Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: gYKIio6Pd+rrp7To2/d1sm8zx2mc4VnBqwIpJCWhO9Y=
Subject key identifier: 73:24:A1:2D:64:30:66:50:4F:9F:96:21:5D:2A:85:2E:06:8B:13:8B
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019A281D8AB29A6EC40C01E79AA9820B449F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 10D6
Signing time: Tue 28 Oct 2025 00:00:15 +0000
Manifest this update: Tue 28 Oct 2025 00:00:15 +0000
Manifest next update: Wed 29 Oct 2025 00:00:15 +0000
Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=)
2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=)
3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: wE0ULHabMk0VUwfsbWJ/UHq8rklkmXJKCXO0P70O7Fw=)
7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:1d:8a:b2:9a:6e:c4:0c:01:e7:9a:a9:82:0b:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Oct 28 00:00:15 2025 GMT
Not After : Oct 29 00:00:15 2025 GMT
Subject: CN=7324a12d643066504f9f96215d2a852e068b138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:b3:65:7d:fa:84:3d:5d:36:1a:cd:4e:5d:
6f:6f:c8:49:47:04:db:95:78:83:6d:71:b8:50:e8:
7a:c7:22:21:23:0b:7b:5c:ac:c2:32:6a:35:bb:41:
43:2f:ba:d6:c8:98:a6:dc:65:b2:01:c2:15:10:c0:
e9:74:c7:2d:6e:61:21:c7:2d:de:41:4c:77:ea:16:
18:37:12:5e:32:32:2a:c4:ca:56:44:b0:bc:99:48:
ec:f1:f0:da:13:56:b7:71:71:97:cd:ac:f5:cb:d7:
eb:5b:9a:27:b5:9d:4c:05:1a:a6:0c:92:68:b9:f0:
19:fc:2c:29:50:26:8b:d3:86:90:a0:d2:1d:b6:a5:
43:92:f9:80:49:cf:4c:77:31:cb:c6:3d:ef:f3:8e:
b3:e5:bf:6d:6d:d7:85:36:e9:f3:db:63:4f:31:88:
76:10:22:ea:f8:58:44:b8:b2:e4:f4:77:19:14:13:
2e:e8:38:46:62:2c:3b:a7:8b:e8:39:5e:13:16:41:
6c:29:69:ee:fd:f1:c5:53:d0:1f:c0:70:fe:8e:0f:
9c:5e:f1:8e:c0:6b:58:76:63:25:41:5d:b6:94:7d:
c7:26:bc:af:ba:85:ee:1c:40:8e:22:bb:a2:4a:c2:
eb:51:22:f6:7d:02:96:af:f4:97:f6:23:e0:24:77:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:24:A1:2D:64:30:66:50:4F:9F:96:21:5D:2A:85:2E:06:8B:13:8B
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:46:8a:f5:24:8d:4d:49:d7:20:c6:f3:24:6b:aa:70:28:c3:
ee:92:18:df:0a:07:3e:4c:b9:f6:0b:f6:8c:20:5d:dd:22:31:
dd:7e:90:12:1c:95:f9:cf:18:58:27:6f:6d:57:89:1a:94:73:
a7:f2:6a:cb:3e:25:ee:be:d2:1f:d4:82:e8:b0:38:dd:f6:de:
d9:41:92:ec:0c:96:d3:03:87:f7:30:3f:c2:f8:01:f2:87:5d:
cd:c4:0d:4b:b5:4a:07:37:ed:bc:1d:af:d7:17:48:97:0e:fe:
18:bc:9b:d6:26:cf:12:51:0a:a9:b0:be:73:c5:cb:14:f0:8b:
ce:8e:c8:a8:72:07:c1:e0:3d:01:cd:88:cb:6b:bc:2b:86:b6:
c1:56:dc:bd:b8:dc:4f:82:1e:dc:59:26:48:db:bf:6a:89:6b:
55:d5:72:30:a2:a3:cd:48:d1:c0:5f:ac:fd:46:49:cc:57:31:
a0:d8:18:f1:a9:fc:08:ad:e9:34:6f:81:ec:39:7b:55:b7:48:
0e:d0:73:a8:55:e6:b8:59:d2:60:c6:d4:b8:39:29:82:28:2b:
80:14:c6:a4:fd:21:49:ec:80:8b:c2:05:a6:b7:23:e4:65:19:
d9:67:b8:85:89:af:da:ce:6a:ff:3a:5a:62:29:74:56:84:98:
2e:4c:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:00:41 2025 by rpki-client