Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
File: oythi1COwTZTcsKqZ182ASk8xiQ.mft (raw, json)
Hash identifier: 2Y6C4j9+Y0sFNtYPgpccHiQod2m/oeveEhUu9AViZXg=
Subject key identifier: CF:4B:0F:2F:5F:C8:20:46:09:2F:5A:BE:2B:C5:77:0A:C9:93:68:A6
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 01991BE5E405BBAB10301AFCECD8FB47721E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
Manifest number: 0A57
Signing time: Fri 05 Sep 2025 22:01:14 +0000
Manifest this update: Fri 05 Sep 2025 22:01:14 +0000
Manifest next update: Sat 06 Sep 2025 22:01:14 +0000
Files and hashes: 1: oythi1COwTZTcsKqZ182ASk8xiQ.crl (hash: js32kCbO/knvGwEElTynaN088TQjf+RBo0Ld++p+rbY=)
2: tlRgtWShtf4NCRA8IRgcZrxGH5w.roa (hash: vWrq/qn4dImxorSwjmmV3lM2Zem99YCBAV/uApBQcww=)
3: xTZoaA-8TmHEI1jMFDvCwHtiXYE.roa (hash: T7GombXt78c9iIE0H6vcNPnQnS19iaCgMsQG50c822A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:e5:e4:05:bb:ab:10:30:1a:fc:ec:d8:fb:47:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Sep 5 22:01:14 2025 GMT
Not After : Sep 6 22:01:14 2025 GMT
Subject: CN=cf4b0f2f5fc82046092f5abe2bc5770ac99368a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:d6:6b:cd:ec:b6:19:35:39:99:e7:22:e3:
ae:40:6c:b0:ad:81:21:ee:45:aa:7a:7a:1e:91:cf:
59:a9:df:8c:d9:62:13:8b:85:3a:b2:aa:02:8d:48:
88:e7:2c:b9:93:d2:23:e7:2d:0c:1b:b8:f9:f7:33:
f1:19:72:2d:f9:30:2e:fa:57:f3:08:f0:fa:f4:60:
55:43:b1:fb:64:2f:70:d8:8b:8b:0a:39:88:8b:c3:
09:8f:a4:e3:86:2d:35:ed:13:86:75:14:10:7c:90:
fa:da:aa:c0:23:0c:8f:04:34:3e:df:b3:94:24:e4:
57:85:3d:43:13:09:73:5a:05:8b:09:75:cd:1b:bf:
f4:a1:31:56:1f:ce:a8:15:fe:3f:9b:f8:81:d6:d7:
14:29:d1:8c:f8:58:91:b0:d6:e7:48:31:2b:ba:cb:
e5:fc:e1:0e:6f:2a:68:b4:41:e3:a0:84:cb:f1:78:
b5:8b:c2:92:df:66:02:ce:8e:ba:ac:47:c4:ea:f4:
92:4a:02:ad:4d:31:fc:98:83:9c:cf:94:9f:20:06:
f6:7b:fe:14:45:d7:b7:43:7c:be:77:a8:b2:0f:d4:
c5:30:f6:c6:58:2b:8a:b1:b6:5d:6f:fd:05:f5:e6:
45:78:c3:c7:ad:3b:d8:ab:03:e9:7f:e0:9b:03:4c:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:0F:2F:5F:C8:20:46:09:2F:5A:BE:2B:C5:77:0A:C9:93:68:A6
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:8e:f3:07:3c:9a:3d:dc:f5:eb:fa:ef:86:b3:7f:6c:3d:
b5:ba:ae:68:dd:b6:9d:2f:44:d4:9f:f4:92:d4:53:70:90:d2:
6b:c9:63:cf:3b:62:73:e4:e7:65:16:ae:78:21:45:60:0f:4b:
8c:a5:37:55:f9:8a:72:95:d3:76:5a:04:dd:eb:93:4f:0a:bc:
0d:cc:97:21:fd:a2:31:fd:21:d6:a9:11:36:e6:bf:10:18:d2:
49:be:a2:8c:1e:c4:8c:33:a8:7c:5b:bc:89:e5:b5:dd:8d:7f:
15:2d:0e:a2:fe:69:cf:21:8a:c5:63:78:01:17:90:94:c8:c0:
54:f4:b3:d0:0d:bc:31:30:05:d3:6e:83:53:db:20:5f:06:6f:
4f:5c:8b:9f:fc:fc:24:40:3a:28:0d:74:be:79:42:b5:2e:36:
aa:aa:d4:d9:93:67:e0:b0:6a:6d:f4:ac:ae:76:b1:7d:1b:6c:
d1:71:07:49:d5:c7:cc:c1:60:ec:75:85:ea:8b:ee:58:1c:4d:
e3:d7:85:99:c0:91:c7:aa:42:a5:20:21:b0:d3:a9:25:68:3a:
d3:62:6e:3b:4b:68:df:9b:6c:23:67:e0:68:72:47:20:77:03:
d6:9c:c9:5b:09:65:55:df:2d:0a:1d:47:cd:dd:70:eb:38:7f:
ab:ee:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 03:18:10 2025 by rpki-client