49:b4:98:a9:84:a5:12:df:83:46:58:9e:53:6c:e8:f0:05:bd:
c6:b7:c6:c5:ea:bd:2c:94:74:85:13:80:1f:3e:4c:c1:85:22:
84:1c:97:f0:ef:ff:94:d4:3a:b5:8d:74:ea:1b:a4:5b:bf:04:
d3:58:be:0a:6b:c8:e9:bc:4c:86:97:d4:b4:11:43:76:09:f7:
d6:6f:6d:59:95:a2:1e:f2:77:42:85:74:d3:ce:50:75:06:96:
1d:b6:6b:c7:05:b5:10:30:b8:e3:17:c8:47:bf:86:ff:22:cd:
2a:86:e9:73:53:16:5d:21:a1:32:e5:ff:4c:1c:7d:a4:ce:3b:
9f:0b:f9:a6:fe:58:fc:0c:37:a0:b9:c2:14:1c:24:4b:da:6c:
53:f7:e1:2a:e1:c4:72:7b:76:e8:90:3f:25:ba:7d:fc:3d:a0:
8d:c6:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:14:47 2025 by rpki-client