Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json)
Hash identifier: HIg95AO5gghyIAVkrOt8/B11gGU/fieyBQlCPZUVZeA=
Subject key identifier: 85:03:F7:0F:EA:4A:0C:DB:B6:11:79:63:30:4D:98:DE:30:50:63:65
Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f
Certificate serial: 019921B10D30BE2F85B4651FFD2EE4ED90DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
Manifest number: 91
Signing time: Sun 07 Sep 2025 01:01:15 +0000
Manifest this update: Sun 07 Sep 2025 01:01:15 +0000
Manifest next update: Mon 08 Sep 2025 01:01:15 +0000
Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: gzOriQcI39Qhr1tSAq2T7a6N6Niw+mlMlG+m9zCfNEs=)
2: vGkLbSDH1uJpYJ7xzGoQmZeUqxg.roa (hash: 2OV0rpyTFmg8lfpImi7TfQmWayywKrEbAhbjG35gI2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0d:30:be:2f:85:b4:65:1f:fd:2e:e4:ed:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f
Validity
Not Before: Sep 7 01:01:15 2025 GMT
Not After : Sep 8 01:01:15 2025 GMT
Subject: CN=8503f70fea4a0cdbb6117963304d98de30506365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:54:e6:95:a4:0a:91:1e:6e:ac:f6:2a:b4:
5e:0b:49:30:97:8f:84:76:b9:b9:4c:d3:c4:84:a5:
d8:5c:40:1a:3b:df:b1:4c:eb:41:c7:23:3d:13:77:
5d:3c:59:7d:58:05:79:5b:ca:ea:d6:8a:94:65:89:
63:12:72:89:fd:fb:23:96:f9:82:33:bc:51:d5:01:
7e:b0:dc:1d:68:30:db:35:df:88:bb:aa:6b:c9:52:
63:a1:b9:37:8f:4b:c7:25:45:82:b8:56:e5:b6:45:
ed:24:69:b9:86:92:a4:d1:36:bf:c8:9e:c3:96:31:
23:ff:8a:ae:dc:d3:33:f0:43:b0:8f:4b:92:12:3b:
5a:11:3e:cb:01:32:64:7e:e4:ba:35:f6:f0:79:9b:
e9:35:be:11:bc:88:12:8f:de:8c:14:5b:73:9a:b9:
8b:49:63:28:e2:28:ed:27:15:7e:bd:56:19:f2:39:
26:d8:f7:aa:e5:86:43:a0:52:50:23:51:12:35:e2:
bf:5c:b8:36:60:32:ad:09:a5:d6:0e:8a:64:53:e1:
40:77:d1:6f:33:c2:55:c2:24:3a:67:6c:ae:ca:42:
ba:90:91:fa:e1:f4:40:78:ef:bf:4c:0a:30:64:b3:
16:c7:c5:e1:d4:8f:c3:13:1c:5f:1a:25:df:ee:f6:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:F7:0F:EA:4A:0C:DB:B6:11:79:63:30:4D:98:DE:30:50:63:65
X509v3 Authority Key Identifier:
keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:68:3f:c4:84:ab:9d:63:84:ba:4b:ac:82:e1:f4:de:b0:a2:
dd:52:63:8b:be:e2:78:ee:2a:7b:b8:ed:9f:21:73:b5:8b:42:
83:51:ae:22:50:52:42:b0:77:78:73:22:3e:d5:0e:f5:2f:28:
67:ed:15:7b:9e:42:fd:19:41:96:a4:65:d8:db:5b:00:87:04:
2a:1c:90:1f:dc:57:ad:82:46:83:4f:99:9e:e7:6a:eb:f0:9e:
74:a4:bd:07:ef:3b:e2:91:89:d7:e9:a3:e2:e3:a0:84:80:8a:
ef:07:2e:71:a7:f5:54:d2:bf:b6:16:d2:46:bb:52:ba:e5:03:
ba:ea:a3:23:44:9b:f0:0d:06:47:74:2a:9d:e6:92:ca:9a:90:
86:55:6b:ec:95:1d:bc:e6:97:32:43:d5:73:8d:d9:ee:06:a7:
1e:f4:a9:59:b0:c4:9d:ac:37:0e:01:cd:9e:30:6f:78:7e:54:
2a:6a:2f:73:bb:0d:e7:21:21:cf:16:38:8e:13:f0:f2:88:1c:
0e:c6:12:3e:bd:ab:29:4e:2d:89:83:99:02:1d:ac:7b:cd:b1:
77:37:95:d7:8b:e8:af:c5:d2:e2:da:b6:14:e9:03:ef:08:e0:
46:84:dd:ea:1a:94:21:45:f9:e7:f9:7c:0a:97:76:00:05:91:
b2:7d:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:43 2025 by rpki-client