Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: d9QrzXEk3VkWnVCPU7hJyRB4FQcJXTs1OpEk8GzfHbg=
Subject key identifier: 99:EF:F2:CC:4B:1A:70:2F:7A:A8:F9:5F:DC:DD:1C:EC:A5:9B:46:A3
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 019A725C569EF570417330293F7FF3168082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 1622
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: TpkbXci03fEDGlqhALRNwgldCOM4x2I6asOmPGqBf7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:56:9e:f5:70:41:73:30:29:3f:7f:f3:16:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=99eff2cc4b1a702f7aa8f95fdcdd1ceca59b46a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a8:0e:1d:5e:05:a7:39:c3:f5:4c:9a:5d:3c:
19:01:56:f0:28:39:01:64:09:cc:c3:24:0b:30:3a:
df:4c:88:ec:d6:b9:3c:cd:40:df:dc:71:dd:ed:71:
79:6d:7a:78:82:b4:02:3e:e6:2e:1a:5b:72:9d:9e:
30:c0:aa:85:7a:3c:14:3b:ad:c2:1e:73:45:33:1a:
92:49:32:65:2b:e2:52:28:c4:13:55:9c:9e:44:18:
be:f2:05:7a:aa:b2:9f:bf:d5:a2:ec:84:e8:41:05:
c9:b9:6c:01:ba:e1:c8:97:0e:1b:c0:9a:08:38:a3:
e4:49:08:6e:8f:36:01:77:f6:75:37:5b:05:44:e8:
b4:6a:8c:a6:44:43:a4:a0:21:38:d7:a2:ff:1f:98:
17:99:a3:27:11:5a:1d:b5:b7:66:19:f7:86:91:f7:
f1:a1:3b:54:55:ae:43:a1:98:dc:93:08:48:d9:6d:
03:d5:ce:31:58:ae:c4:18:dc:11:bd:c2:9c:56:db:
11:f7:c6:71:0e:08:75:d9:2d:7b:c8:0c:a0:50:60:
58:93:a2:6b:cb:62:2e:c0:0d:de:53:4e:09:23:d1:
a5:86:54:bd:38:90:43:e1:ae:67:90:bc:7a:d2:03:
b1:35:55:da:f3:63:b2:29:31:f7:26:59:37:ac:c4:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:F2:CC:4B:1A:70:2F:7A:A8:F9:5F:DC:DD:1C:EC:A5:9B:46:A3
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:87:af:37:38:3a:00:4d:3c:b9:a3:aa:55:db:d9:e2:5e:19:
1f:8d:7f:c4:03:82:5f:c8:82:49:34:63:35:6c:3d:4b:9f:55:
05:03:01:7f:79:49:ab:c8:04:2a:be:ec:3f:9b:12:cf:90:d7:
db:59:62:9e:a9:5d:e4:70:70:f8:59:8f:90:b7:2c:9f:e6:f7:
d5:74:af:5f:c2:17:c3:e9:97:42:78:be:13:cf:7e:d2:7a:fc:
63:03:2f:c0:ae:a9:ad:07:be:82:d4:18:c1:b3:e6:0b:92:a5:
a9:59:fd:e9:c5:99:9f:71:4d:40:61:e0:50:56:54:58:03:ea:
ae:6f:a7:73:63:c9:eb:35:d7:fe:37:8d:20:c5:fa:de:08:ea:
94:e3:26:df:70:dc:5e:00:df:ed:25:e0:b3:46:79:81:9a:c6:
8a:71:f7:c5:19:f9:2b:41:d1:f6:52:0e:06:ec:3e:10:05:c5:
52:9d:00:42:c8:24:d7:25:40:a8:8d:f3:ae:39:ad:8d:70:92:
91:ad:2e:98:58:ea:b7:8d:15:69:4f:7f:89:52:66:62:3c:00:
b7:12:20:4b:06:6b:1f:bc:e0:8d:5b:5c:43:53:a8:33:ff:7f:
f3:a9:af:26:f0:3f:2d:73:c2:6a:2b:fe:3c:76:8b:bc:46:ce:
07:b1:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:41 2025 by rpki-client