Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: /m1LaTQwTYD6DaLxM3wOs//vXUAGfHlsLNrbKKyKpAQ=
Subject key identifier: 5E:BB:48:4B:B1:0E:A7:B1:B3:06:A8:BB:A6:4B:28:3B:F8:A0:6A:21
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 0199326D0CAB702149706D76429CC1649A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 167F
Signing time: Wed 10 Sep 2025 07:00:31 +0000
Manifest this update: Wed 10 Sep 2025 07:00:31 +0000
Manifest next update: Thu 11 Sep 2025 07:00:31 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: kOdUd0BJh7m4b0s0dCs4QgMWNUQ.roa (hash: tZ3TxxDR2EXxSPIMDVq3TJt9N6UyL2XMXlm7RgpGHLk=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: qikCpE6KS5xmG3ay5phh4AL44No2nQHBe48ZqiXNxLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:0c:ab:70:21:49:70:6d:76:42:9c:c1:64:9a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Sep 10 07:00:31 2025 GMT
Not After : Sep 11 07:00:31 2025 GMT
Subject: CN=5ebb484bb10ea7b1b306a8bba64b283bf8a06a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:2c:4d:10:b2:67:ed:8d:82:f4:c7:de:2e:
21:60:fa:81:07:79:f7:ba:89:f9:7e:da:ac:4d:e2:
ca:95:21:90:a5:dc:cb:4e:e3:e1:d5:48:22:a5:4e:
08:e7:3e:87:7a:94:78:c3:ea:41:e6:2e:b8:15:83:
1d:46:23:bb:a3:27:96:55:bf:c7:1b:e6:94:01:ee:
9f:f8:d5:d7:1a:5c:c4:ad:39:63:be:f7:c3:0b:ed:
84:63:48:b2:62:d2:56:32:03:ee:6b:0b:38:2d:1d:
0f:3a:fd:65:e7:7e:2a:3e:5d:06:c9:b3:52:82:49:
49:5b:4f:8e:a9:ac:ac:57:f1:da:64:5a:f9:3a:25:
2f:da:64:dc:cb:b0:3a:84:2a:5e:7f:5a:a9:ed:f3:
f1:3b:98:04:41:0e:83:41:15:42:5b:de:e5:4c:89:
c0:3c:5c:31:6f:33:ad:65:77:90:28:a3:9f:9b:12:
89:19:7e:f7:34:10:56:7a:f4:0f:03:07:27:05:62:
13:02:eb:0b:91:e0:dc:46:92:c9:d6:52:10:6c:e1:
f2:13:73:4c:2a:06:1c:46:58:c1:ee:be:be:1e:e0:
9e:ab:34:0a:d2:02:53:df:39:a3:45:c6:37:3e:df:
c8:2d:5c:7a:63:ea:53:15:28:2c:e4:8f:fb:58:36:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:48:4B:B1:0E:A7:B1:B3:06:A8:BB:A6:4B:28:3B:F8:A0:6A:21
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:df:7e:44:5e:df:2c:be:6e:54:02:2e:0c:24:f4:7c:f5:
f6:97:bb:08:9e:4b:9d:d5:9d:0c:44:f6:7e:4f:4e:90:50:cf:
78:6d:ad:63:04:9c:9f:80:82:14:be:c6:b1:77:e5:39:59:89:
63:e9:29:63:03:42:1d:2a:fc:7e:a9:e7:a4:7c:10:b3:00:9c:
15:78:b7:67:e1:16:38:4f:3f:40:15:db:9e:06:06:3c:d8:de:
a5:37:43:12:70:84:c2:db:77:d1:0d:5a:32:0c:89:9d:0d:63:
d8:b6:24:0d:0a:88:7f:5a:bc:ef:68:0f:a5:b4:ab:7c:a7:14:
33:be:dc:fc:0d:11:76:81:08:b6:05:9b:bc:e8:6e:11:89:bf:
c2:0e:02:3c:5f:b1:92:ff:93:e2:15:74:30:ba:78:e9:d7:9f:
85:c9:b7:71:f1:bc:d7:59:65:c8:ec:d9:27:ca:8c:83:a4:a3:
90:b9:be:5b:f9:c2:4e:bc:d6:23:f1:d3:ac:7a:42:d0:cc:80:
34:02:4c:75:5e:8c:dd:bb:27:20:05:25:7e:45:43:c1:7a:18:
d2:cc:d2:31:ea:88:ca:83:43:26:84:b9:a7:78:c4:8c:49:f3:
12:04:49:04:6b:05:fc:a5:8b:06:26:29:7f:36:76:93:a3:83:
5d:93:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:07:29 2025 by rpki-client