Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: sGwBgvdsFNOsy+sE5ypnUqkc6PV6FNgt9s6oX4ZNV2M=
Subject key identifier: 59:1D:BF:D3:D1:C8:18:5A:5E:65:B7:F8:02:A6:17:66:FF:78:DD:F2
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0198D5163C8401F899EC60A28B756B7FED92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 154C
Signing time: Sat 23 Aug 2025 04:01:00 +0000
Manifest this update: Sat 23 Aug 2025 04:01:00 +0000
Manifest next update: Sun 24 Aug 2025 04:01:00 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: +EkZythqlRS2ySCRj4Eli8UER97gv0BSv7w9EyFvk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3c:84:01:f8:99:ec:60:a2:8b:75:6b:7f:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Aug 23 04:01:00 2025 GMT
Not After : Aug 24 04:01:00 2025 GMT
Subject: CN=591dbfd3d1c8185a5e65b7f802a61766ff78ddf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:1e:18:10:e2:22:4f:1f:21:ed:62:41:70:
c4:aa:29:69:af:e6:aa:74:10:e4:c8:37:38:07:1e:
92:b2:ed:d6:6c:9e:4e:3a:b5:1f:e5:94:0e:bd:ec:
86:65:25:05:b6:db:11:10:64:d5:1e:fb:9f:cd:de:
42:73:5d:dc:96:f9:b9:fc:95:0c:46:19:48:40:bf:
2e:89:70:4d:7d:c7:38:93:5b:a4:d6:d2:99:b5:c7:
18:29:18:e8:64:3b:5a:fa:45:fc:b5:e8:73:35:46:
6a:29:74:e6:bf:0e:fb:42:1e:b7:e9:d0:ed:19:03:
38:ce:4d:77:f5:c6:e3:25:56:6f:52:9f:12:50:91:
4e:2b:b2:6b:3d:1c:cc:f6:96:8e:f4:f7:85:4a:7f:
67:04:59:26:00:b2:30:f8:51:e7:0f:53:03:b0:46:
84:84:66:01:90:94:60:1e:89:f2:1d:6b:98:eb:ea:
f3:8f:f5:04:1e:41:fc:6e:33:54:22:49:e4:dd:a7:
f7:c6:ab:c1:95:1a:ad:7f:90:4f:d7:d4:7a:cb:d0:
29:e9:ae:b4:41:81:d4:60:e4:8b:b8:61:ec:25:1c:
9c:96:68:46:a9:5c:02:f7:00:77:d1:31:7a:b4:2e:
a5:8d:1f:19:17:b5:47:71:d0:77:7c:e9:cc:ce:4a:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:BF:D3:D1:C8:18:5A:5E:65:B7:F8:02:A6:17:66:FF:78:DD:F2
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:60:8d:f9:8d:3f:94:96:35:ba:0b:37:d0:22:ef:f0:8a:04:
34:c5:83:ba:79:91:47:f9:b0:0f:fb:cf:ff:6d:94:e4:5d:16:
5e:38:02:65:72:9b:83:f1:d1:e4:c0:b2:7b:2c:41:39:26:a4:
65:10:9e:da:c2:d0:88:ec:82:0c:b4:35:4b:dc:01:a6:ff:69:
87:76:43:76:fa:d3:95:cb:77:8c:16:07:e3:71:32:04:e7:02:
05:9f:74:7a:31:18:c5:51:5f:ee:51:cc:c8:8c:bb:77:da:7a:
c4:b5:e2:57:e2:db:68:63:41:8c:be:13:fc:2a:c9:95:81:50:
c6:d0:44:86:9e:0c:99:05:ed:7d:ff:d8:c7:98:ca:8f:d9:80:
d8:ed:04:58:ae:69:b8:62:b6:63:c9:c0:ea:08:1d:23:56:fc:
59:28:79:0f:47:5e:cf:87:ee:72:fe:61:2e:4d:30:1d:f7:90:
04:28:7e:2c:59:d7:45:1b:31:4f:a5:77:f0:7d:72:5a:78:67:
a4:65:8b:b5:a9:12:a1:70:24:73:86:02:10:63:d5:5d:06:8c:
47:9f:4e:94:03:2f:b3:f9:bf:12:83:1a:0a:68:de:2e:74:23:
03:61:35:59:88:5c:b1:78:fd:33:7e:ae:a1:7b:5e:1d:ae:e0:
55:62:ab:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFjyEAfiZ7GCii3Vrf+2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx
NWIyMzkwHhcNMjUwODIzMDQwMTAwWhcNMjUwODI0MDQwMTAwWjAzMTEwLwYDVQQD
Eyg1OTFkYmZkM2QxYzgxODVhNWU2NWI3ZjgwMmE2MTc2NmZmNzhkZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XceGBDiIk8fIe1iQXDEqilpr+aq
dBDkyDc4Bx6Ssu3WbJ5OOrUf5ZQOveyGZSUFttsREGTVHvufzd5Cc13clvm5/JUM
RhlIQL8uiXBNfcc4k1uk1tKZtccYKRjoZDta+kX8tehzNUZqKXTmvw77Qh636dDt
GQM4zk139cbjJVZvUp8SUJFOK7JrPRzM9paO9PeFSn9nBFkmALIw+FHnD1MDsEaE
hGYBkJRgHonyHWuY6+rzj/UEHkH8bjNUIknk3af3xqvBlRqtf5BP19R6y9Ap6a60
QYHUYOSLuGHsJRyclmhGqVwC9wB30TF6tC6ljR8ZF7VHcdB3fOnMzkq4KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkdv9PRyBhaXmW3+AKmF2b/eN3yMB8GA1UdIwQY
MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt
NWY0Yjg3YWRhNGI1LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1
LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWCN+Y0/
lJY1ugs30CLv8IoENMWDunmRR/mwD/vP/22U5F0WXjgCZXKbg/HR5MCyeyxBOSak
ZRCe2sLQiOyCDLQ1S9wBpv9ph3ZDdvrTlct3jBYH43EyBOcCBZ90ejEYxVFf7lHM
yIy7d9p6xLXiV+LbaGNBjL4T/CrJlYFQxtBEhp4MmQXtff/Yx5jKj9mA2O0EWK5p
uGK2Y8nA6ggdI1b8WSh5D0dez4fucv5hLk0wHfeQBCh+LFnXRRsxT6V38H1yWnhn
pGWLtakSoXAkc4YCEGPVXQaMR59OlAMvs/m/EoMaCmjeLnQjA2E1WYhcsXj9M36u
oXteHa7gVWKr0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:39 2025 by rpki-client