Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: t3s+nV3R4gPBG/C5gJVAmGNyhM0XhHZv/Yu9ZKj0/L8=
Subject key identifier: 2A:A7:AB:1D:EF:5B:F7:77:0E:BE:89:06:D3:8D:ED:FC:47:13:C7:E8
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 01992D0FB4B010CBB672A32855C19D59E89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 1054
Signing time: Tue 09 Sep 2025 06:00:27 +0000
Manifest this update: Tue 09 Sep 2025 06:00:27 +0000
Manifest next update: Wed 10 Sep 2025 06:00:27 +0000
Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=)
2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=)
3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: W63+iKSEvtFRzyQP2z+zgHv/jAIYMVXVFtLqEcmW/es=)
7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:0f:b4:b0:10:cb:b6:72:a3:28:55:c1:9d:59:e8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Sep 9 06:00:27 2025 GMT
Not After : Sep 10 06:00:27 2025 GMT
Subject: CN=2aa7ab1def5bf7770ebe8906d38dedfc4713c7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:b3:ed:32:ef:51:f1:7e:51:ed:a2:a7:b6:
ff:1e:d5:44:28:89:bd:5d:46:cf:d0:c6:6f:76:b5:
2a:6c:16:61:bc:b1:e2:5c:fd:4a:db:bc:7e:47:89:
57:74:7c:2f:75:cf:bc:bd:8a:bf:7e:d5:6c:b8:6b:
1f:d2:9f:34:86:b6:6f:70:9c:c0:47:ba:f2:ed:57:
18:7f:fe:fe:fc:e7:ea:f6:ce:02:77:0c:21:7c:ab:
b6:82:fb:9f:78:91:cc:2a:c8:cd:b4:d2:37:68:4f:
fd:81:75:72:9f:70:e7:03:6a:f3:79:2e:bc:f9:ac:
8e:a3:b7:73:0b:3f:de:93:e0:ed:47:3d:ab:b8:02:
b8:e1:b2:55:76:f0:0b:27:e7:37:b7:90:3f:cc:b3:
2c:23:82:9c:9c:db:bf:25:4c:ba:ab:0b:a2:c2:4d:
e0:08:84:dc:35:82:94:a2:3c:8d:4e:24:ca:67:b4:
0c:e4:56:5c:9a:0d:f9:aa:b7:21:d1:2a:ba:41:27:
71:07:89:cb:3d:3f:08:1a:da:f2:a7:d6:af:d7:c8:
1e:d1:0a:2f:60:0d:38:b9:3a:0a:84:ca:99:d0:7d:
48:c9:22:8c:7e:96:f8:6c:e3:9a:1a:c4:45:86:65:
06:0e:4d:dc:ff:26:1f:3a:a8:16:9e:16:8c:41:a0:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:AB:1D:EF:5B:F7:77:0E:BE:89:06:D3:8D:ED:FC:47:13:C7:E8
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7c:92:47:09:d8:20:d1:f4:71:f6:6b:7d:a6:16:63:cf:f3:
51:ab:b4:12:b2:82:be:c7:77:16:e0:f8:23:d2:62:3e:03:d6:
99:d2:72:1a:06:90:62:c7:1e:ec:e9:fe:e4:ac:52:c6:91:4e:
b0:81:d1:ce:fa:53:48:2d:1b:ec:ef:57:58:90:27:37:1b:c6:
cf:c8:b6:2b:82:38:12:4e:ff:7f:ba:8f:1f:77:8d:87:71:8a:
17:df:6a:f4:7f:1a:bb:a3:25:21:00:c2:87:e0:47:d7:d7:d1:
a1:d4:e1:6c:59:28:26:0b:18:eb:85:06:ef:a5:4a:96:ee:1f:
17:30:52:b6:b9:6a:bf:bf:56:d2:71:6b:7c:e2:ea:66:55:89:
b4:04:49:20:5a:39:ac:24:f0:0c:60:b2:eb:a3:8d:0f:59:63:
80:87:4f:9a:ae:df:fa:73:06:23:e9:c4:df:01:40:75:72:de:
75:5b:e6:b5:79:8d:df:5d:d4:c3:ee:be:10:c4:c2:82:07:e8:
d4:cd:32:1f:56:26:00:0f:47:79:47:cb:26:67:f8:fa:99:ed:
61:f4:e2:68:ae:d4:ff:13:d1:25:7c:fe:3b:00:5c:71:18:01:
f3:01:59:93:59:51:6d:7b:e4:81:bf:0d:81:4b:f9:e9:64:ae:
bd:8b:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:30:25 2025 by rpki-client