Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: u6mWbsvDJAxrIbS+2b8sYrpR4onrZYSQjMfEnMOqpVs=
Subject key identifier: 2D:16:EA:CD:E3:E8:B3:7D:91:65:42:7F:8C:C7:A6:A1:C3:7E:5A:1C
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0199FC8F42029256BC7BBAF9136C8F3996E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 15E5
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: Jm5XYcUtFyctu4ri5oj7YVEDQ8I2AUwqmLs5f+qXfeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:42:02:92:56:bc:7b:ba:f9:13:6c:8f:39:96:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=2d16eacde3e8b37d9165427f8cc7a6a1c37e5a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:d1:c1:9c:b1:10:02:5f:70:4b:ab:77:48:
85:b0:51:08:54:53:21:52:e2:42:73:6d:f0:3f:a4:
35:ba:f2:42:fb:12:5b:1f:8c:29:2e:a5:dc:ef:56:
4d:ad:b2:38:ad:58:dc:23:ed:21:8f:a2:a5:18:10:
c2:e9:5c:b4:3f:1b:c4:2b:b3:32:01:60:b3:ab:56:
9c:7d:64:1d:da:25:ab:3b:53:6e:77:c9:9b:07:20:
d9:16:7e:de:b4:0a:bb:6f:e4:a9:6a:0e:64:76:92:
58:1e:08:42:46:7a:3c:53:77:29:02:a5:a4:b3:91:
e7:ee:d1:48:7d:3c:ad:0b:2d:03:3a:62:64:41:9f:
4e:e0:04:53:22:76:45:c1:ba:d4:d6:2f:3d:a9:fe:
3f:95:97:48:f8:66:7e:7b:1e:28:39:25:85:58:b0:
87:53:34:83:07:bb:7f:49:61:c0:91:c5:71:60:9e:
f7:6e:5e:96:c1:15:6e:0f:6b:c7:34:cb:f1:4b:9a:
01:af:a5:f9:fc:99:56:ea:d9:1c:dc:ae:dd:df:d6:
c2:b2:a4:23:b3:ad:c8:b6:b5:62:f4:a0:9e:0e:ef:
46:79:f8:22:00:ae:98:dd:94:e2:61:9e:fb:b7:15:
ce:5a:39:76:c1:4a:74:3a:64:33:b3:66:62:70:65:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:EA:CD:E3:E8:B3:7D:91:65:42:7F:8C:C7:A6:A1:C3:7E:5A:1C
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:95:7f:f0:fa:94:50:9e:27:89:c2:3d:f1:a2:37:67:62:
64:3d:6b:30:24:4d:4e:62:fd:d4:8c:e5:3d:67:a8:4a:da:e2:
cd:06:91:ea:df:60:14:7d:37:00:e5:f5:d9:9b:f9:c0:48:d8:
d7:da:9f:15:4a:5c:20:5a:15:78:36:f5:c2:b5:1b:bb:e7:16:
fc:6c:bf:e9:1e:b4:4a:f9:62:55:24:88:51:fd:41:20:5b:f1:
1d:47:8f:66:b6:bc:20:9b:45:e8:44:9d:31:8b:16:87:8b:11:
9c:c3:b3:73:4f:f9:0e:88:aa:91:ec:95:95:6f:0d:e5:4e:d8:
97:23:c8:7d:f5:ec:bb:58:a4:7a:dd:15:8a:c0:9e:9c:b1:39:
9e:55:d5:74:74:b2:a2:d1:6b:ca:80:6b:ca:94:ba:3c:5e:e9:
66:d5:9b:a8:1c:ae:29:dc:b5:5f:53:09:8a:72:1b:cb:1d:50:
6a:43:05:93:35:24:55:5c:83:df:13:f5:d1:1f:6f:01:f8:a2:
b2:e5:f4:74:a6:bb:15:18:04:39:4a:98:52:c6:b5:85:a5:47:
a0:aa:a6:c8:f4:c7:82:a5:d7:11:f0:ad:05:dc:e5:bc:10:23:
00:40:c5:bc:e1:ba:a9:05:b4:6c:84:89:e6:19:ae:41:1e:18:
25:a4:43:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0ICkla8e7r5E2yPOZbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx
NWIyMzkwHhcNMjUxMDE5MTMwMTEwWhcNMjUxMDIwMTMwMTEwWjAzMTEwLwYDVQQD
EygyZDE2ZWFjZGUzZThiMzdkOTE2NTQyN2Y4Y2M3YTZhMWMzN2U1YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOHRwZyxEAJfcEurd0iFsFEIVFMh
UuJCc23wP6Q1uvJC+xJbH4wpLqXc71ZNrbI4rVjcI+0hj6KlGBDC6Vy0PxvEK7My
AWCzq1acfWQd2iWrO1Nud8mbByDZFn7etAq7b+Spag5kdpJYHghCRno8U3cpAqWk
s5Hn7tFIfTytCy0DOmJkQZ9O4ARTInZFwbrU1i89qf4/lZdI+GZ+ex4oOSWFWLCH
UzSDB7t/SWHAkcVxYJ73bl6WwRVuD2vHNMvxS5oBr6X5/JlW6tkc3K7d39bCsqQj
s63ItrVi9KCeDu9GefgiAK6Y3ZTiYZ77txXOWjl2wUp0OmQzs2ZicGXhwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0W6s3j6LN9kWVCf4zHpqHDflocMB8GA1UdIwQY
MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt
NWY0Yjg3YWRhNGI1LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1
LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnuVf/D6
lFCeJ4nCPfGiN2diZD1rMCRNTmL91IzlPWeoStrizQaR6t9gFH03AOX12Zv5wEjY
19qfFUpcIFoVeDb1wrUbu+cW/Gy/6R60SvliVSSIUf1BIFvxHUePZra8IJtF6ESd
MYsWh4sRnMOzc0/5DoiqkeyVlW8N5U7YlyPIffXsu1iket0VisCenLE5nlXVdHSy
otFryoBrypS6PF7pZtWbqByuKdy1X1MJinIbyx1QakMFkzUkVVyD3xP10R9vAfii
suX0dKa7FRgEOUqYUsa1haVHoKqmyPTHgqXXEfCtBdzlvBAjAEDFvOG6qQW0bISJ
5hmuQR4YJaRDJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:10 2025 by rpki-client