Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: kTB4clDOPcNwem575MjkKfee6CS3H72iC+AbXc0XJYk=
Subject key identifier: 9B:BB:4B:90:07:A1:0B:8B:DB:AF:C2:7C:AD:E9:22:A8:AD:4F:F2:67
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0199225592A1936D6D66A151E68740E5754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 1574
Signing time: Sun 07 Sep 2025 04:00:57 +0000
Manifest this update: Sun 07 Sep 2025 04:00:57 +0000
Manifest next update: Mon 08 Sep 2025 04:00:57 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: TPYQpU5hPPmr4RPn4UebX91N7pu5kPenTtsMJDHn8kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:92:a1:93:6d:6d:66:a1:51:e6:87:40:e5:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Sep 7 04:00:57 2025 GMT
Not After : Sep 8 04:00:57 2025 GMT
Subject: CN=9bbb4b9007a10b8bdbafc27cade922a8ad4ff267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:ac:f5:e6:a6:95:da:d5:00:43:a0:78:a0:
27:65:5a:e0:8b:91:9c:1d:59:06:5a:14:d8:ee:2e:
bb:05:c8:14:ef:bd:83:ab:a0:28:bb:75:b7:22:28:
19:14:35:27:e1:04:9d:73:80:ce:12:f3:74:6e:b4:
3a:26:59:83:a7:bb:5f:80:80:95:3a:b6:a7:c6:27:
80:d5:f6:dc:da:29:82:2e:af:48:33:43:7e:2c:26:
ec:ed:9d:ae:41:53:cb:1f:d4:17:f5:32:1b:c8:3e:
23:7b:95:77:2c:79:13:b0:17:54:e3:c9:0a:fb:0e:
1d:8d:92:a0:6d:0c:89:04:36:bd:b7:36:38:a3:bb:
66:26:b3:41:05:59:9b:7f:76:10:8a:7c:7b:3a:42:
1e:b1:c4:86:28:09:d4:f6:45:26:86:4c:31:02:a4:
a5:d1:c3:e5:85:36:89:5b:1e:b4:3d:73:e6:20:b2:
3e:dd:8f:65:fb:8f:0e:d5:5a:bb:dd:3f:4b:c4:00:
4e:69:21:b4:ef:b4:ee:73:3a:94:29:0e:5b:19:7c:
c7:f6:3d:49:de:b5:40:55:b2:ab:f3:70:8a:92:85:
59:70:c7:22:b5:fc:03:1a:5c:af:1b:19:a8:4b:33:
99:60:de:b8:2e:df:14:44:ca:39:0c:21:4c:bb:2d:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:4B:90:07:A1:0B:8B:DB:AF:C2:7C:AD:E9:22:A8:AD:4F:F2:67
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1f:68:d3:0f:a9:7c:ea:c4:9d:12:1c:42:53:35:a6:5b:a0:
e0:c0:fe:85:37:16:09:c1:87:7b:bc:8a:eb:7c:73:3c:fa:9a:
0d:02:38:d8:f2:5b:f9:3c:d6:d6:6c:e6:61:1c:70:1b:de:4c:
23:f5:49:50:1c:43:a3:40:2b:0d:48:11:cd:7a:92:f6:74:39:
c6:2d:5b:16:53:f7:ee:1b:6a:74:82:bf:8a:1a:33:80:39:53:
b4:14:e0:ce:93:8f:9a:e8:90:0c:2f:a8:e7:66:e0:bf:d9:dc:
b8:2a:63:f5:87:55:40:a8:d0:83:92:7f:33:d6:31:db:10:30:
16:ad:a4:7d:3b:8a:5d:d9:f8:f6:9e:4f:0f:f3:3f:0c:c7:1d:
db:35:63:a7:1d:7d:15:21:75:d9:98:63:07:7b:1b:98:d1:5e:
24:8c:91:79:d4:65:64:03:40:e6:42:41:fd:1e:28:65:73:21:
c7:64:df:77:08:c0:3c:47:f8:23:8f:fe:8b:71:fa:09:a1:a7:
d5:f5:b9:14:00:19:b7:28:fa:f2:07:91:6a:a7:f9:5c:0b:60:
da:be:1c:81:e5:6f:4c:61:f7:12:3f:1c:cb:fc:cc:4e:a7:ee:
53:9c:87:a7:6d:53:67:32:85:e6:5f:4e:5f:9c:33:a1:a6:8b:
5d:d2:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:24 2025 by rpki-client