Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier: j+B5Bs+C66tVsXK8PMgrKU898G/hGlja1a2wlJMmuTo=
Subject key identifier: 4B:64:21:61:C6:6F:63:46:FF:9E:CC:70:AF:85:AB:72:A4:7B:01:7A
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019A22C0A482F3B7053DAC9AF1D394E4C4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number: 1430
Signing time: Sun 26 Oct 2025 23:00:41 +0000
Manifest this update: Sun 26 Oct 2025 23:00:41 +0000
Manifest next update: Mon 27 Oct 2025 23:00:41 +0000
Files and hashes: 1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: nYXXQQvsaFCytbaBxsrvCgMzKNjlp7q9kEWV92Y/s0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:a4:82:f3:b7:05:3d:ac:9a:f1:d3:94:e4:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Oct 26 23:00:41 2025 GMT
Not After : Oct 27 23:00:41 2025 GMT
Subject: CN=4b642161c66f6346ff9ecc70af85ab72a47b017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:7e:2c:40:be:97:b9:f0:e7:d4:a8:f7:f4:
02:8e:32:59:11:39:da:83:68:13:e8:2d:ba:e7:a2:
3c:b0:e2:af:20:32:da:50:85:3b:f0:76:81:a7:a0:
f9:5c:e8:78:19:70:91:6b:74:58:ff:dc:ad:aa:a1:
ac:6e:04:9f:26:68:21:be:13:b3:86:a2:ff:3d:c5:
d9:ad:2d:18:39:6d:bf:ef:b8:ec:c7:3a:14:3e:e6:
32:c9:e4:1b:1e:2b:12:70:07:4c:2d:1f:d3:b5:3b:
c9:55:e9:c8:cb:21:be:60:65:de:0d:ab:84:4b:cf:
e1:6d:9d:c2:9f:31:14:98:9a:fd:ec:52:7f:ff:8d:
57:bb:f8:26:1e:0b:65:b2:0f:ec:7f:b6:fa:89:01:
89:68:e1:90:cf:6a:bf:f2:d4:69:fa:32:9d:8b:4d:
76:49:8c:a9:9c:9f:69:75:08:43:03:02:7d:37:63:
26:6b:78:f4:f4:e1:84:d9:5b:cb:75:b7:7e:8f:9f:
41:e0:9c:87:a2:00:aa:62:62:a6:9d:94:3c:bf:98:
77:d6:f5:69:e4:04:bd:2e:53:fc:65:b1:bf:8d:7c:
51:a3:59:77:fe:c8:f1:f1:39:fb:eb:1e:c7:90:10:
ae:27:e0:23:03:f6:52:6f:92:06:ca:a9:31:41:9d:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:21:61:C6:6F:63:46:FF:9E:CC:70:AF:85:AB:72:A4:7B:01:7A
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:85:72:27:c1:df:d4:39:7f:af:81:bf:80:0c:e1:8f:93:9b:
9b:df:d7:d5:a3:3e:4b:1a:cd:67:84:41:cf:90:a4:87:17:42:
a3:a7:37:2f:56:ae:73:16:b7:20:76:b5:73:e6:8e:7f:79:c6:
6d:b0:c7:fd:9f:3f:69:9c:de:c8:01:40:d8:06:6c:f4:3f:1d:
de:52:a9:8d:bc:e7:9d:0c:1c:6f:fb:87:27:4b:73:4c:21:97:
73:f4:d9:2f:3d:4f:73:62:ab:79:af:73:9b:eb:46:cf:5f:4d:
f2:43:b8:5d:02:ac:ca:2d:74:05:c0:86:79:8d:24:88:c5:e8:
62:82:7c:43:e7:b1:03:ee:6b:6d:09:92:27:ac:e7:23:46:8e:
e5:e2:74:62:32:45:e5:09:e0:5c:ba:1a:73:4d:d9:3b:6a:21:
95:88:c5:53:33:e8:a9:1c:8d:4f:09:f0:66:f2:22:e3:03:d8:
3c:e9:58:84:9b:a5:9e:f2:32:29:3d:e3:44:ed:09:0e:fd:7f:
73:c9:96:b5:4a:0d:51:fe:14:35:bd:ad:ce:ca:a9:67:3c:fd:
4b:16:b5:05:2a:fe:cd:95:5f:d6:e8:52:ab:04:29:19:12:82:
04:a6:65:2a:e5:4d:07:5b:2f:b7:6d:99:6e:45:ab:22:ab:e1:
4f:d4:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:52:48 2025 by rpki-client