Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
File: OyYWts97sx77_BU3aGJaTVBLJN8.mft (raw, json)
Hash identifier: BcB2oQzxlV2/P/wj+DKt9qkHPARu/hns3Z6mA+f8TT4=
Subject key identifier: 15:1F:49:09:39:AB:A8:2F:0E:AF:9C:C5:6A:22:7A:3A:A5:43:F7:6B
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 019A1E3E9125FC69BDD1C7BB505D09326E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
Manifest number: 1284
Signing time: Sun 26 Oct 2025 02:00:07 +0000
Manifest this update: Sun 26 Oct 2025 02:00:07 +0000
Manifest next update: Mon 27 Oct 2025 02:00:07 +0000
Files and hashes: 1: OyYWts97sx77_BU3aGJaTVBLJN8.crl (hash: xDQUv05D+Gr5w6tiyVk3e6UBpEBbwDTYIYTQVHRVDMM=)
2: _wX8QpS-lOA2c6_SS9CLDo_sNek.roa (hash: bqP3Me/3FlpTZE6E14EjBH8KPdWiChoYy98B7C6Sbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:91:25:fc:69:bd:d1:c7:bb:50:5d:09:32:6e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Oct 26 02:00:07 2025 GMT
Not After : Oct 27 02:00:07 2025 GMT
Subject: CN=151f490939aba82f0eaf9cc56a227a3aa543f76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:0b:16:17:28:31:06:85:00:29:19:28:21:
78:e0:37:2e:a5:97:fe:64:02:e8:4e:30:bc:8b:39:
56:44:80:94:5f:18:9f:c9:6f:87:11:11:b0:16:69:
56:69:bf:e0:00:75:5f:55:f4:2f:1d:51:10:14:05:
0d:79:1f:e2:bb:91:a8:06:39:41:53:ff:d4:bc:77:
69:b0:c1:07:90:e4:32:14:3c:9d:d3:96:49:d6:e2:
56:db:25:30:27:86:b2:22:7f:82:cb:f3:1e:26:56:
31:58:92:1a:af:db:f3:26:4f:65:67:38:d5:00:9c:
1a:52:5b:55:10:5a:da:ba:3e:dd:37:73:5b:0b:ed:
10:ca:96:da:40:d4:b1:27:4a:a8:66:77:34:03:1b:
45:cb:6f:b9:8c:79:4e:c3:89:cc:e8:5a:85:88:23:
0b:87:ff:4f:04:16:e0:d3:a2:87:a8:bd:86:04:78:
c4:c2:1e:ab:05:ad:a7:42:df:50:5e:6e:a3:9b:3b:
27:0a:e0:db:38:cb:00:90:32:52:d2:80:38:a7:cd:
39:58:30:ea:0b:be:5e:0c:0b:60:b1:82:e3:98:4e:
6d:e3:93:b8:e1:4c:73:17:1d:ab:12:ca:f6:5b:30:
61:c2:56:5c:ae:c8:45:d8:74:2b:8f:34:1b:36:8a:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:49:09:39:AB:A8:2F:0E:AF:9C:C5:6A:22:7A:3A:A5:43:F7:6B
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:b0:bc:1d:d1:07:72:53:40:83:62:a0:fc:a4:7a:ea:4e:
db:2b:e7:dd:61:a4:b5:6c:e3:66:29:f8:7e:4f:30:8a:dd:93:
d4:ff:7e:79:31:4a:94:8d:66:3a:8b:c3:02:36:d2:14:0d:4c:
16:72:02:d0:e0:4d:d1:11:db:03:fe:ce:13:56:ba:70:8a:d2:
15:8c:fb:7d:f6:8c:b5:92:69:e6:cf:fc:72:df:9f:a8:3f:3b:
cf:8d:f7:3a:99:fc:3d:74:96:e2:d1:bc:cf:3e:39:01:de:a1:
2e:d9:2d:97:ea:f8:9e:06:eb:90:d7:e2:de:c7:9e:a7:eb:21:
b9:c5:88:19:69:57:eb:5c:3e:31:4a:10:ed:f6:88:ac:fa:8e:
25:24:0f:b4:9c:5c:29:f2:a1:6f:00:8e:f5:82:25:5a:5c:4a:
9a:e4:98:27:ed:40:5c:ae:ed:0f:15:fd:8a:81:81:9a:e9:89:
a2:d7:7f:4d:52:df:87:70:16:0f:b4:cb:96:60:6b:8a:a5:2c:
6f:b0:08:9b:1a:29:24:8f:cc:7d:93:94:31:a8:66:5e:07:82:
26:d7:7a:82:c5:d0:5c:67:17:2f:52:4e:6e:1a:a3:34:d2:ef:
0e:ba:dc:22:9c:55:a7:49:b1:eb:ad:6e:21:13:69:55:83:75:
0f:5a:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:35 2025 by rpki-client