
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: jwh3vdBM4KXLvnHoLTmF3WZESpbBDDRFbsgCSPe6Q5o=
Subject key identifier: 8D:F4:16:4E:DB:32:B3:3F:C8:33:46:F3:79:EF:11:73:8C:8E:05:DB
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019933496C4C23E32B1ABB371D2273496F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 11:01:13 +0000
Manifest this update: Wed 10 Sep 2025 11:01:13 +0000
Manifest next update: Thu 11 Sep 2025 11:01:13 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: I8L7uEqM6+u//R30daVZ05uqzJbpzyLP/ttum8fF+OI=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:6c:4c:23:e3:2b:1a:bb:37:1d:22:73:49:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Sep 10 11:01:13 2025 GMT
Not After : Sep 11 11:01:13 2025 GMT
Subject: CN=8df4164edb32b33fc83346f379ef11738c8e05db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:20:32:0b:1b:d1:40:ad:ff:96:38:65:d8:
7a:55:db:da:e0:da:7b:d4:83:ee:35:07:92:93:75:
11:6e:70:a3:c2:9a:f9:af:b4:22:9e:00:64:f4:75:
07:7b:4d:be:2d:12:b3:4f:85:02:c5:00:d1:f0:b1:
23:b5:fb:a4:22:ba:2c:42:0d:a8:9b:b6:51:54:db:
aa:93:5c:b8:8c:60:64:a0:20:02:38:46:27:e1:81:
96:66:7e:35:a0:ad:6a:89:03:a2:42:c3:39:6a:7d:
c1:90:0e:ea:15:f2:d8:8f:66:06:8e:12:9b:22:0a:
01:5f:78:07:b1:f5:17:e2:5d:f9:92:00:c4:19:3d:
1b:7e:d0:60:cf:7d:57:54:3c:7e:f2:20:01:ab:a4:
62:1c:71:03:94:85:60:61:69:8c:ff:04:75:68:5b:
8b:b3:f0:a6:a5:81:a8:56:ea:8a:a4:a9:78:b9:28:
d4:62:41:df:d1:e0:e2:1e:6d:fa:98:0d:1f:dd:24:
f2:b0:bd:de:f7:58:d6:24:ba:e1:a8:20:c4:98:58:
f3:a4:47:7c:1c:fe:3a:1b:4b:9c:cc:75:08:ad:31:
81:61:d0:48:d8:62:a9:fa:a8:06:e8:92:99:c5:16:
88:d4:0b:67:f7:5b:a8:0f:be:61:d2:82:c0:8b:3b:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:16:4E:DB:32:B3:3F:C8:33:46:F3:79:EF:11:73:8C:8E:05:DB
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:bf:c5:1e:89:e4:f8:e1:98:bf:95:4f:3c:3d:23:c2:d7:
75:ed:4f:ae:53:d4:f3:8a:4f:20:b1:01:6b:99:2b:30:2c:3e:
2d:54:13:53:70:d5:77:10:d5:44:35:c9:62:05:7e:2c:37:ea:
14:b0:d3:32:4e:6b:12:39:00:52:96:74:e3:9c:92:85:a9:85:
11:5d:88:ba:dc:69:f4:d8:99:0b:66:68:c7:77:78:7e:3b:c4:
46:b6:5a:88:ad:c7:05:06:ed:fd:c6:f9:c3:66:9f:53:f2:dd:
c1:95:25:70:a5:ad:2d:f0:80:29:c0:2e:c8:a1:31:7a:a1:fd:
08:3c:f6:43:90:1d:dc:40:ff:71:87:e2:df:1b:6b:c9:6a:3d:
d5:f4:05:b8:b4:63:44:90:dc:de:b4:06:d6:4a:f3:46:a1:26:
55:57:4f:ba:12:64:bb:3c:e1:84:c7:38:31:82:4b:75:ec:26:
4a:3a:2d:56:5c:cb:6a:d5:85:c4:10:08:09:d6:63:a2:df:40:
60:a7:bd:87:df:62:91:e3:e6:71:5d:4a:dd:bf:3b:77:e8:f0:
27:53:92:af:2a:0b:54:76:6b:5b:9e:d2:4f:84:32:28:a2:70:
d2:71:01:aa:9a:28:67:97:76:ec:d8:04:cc:39:dc:95:f9:d4:
d9:30:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:25:27 2025 by rpki-client