Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: isms7awC2FoGCwsaXYkfGklZMKy1mEjrkc0H7/NHbzI=
Subject key identifier: 2B:35:C7:41:CE:14:EA:70:02:DB:11:21:BB:66:05:EF:C0:64:45:FA
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0199FBB36A862C987BE4D0262E4BB73F8189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 10BF
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=)
2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=)
3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: uGwxjvcM8O1xhSDQkej85fTSitVA0I7HrMfoKr3r8TM=)
7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6a:86:2c:98:7b:e4:d0:26:2e:4b:b7:3f:81:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=2b35c741ce14ea7002db1121bb6605efc06445fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:c8:17:d8:fb:a4:21:0b:f6:6a:23:4d:f9:
15:fc:4d:0a:ed:be:56:a6:c6:f9:96:c5:08:65:4e:
6b:a0:a2:30:ff:e1:33:4c:72:86:61:bf:ca:76:68:
c0:46:f0:aa:b1:fd:4c:d6:fd:45:9e:50:a5:b5:a3:
db:0a:b2:63:aa:a0:4c:44:ab:c9:22:50:88:05:39:
be:34:10:63:ed:49:a7:2c:4f:90:e7:37:d1:4a:e0:
eb:48:91:ed:53:e0:d1:df:0b:16:b3:05:77:c5:65:
2f:50:bf:33:3e:b7:78:ca:47:27:86:b4:d6:df:35:
6c:e1:e7:c0:99:fe:3d:16:f9:16:53:d4:94:fe:04:
a1:56:48:60:3a:0a:cb:58:85:b4:d2:e5:db:00:b9:
fb:59:46:6e:2a:71:8d:2f:07:a3:b7:29:0c:c2:f0:
16:92:6f:bf:e7:e5:84:6f:de:70:8b:31:da:ea:54:
e0:5b:fb:91:8a:a8:d2:3c:a6:f7:ff:64:8b:e5:c8:
e4:03:f5:3d:35:f7:eb:40:da:0e:c6:cd:b9:02:d5:
03:91:94:8a:41:16:32:6c:e7:3c:f4:0b:7a:76:69:
c3:56:3d:71:21:84:07:4e:ab:ec:56:7b:af:b5:f4:
94:a6:38:38:38:ce:bb:25:5f:e1:80:41:60:f7:a4:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:C7:41:CE:14:EA:70:02:DB:11:21:BB:66:05:EF:C0:64:45:FA
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b8:ef:30:d3:e0:6e:f0:8c:a2:91:2f:1d:a5:79:1d:46:e7:
61:63:8f:4e:6d:81:b3:14:4e:87:b9:d9:bc:0d:c2:a0:73:b6:
b4:c1:72:a8:6b:76:f8:5a:c4:76:df:cc:38:39:96:87:e0:f2:
22:b6:17:f2:19:c7:fe:8f:4a:10:76:0c:74:cb:54:2a:80:10:
f5:a4:5b:4b:ea:b2:59:78:20:06:81:78:89:5b:8e:e8:3b:1d:
01:41:ab:e1:d7:56:f3:be:db:01:30:8e:35:6b:d3:5d:b3:d1:
fe:31:7a:6c:1b:0e:cc:e3:88:e1:b9:1a:ba:86:71:bc:a3:a8:
66:c2:57:ac:de:f8:34:ed:45:ae:dd:1a:37:5c:9c:18:a1:d4:
71:3d:d2:7e:d2:7f:68:1e:a2:31:93:03:09:40:10:15:76:f5:
3f:94:fa:30:34:2f:f8:39:8d:66:34:6c:1f:a8:e0:54:68:fa:
fe:b6:56:4e:7e:8a:b6:c6:e7:4d:44:27:fb:c0:23:f1:75:a8:
39:6e:0b:d9:a7:fb:c7:8e:1c:20:ca:95:9a:b7:57:80:62:aa:
8b:d4:f2:b7:ab:3c:85:1c:24:b6:50:b2:58:2d:c9:34:5c:12:
8e:ee:68:a0:81:84:4d:b6:38:1c:8b:1b:b0:eb:8f:d2:28:ff:
21:5e:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:20 2025 by rpki-client