Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: IZchLzE0zMgvFsD1WZYLR5Y7meQ/UDvZGd3eE5CcsJ8=
Subject key identifier: 5E:C5:49:A2:C0:26:B0:CC:8B:56:3D:5B:19:33:CD:8A:30:B7:7A:73
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 019A07812932C23E5380165B79A5E6C6B265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 16F8
Signing time: Tue 21 Oct 2025 16:01:36 +0000
Manifest this update: Tue 21 Oct 2025 16:01:36 +0000
Manifest next update: Wed 22 Oct 2025 16:01:36 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: UnnHp7ZkJPHYbJr6DkJlywDz6TodDcTUKgAsr5PgK4A=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:29:32:c2:3e:53:80:16:5b:79:a5:e6:c6:b2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Oct 21 16:01:36 2025 GMT
Not After : Oct 22 16:01:36 2025 GMT
Subject: CN=5ec549a2c026b0cc8b563d5b1933cd8a30b77a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:2a:20:70:f5:25:ca:b7:1e:2c:c2:0a:33:
4a:8c:cf:99:b3:3a:52:6c:b8:88:73:bd:4c:19:cb:
5e:9b:60:bf:4d:17:80:da:6d:f7:02:4d:5d:fd:2b:
8c:2b:d9:5a:b3:e6:cd:00:fd:32:49:a7:da:62:7b:
90:a9:60:c7:1a:ed:03:33:ac:b4:25:18:fe:3f:da:
61:6e:53:f6:39:56:c8:9e:91:93:04:3e:b2:25:c6:
1c:2f:36:c7:81:1a:cc:ff:02:e1:1e:0a:3b:75:15:
85:14:4a:de:bd:39:78:66:71:87:92:56:51:33:86:
12:82:24:6b:04:ba:58:62:b9:69:0a:fd:cf:6e:03:
90:0a:1b:71:9d:23:bb:3a:ce:e0:a0:39:36:15:c8:
04:f2:46:f9:c2:9c:ef:0a:e0:52:44:0f:a9:4c:ff:
a4:f0:6d:0e:6d:26:69:32:52:9b:1d:11:dd:c6:c3:
9d:f6:20:6f:76:ac:e3:53:b7:e0:c7:dc:43:e3:50:
ff:af:c9:f4:0a:64:d9:7b:34:fa:b9:33:b3:cf:db:
46:84:0a:bc:d8:2c:d0:fb:7f:1f:e5:bf:f5:80:36:
32:94:b5:1e:b6:2a:50:f1:3b:f4:d9:4f:3f:98:d1:
a3:90:c0:da:e3:da:a7:9a:c4:7d:22:7b:7a:42:b6:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:49:A2:C0:26:B0:CC:8B:56:3D:5B:19:33:CD:8A:30:B7:7A:73
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7a:a6:39:06:c7:ef:a2:9f:0c:f7:c3:62:f3:1d:18:3d:0c:
0e:a6:34:9d:9a:6c:26:99:6e:d0:d5:c2:6a:ab:4a:ea:db:2c:
79:94:4f:1f:6e:5b:a6:f8:d0:b9:48:23:56:d2:3f:94:78:79:
90:80:59:40:b0:cf:99:d4:44:b7:8f:14:82:0b:dc:0f:35:34:
21:15:a5:3b:1b:81:e7:24:f3:67:88:6e:7d:d9:7d:fe:b5:50:
72:cd:9a:d8:cf:20:0b:de:78:8d:94:45:d1:88:97:06:9c:be:
f9:75:63:75:7a:7a:b2:91:72:6d:85:6c:b8:3c:c7:8d:fd:af:
e9:b3:64:bf:6d:3a:da:77:d1:fb:95:61:10:28:f3:97:ec:82:
3d:66:bf:40:7f:fc:ca:99:00:2f:64:3f:a1:86:ac:93:42:4f:
7a:c2:2b:a4:7b:9a:bb:ac:67:cc:cf:a2:5e:f0:6d:f6:a7:d3:
f7:2d:8f:c4:3d:66:c5:d4:de:e3:a8:5a:43:a1:a3:1e:73:bf:
ee:51:4a:a8:db:f2:f3:aa:f8:44:ff:e8:8b:58:7d:b3:4d:c7:
e5:ef:39:b4:93:03:e5:3b:e8:77:53:11:18:f9:14:f8:88:a7:
71:c2:b1:d2:38:04:e9:f4:d6:85:ab:37:54:1f:28:7d:b3:35:
d1:25:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:00:42 2025 by rpki-client