Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: tEEJUC91xrLpw1fz5t9zq95Z0SMbpo0qPZ1Y0mkUcJM=
Subject key identifier: 6B:13:F2:7D:0C:6D:E8:2B:A7:CD:8D:27:1E:C1:6B:7F:53:47:55:17
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 019A209B818AF3FA78A617A5071D0AB35626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0ADE
Signing time: Sun 26 Oct 2025 13:00:53 +0000
Manifest this update: Sun 26 Oct 2025 13:00:53 +0000
Manifest next update: Mon 27 Oct 2025 13:00:53 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: hPCJ4xgHQOIT2LAFlclfz7hQrpZ/n/Du7pqlE7RlmLA=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:81:8a:f3:fa:78:a6:17:a5:07:1d:0a:b3:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Oct 26 13:00:53 2025 GMT
Not After : Oct 27 13:00:53 2025 GMT
Subject: CN=6b13f27d0c6de82ba7cd8d271ec16b7f53475517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:90:ef:a9:b1:a1:49:0a:7c:cf:bc:18:51:
57:c2:6e:0a:b9:70:4c:fa:6c:17:2d:ca:bb:00:63:
bf:e7:64:df:fd:dd:ec:ae:7e:03:83:b0:e5:47:99:
c6:24:f2:fc:17:e5:12:bf:2b:40:19:82:8a:7e:28:
69:a2:8d:41:9b:b8:a2:68:b2:de:1f:0b:58:07:17:
c8:f1:bc:67:a1:b0:e2:94:0e:90:2a:1b:20:cc:27:
56:f2:42:8b:c8:6e:2d:68:24:db:36:b9:d1:4f:d3:
b7:57:81:55:a9:f8:be:ac:ad:9e:96:fb:de:06:42:
77:c3:71:4b:4d:59:23:59:99:a2:f4:c3:17:bf:ea:
12:d3:4c:fc:04:76:c2:33:e4:0a:4e:81:5a:e1:b3:
ce:9d:6f:20:f4:54:33:21:29:3b:fa:b3:94:5d:95:
5e:3b:d1:5b:5a:c9:22:32:1c:43:46:60:07:db:da:
9b:18:14:c8:64:fe:a7:a6:71:1f:46:a1:35:bd:f9:
c8:4f:71:2d:6d:44:8c:a9:a4:31:a6:20:43:4c:4b:
22:24:e5:22:9b:21:5f:39:c6:e5:ef:f0:0b:cf:4e:
ea:4a:d4:4c:3e:d5:24:da:29:5b:2b:de:7d:a7:dc:
70:c0:0e:cf:b0:52:70:4f:22:02:61:1a:59:d9:dc:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:F2:7D:0C:6D:E8:2B:A7:CD:8D:27:1E:C1:6B:7F:53:47:55:17
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:62:2d:cc:54:09:4f:94:3e:ee:44:c7:9f:92:5e:ae:06:1d:
44:90:d0:be:b2:f8:9e:cb:ce:ee:1a:3f:fc:2a:42:d7:f0:db:
3f:54:22:bb:fb:cc:c7:82:49:f7:d7:db:6d:84:9c:be:77:a3:
ea:bf:85:e8:9b:38:ee:9e:dd:19:e6:82:c0:70:80:90:84:bd:
1e:45:ce:58:27:3e:60:d6:03:68:2a:c6:08:a1:f2:06:21:3b:
11:0b:b2:a6:61:76:60:97:8d:85:98:03:ed:69:23:52:cc:68:
fe:a5:07:7f:c7:78:c0:6c:8d:b1:44:2b:9b:00:78:b9:37:39:
90:58:46:2b:c9:28:f1:a2:b1:cb:2a:fc:a7:b5:e2:e2:04:72:
3f:c8:7f:b8:5b:04:54:57:e4:5c:18:37:18:41:b1:ef:55:43:
b5:b8:a4:90:e2:da:46:e0:9a:e0:cd:f3:fc:ec:83:1d:6d:91:
a1:8e:7f:2c:27:f9:dd:bd:85:26:7f:25:01:46:9f:90:cd:19:
b0:7a:eb:6a:bf:e8:72:44:a6:28:43:94:05:22:6a:56:42:78:
24:62:67:3e:bb:e9:f5:a3:c4:cb:4c:21:90:92:e5:72:3c:fb:
24:01:b6:7e:e4:39:5d:02:69:9e:55:ca:fe:b7:df:29:99:d2:
57:c9:9c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:30 2025 by rpki-client