Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: iHz6Nahz1YyJz9BqZ7gxXwzwbO31XSmCOgDu4dhto14=
Subject key identifier: 1C:34:BE:13:B4:9D:A1:86:D5:00:5D:55:47:B8:D9:8C:A8:78:62:6C
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0198D6297C96C1871E6DDF1AA4D608B7DD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 1027
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=)
2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=)
3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: vstQpPTW8pUY6XVI0DKHK8ojIj3OmlS/5BDCOgBf7cY=)
7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7c:96:c1:87:1e:6d:df:1a:a4:d6:08:b7:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=1c34be13b49da186d5005d5547b8d98ca878626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b5:b9:ff:1d:16:8d:b8:d9:a5:60:f5:b8:48:
4d:69:91:91:2c:9e:cd:a8:ea:f4:39:3e:27:e4:db:
a4:43:d1:16:d9:62:e8:d5:13:90:c5:cb:c1:9c:5c:
09:ab:ef:d6:33:a3:35:b5:05:f7:01:ec:1b:1e:0e:
60:13:57:fa:31:c3:87:68:c6:55:d0:31:5a:56:4e:
c9:a8:fd:2c:de:e5:fd:ca:89:e1:42:42:ef:87:9e:
ae:6d:11:69:dc:6e:61:16:58:d5:15:06:64:da:f1:
6b:21:fe:90:e6:0b:67:63:4b:44:91:3e:c8:da:be:
58:33:1f:28:97:e0:26:d8:dc:b4:c8:15:e2:7c:39:
6b:af:b0:b7:61:86:b4:9f:5c:17:59:e2:a0:b0:e8:
69:9a:e4:c0:53:aa:e2:7e:da:8b:d1:70:8c:6a:84:
fd:33:2c:31:a3:56:f6:fb:e5:81:93:7b:23:f4:74:
c2:2b:fa:f1:ae:d3:7f:9d:a7:79:8f:8f:98:36:6d:
2c:5e:7b:89:76:c9:f8:7e:56:2f:c2:90:29:47:58:
29:2b:bf:d3:5d:80:bb:ae:9d:82:ee:28:73:26:cd:
90:d8:10:6a:16:55:65:c7:79:2d:9e:2e:9b:ab:27:
83:13:b6:bd:df:1c:f1:5c:3f:7b:08:23:01:db:d6:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:BE:13:B4:9D:A1:86:D5:00:5D:55:47:B8:D9:8C:A8:78:62:6C
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:75:9a:f9:76:4d:62:de:f1:55:ce:65:e5:ae:2c:bb:6e:0b:
a1:8d:f8:c4:50:6f:04:59:4a:2a:6d:b5:81:51:01:0b:46:eb:
45:06:60:98:71:9b:9f:e3:bc:b1:2d:e0:c1:47:37:19:17:41:
23:99:c6:9a:97:bb:52:c9:be:ac:53:ed:e9:f9:d7:66:f6:e1:
c4:a7:3e:13:b7:2d:a1:06:15:8d:7f:e6:f4:a9:b0:0f:79:89:
1b:9a:87:77:73:31:35:dc:7a:8c:61:be:24:95:61:84:b3:64:
9c:41:e3:04:77:6c:f6:1f:3f:66:7a:e1:30:38:9e:42:d8:24:
03:be:77:ca:d2:50:bb:55:14:49:67:94:3a:fd:83:68:85:cb:
f2:73:7f:b1:b5:52:1b:d8:dc:78:c6:f3:e0:5b:a9:0f:69:02:
75:0e:24:71:84:e5:5b:47:52:7f:58:2b:f9:24:e0:83:64:90:
ce:ad:8d:96:9e:c8:f5:8a:9d:9c:a1:ae:f3:ce:66:c6:34:16:
70:22:81:ca:1d:27:2c:4b:8f:d7:cc:fa:f4:8a:3a:0a:88:4e:
03:18:d9:68:58:90:b7:b1:a9:5a:24:de:96:ac:83:7e:ea:ff:
e6:04:8f:6a:e9:6b:2e:63:16:f6:d1:92:c4:fb:87:e9:7c:e6:
f2:d4:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:33 2025 by rpki-client