Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: zKYmMUTtXraR20b2sFs/Bx8dEVbVJuQQphkk/faQMWc=
Subject key identifier: 7A:CE:ED:29:B6:B7:FD:38:21:32:5E:AB:1E:53:63:D6:A2:D2:74:E6
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0197B7452F49C4B36BC9B374E9E7B80B962D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 14B8
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: bNv2NzA6HP5XsvvkL/UzC4xe1zZUMjYUXkv7FnjBxyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2f:49:c4:b3:6b:c9:b3:74:e9:e7:b8:0b:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=7aceed29b6b7fd3821325eab1e5363d6a2d274e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:d5:75:4b:51:6a:73:22:eb:d5:4f:e3:b2:
e5:45:b5:b9:6a:ca:34:14:fb:d2:d9:e2:71:34:c6:
2f:cd:7d:d2:18:33:d4:c3:6a:ae:3f:60:7b:4b:95:
32:87:d6:d7:d9:aa:67:a2:f3:c9:d5:b6:f6:ed:18:
95:34:d3:c0:45:aa:a8:8c:d4:21:61:23:0e:b0:20:
60:93:8e:63:27:ff:ad:db:97:28:c5:15:65:95:85:
0f:03:91:68:33:27:31:e4:f3:28:14:eb:78:54:09:
39:41:8a:b2:46:51:3d:3f:62:93:f6:42:eb:fb:9d:
e3:70:af:bc:02:9e:36:e6:e9:92:7f:b5:44:ef:a0:
35:5c:72:8e:9b:70:2d:3e:32:7c:77:96:b1:07:31:
11:31:b4:bd:b0:1f:5e:a7:40:2c:c6:cf:56:4b:18:
70:3f:44:1e:5f:87:47:26:58:e2:87:3f:69:17:f4:
09:d3:a2:3a:6a:a3:fb:6b:ed:83:6d:42:bd:b1:19:
f9:a4:30:d0:6a:d9:c4:a7:60:d5:14:80:2c:62:2c:
c1:3d:a4:d8:da:10:10:d9:b8:ee:e7:37:67:ca:be:
1f:4b:16:5f:6b:c0:9e:ae:7d:24:34:f1:2b:7f:07:
24:79:b7:99:56:b8:b9:45:7f:44:b2:80:cb:64:e6:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CE:ED:29:B6:B7:FD:38:21:32:5E:AB:1E:53:63:D6:A2:D2:74:E6
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:62:c3:e6:26:d4:da:7d:0c:e4:ec:67:46:6f:22:fe:56:12:
72:98:de:45:99:e4:35:5d:2e:59:91:82:7b:ed:59:51:c9:98:
cf:14:1e:32:52:c6:38:8c:a1:11:89:bf:da:52:44:b7:44:4f:
c7:86:53:e2:69:9e:a1:21:dc:54:50:55:33:0a:59:43:2e:bf:
4f:43:7e:ff:5c:b3:07:f4:c8:a6:f6:70:6f:39:88:7e:cd:94:
66:39:1e:29:ef:cc:cd:3a:f5:1c:b2:cb:c4:f9:57:13:71:57:
8f:96:d2:68:21:55:be:94:e8:87:06:88:0c:ba:6c:43:ba:db:
33:2d:51:85:9c:48:26:78:0e:8f:db:bf:7e:e5:fd:c1:d8:7e:
aa:69:eb:0d:9c:89:27:5b:5c:72:d5:36:10:71:44:97:7d:0d:
9a:f2:e2:57:41:f7:25:bb:f6:43:ae:68:ef:f9:d9:85:7f:c3:
d7:09:4d:49:cc:10:66:fc:b6:69:02:fe:32:bd:3e:8d:05:36:
4b:1f:18:fa:1a:5d:bf:12:e8:f1:82:d9:b4:f7:28:fc:bc:4b:
9d:aa:c5:11:7f:90:84:d7:42:3d:5a:30:02:c3:70:40:04:bd:
e3:69:43:5a:27:f0:76:6f:22:cc:53:4a:3d:f4:72:c3:8d:21:
27:4b:55:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RS9JxLNrybN06ee4C5YtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx
NWIyMzkwHhcNMjUwNjI4MTYwMDU0WhcNMjUwNjI5MTYwMDU0WjAzMTEwLwYDVQQD
Eyg3YWNlZWQyOWI2YjdmZDM4MjEzMjVlYWIxZTUzNjNkNmEyZDI3NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RDVdUtRanMi69VP47LlRbW5aso0
FPvS2eJxNMYvzX3SGDPUw2quP2B7S5Uyh9bX2apnovPJ1bb27RiVNNPARaqojNQh
YSMOsCBgk45jJ/+t25coxRVllYUPA5FoMycx5PMoFOt4VAk5QYqyRlE9P2KT9kLr
+53jcK+8Ap425umSf7VE76A1XHKOm3AtPjJ8d5axBzERMbS9sB9ep0Asxs9WSxhw
P0QeX4dHJljihz9pF/QJ06I6aqP7a+2DbUK9sRn5pDDQatnEp2DVFIAsYizBPaTY
2hAQ2bju5zdnyr4fSxZfa8Cern0kNPErfwckebeZVri5RX9EsoDLZObGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrO7Sm2t/04ITJeqx5TY9ai0nTmMB8GA1UdIwQY
MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt
NWY0Yjg3YWRhNGI1LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1
LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2LD5ibU
2n0M5OxnRm8i/lYScpjeRZnkNV0uWZGCe+1ZUcmYzxQeMlLGOIyhEYm/2lJEt0RP
x4ZT4mmeoSHcVFBVMwpZQy6/T0N+/1yzB/TIpvZwbzmIfs2UZjkeKe/MzTr1HLLL
xPlXE3FXj5bSaCFVvpTohwaIDLpsQ7rbMy1RhZxIJngOj9u/fuX9wdh+qmnrDZyJ
J1tcctU2EHFEl30NmvLiV0H3Jbv2Q65o7/nZhX/D1wlNScwQZvy2aQL+Mr0+jQU2
Sx8Y+hpdvxLo8YLZtPco/LxLnarFEX+QhNdCPVowAsNwQAS942lDWifwdm8izFNK
PfRyw40hJ0tVaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:40 2025 by rpki-client