Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
File: oYanahiZ2_kCnhrv2QUXe7CdNo0.mft (raw, json)
Hash identifier: AnXwZP7f8iSaXibhHiBeMFA+7l1cXipufcfQGQdylwc=
Subject key identifier: 59:06:B8:59:A5:0E:9A:4D:E7:EC:C0:49:BC:EE:A6:D5:84:85:3C:4C
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 019921B14FFEB93B98B258FD5C2E01BD308D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
Manifest number: 0B02
Signing time: Sun 07 Sep 2025 01:01:32 +0000
Manifest this update: Sun 07 Sep 2025 01:01:32 +0000
Manifest next update: Mon 08 Sep 2025 01:01:32 +0000
Files and hashes: 1: bcgHeTecNhcHR9QWO6gmvpmmI5c.roa (hash: EV6/wlUYGCbS7xEazmx8eI5Bar/BgAFt51P9o3UlOuQ=)
2: oYanahiZ2_kCnhrv2QUXe7CdNo0.crl (hash: j0ldcMfSjwF3gxEK9W4/F3aSWmvmvyH9PTVUMwaZJYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:4f:fe:b9:3b:98:b2:58:fd:5c:2e:01:bd:30:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Sep 7 01:01:32 2025 GMT
Not After : Sep 8 01:01:32 2025 GMT
Subject: CN=5906b859a50e9a4de7ecc049bceea6d584853c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:42:c6:c1:47:96:5f:e1:b4:cd:eb:a1:3b:
03:8d:67:f2:39:ce:f4:a6:04:48:08:63:a9:a5:09:
ee:85:39:18:cf:d3:cd:5e:bd:76:d1:27:9a:7e:e9:
c1:68:b5:5a:c6:1c:4e:ef:40:c5:2a:25:99:81:a1:
65:b0:92:2d:3d:c6:8e:89:08:30:a6:f2:82:7e:dd:
c3:be:9f:3e:61:97:c4:b0:41:9c:dc:b3:6f:ce:e1:
32:99:8b:c5:08:0a:cf:7b:52:b0:31:29:5a:95:76:
7a:46:b9:15:a8:40:4d:96:46:7f:0c:98:f2:c0:31:
83:06:47:d1:80:14:d5:3e:b7:60:c6:7c:81:83:61:
58:9f:38:d8:a3:53:ff:d7:4f:df:2e:a1:1a:99:a8:
be:e4:44:d3:7f:30:1e:86:05:dd:32:cf:d1:df:48:
54:d1:4c:c3:83:46:12:87:a5:8b:32:49:d4:bf:91:
4b:51:9d:fc:59:e3:23:39:8f:a4:c2:c4:9c:43:28:
a5:4d:95:da:35:2f:03:fc:19:85:f1:a7:42:db:18:
fd:94:18:f6:31:19:e8:d1:8f:2c:5f:53:a5:3c:a3:
dd:65:7c:c1:37:de:49:59:46:d0:4f:e9:1c:aa:ad:
95:12:cd:af:b2:d1:34:a1:80:50:2e:7d:01:1f:9c:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:B8:59:A5:0E:9A:4D:E7:EC:C0:49:BC:EE:A6:D5:84:85:3C:4C
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:31:c3:33:ea:8d:4b:c1:38:b4:7a:90:69:10:90:da:ab:a0:
6f:81:62:17:f1:89:16:33:51:f0:d9:36:4e:ac:07:4f:e3:9c:
bf:54:bf:93:a4:aa:c8:7d:84:64:1d:61:74:1d:14:06:80:6f:
25:ee:e7:1c:94:e8:a4:34:48:ec:6c:c4:5c:8e:ea:46:5f:b2:
f1:56:25:ac:77:98:9e:ea:99:bb:57:42:b3:72:ea:5d:a7:d7:
10:85:51:3b:9b:ac:fd:4a:4e:40:01:03:d7:1e:32:19:f3:62:
ed:ca:89:ff:f0:e0:84:28:b8:cb:0b:60:3e:7a:e0:bb:1b:26:
e7:87:fd:03:a4:c9:1b:8e:0b:e4:11:72:9b:3f:e3:2a:a1:a7:
8a:56:28:c8:54:99:8c:dc:a3:ab:a0:52:ab:b9:55:d5:43:d2:
81:b9:63:74:b5:f3:42:7d:fd:d4:56:2a:de:eb:45:33:f3:22:
94:bf:54:5b:d6:cd:e3:09:3d:0d:9f:41:12:3d:48:66:2c:a0:
80:2e:74:f6:3a:5d:f9:eb:42:71:59:5a:b4:dd:f9:a5:cd:02:
6e:2a:53:b8:79:08:8b:44:08:5e:99:04:50:73:67:47:a8:03:
db:d3:11:94:1e:eb:39:43:14:c3:40:be:5f:e0:19:56:28:51:
73:bc:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client