Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: Y6B+wwA//7rqBU4w7kt451KRq1YtjiBz+pgGc7ddXTc=
Subject key identifier: F2:99:86:09:C0:C2:4F:84:99:31:46:27:09:E8:B1:84:FE:72:D1:44
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 019A299E8091BE96307C81B7F2FDCFCFF349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 16FF
Signing time: Tue 28 Oct 2025 07:00:44 +0000
Manifest this update: Tue 28 Oct 2025 07:00:44 +0000
Manifest next update: Wed 29 Oct 2025 07:00:44 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: kOdUd0BJh7m4b0s0dCs4QgMWNUQ.roa (hash: tZ3TxxDR2EXxSPIMDVq3TJt9N6UyL2XMXlm7RgpGHLk=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: 7a6dtystSnilTGNjdvOz75ttivszY18MIZnLkV8qwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:80:91:be:96:30:7c:81:b7:f2:fd:cf:cf:f3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Oct 28 07:00:44 2025 GMT
Not After : Oct 29 07:00:44 2025 GMT
Subject: CN=f2998609c0c24f849931462709e8b184fe72d144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:16:99:0b:ec:ad:ed:01:79:7e:64:c7:1c:
58:ba:7a:98:86:c3:38:20:3e:19:9b:8e:0f:66:1e:
7a:ad:1d:94:b2:9d:5b:29:ba:88:cc:2b:ec:b1:67:
ae:68:24:9e:d8:2b:74:0d:ac:33:d0:f2:8e:e2:25:
cb:50:b4:43:be:17:f4:d9:6f:22:ab:e2:b3:8f:4f:
b5:63:c8:ab:50:d1:4e:f6:b5:78:e4:fb:1e:09:fe:
c3:2c:eb:e1:16:39:19:68:84:93:fd:8a:09:36:3b:
6c:50:5e:13:8d:3a:c6:7d:fa:71:82:56:6a:b6:1a:
07:e2:69:9b:43:09:03:50:21:bf:e8:b9:ee:ca:ac:
6f:79:b6:1f:93:2e:f6:44:49:be:e5:92:cb:bb:e2:
e9:ca:31:25:76:cb:f4:a9:c1:16:e2:5b:80:b8:14:
01:09:5b:d7:60:21:76:f5:5f:0c:4c:37:79:eb:f0:
37:b2:3d:53:8a:f8:f4:38:06:60:1b:da:8a:92:d9:
e7:1f:c0:a2:10:61:c1:e4:c6:af:01:0d:2f:f0:0f:
e5:ff:11:f6:55:ee:d9:a4:3f:99:1c:f2:57:33:13:
d9:e0:99:44:23:d9:88:4e:30:95:96:d0:a7:01:3f:
c6:1e:c7:74:b7:82:f3:04:43:80:55:2c:17:a6:ee:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:86:09:C0:C2:4F:84:99:31:46:27:09:E8:B1:84:FE:72:D1:44
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:a2:08:6a:91:ab:b3:b3:1f:eb:3e:0d:e9:5f:44:ad:94:
4a:77:92:18:48:45:20:42:6f:6a:e0:17:d4:06:a3:aa:87:cf:
08:12:7e:b5:71:14:4f:6e:29:7a:64:e4:19:0a:9a:bc:83:0c:
51:bf:d4:e6:c3:b3:04:38:84:1e:9e:54:55:81:64:66:5d:17:
93:4e:cc:03:7c:48:1d:9b:ff:1d:d3:61:3f:19:83:f5:c2:f5:
a4:d0:5e:e4:e5:32:53:c5:b3:21:49:44:a7:b1:0a:33:41:26:
d6:fc:64:5e:04:c2:61:aa:d8:b3:79:68:42:63:62:7f:66:51:
a5:47:9c:76:61:b8:d4:e8:62:42:db:82:57:fd:85:2a:4b:2d:
d2:7b:6d:8a:ce:8e:4b:1c:d0:96:79:47:c2:aa:95:c6:ed:a2:
59:81:37:51:9d:0e:d1:c7:b4:4e:c7:b5:4b:56:45:73:55:ac:
86:29:ca:d4:0c:cf:ee:7d:e4:f6:0a:6e:a2:c4:cf:8a:07:8e:
8a:49:51:91:c8:ef:9b:c9:83:21:2d:6b:28:84:df:60:62:e4:
01:34:7b:10:50:cf:7a:e0:7b:f9:04:8c:f6:46:06:27:95:f4:
7c:47:55:5f:9b:f4:a1:37:09:48:ea:9f:4d:b3:a6:23:2c:ad:
34:1e:67:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopnoCRvpYwfIG38v3Pz/NJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5
OWVhMzEwHhcNMjUxMDI4MDcwMDQ0WhcNMjUxMDI5MDcwMDQ0WjAzMTEwLwYDVQQD
EyhmMjk5ODYwOWMwYzI0Zjg0OTkzMTQ2MjcwOWU4YjE4NGZlNzJkMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNMWmQvsre0BeX5kxxxYunqYhsM4
ID4Zm44PZh56rR2Usp1bKbqIzCvssWeuaCSe2Ct0Dawz0PKO4iXLULRDvhf02W8i
q+Kzj0+1Y8irUNFO9rV45PseCf7DLOvhFjkZaIST/YoJNjtsUF4TjTrGffpxglZq
thoH4mmbQwkDUCG/6LnuyqxvebYfky72REm+5ZLLu+LpyjEldsv0qcEW4luAuBQB
CVvXYCF29V8MTDd56/A3sj1Tivj0OAZgG9qKktnnH8CiEGHB5MavAQ0v8A/l/xH2
Ve7ZpD+ZHPJXMxPZ4JlEI9mITjCVltCnAT/GHsd0t4LzBEOAVSwXpu64YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKZhgnAwk+EmTFGJwnosYT+ctFEMB8GA1UdIwQY
MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt
NjVmODI0N2ZmYTkxLzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx
LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsaiCGqR
q7OzH+s+DelfRK2USneSGEhFIEJvauAX1AajqofPCBJ+tXEUT24pemTkGQqavIMM
Ub/U5sOzBDiEHp5UVYFkZl0Xk07MA3xIHZv/HdNhPxmD9cL1pNBe5OUyU8WzIUlE
p7EKM0Em1vxkXgTCYarYs3loQmNif2ZRpUecdmG41OhiQtuCV/2FKkst0nttis6O
SxzQlnlHwqqVxu2iWYE3UZ0O0ce0Tse1S1ZFc1WshinK1AzP7n3k9gpuosTPigeO
iklRkcjvm8mDIS1rKITfYGLkATR7EFDPeuB7+QSM9kYGJ5X0fEdVX5v0oTcJSOqf
TbOmIyytNB5n3g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:35:43 2025 by rpki-client