Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: 5H3E+pDDQzK4AOCuDfwNLd3uhqGrwiznUnAOQQW++oE=
Subject key identifier: 0C:95:84:FE:CE:56:CA:2E:7F:0D:50:1D:EA:28:37:E4:FE:9A:FF:FF
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 01987C40E02BAC4B24C49B282B27026043EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 151E
Signing time: Tue 05 Aug 2025 22:01:23 +0000
Manifest this update: Tue 05 Aug 2025 22:01:23 +0000
Manifest next update: Wed 06 Aug 2025 22:01:23 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: f1+6Tkk8zl8DwgZlZ0HykgIrJ5DteydV/us8c2LcgoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:e0:2b:ac:4b:24:c4:9b:28:2b:27:02:60:43:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Aug 5 22:01:23 2025 GMT
Not After : Aug 6 22:01:23 2025 GMT
Subject: CN=0c9584fece56ca2e7f0d501dea2837e4fe9affff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:7a:43:63:48:e5:2a:9f:75:b4:7e:9b:1c:
cf:4d:89:ef:81:cb:fb:53:5a:66:4e:46:45:e1:77:
e6:96:f0:36:26:04:2f:ef:21:a7:63:69:8c:c4:a7:
bf:54:3f:55:05:b5:6a:3b:cc:16:21:6f:fc:75:69:
d7:0d:6c:8e:23:50:27:59:8b:c9:b7:4b:f4:9a:80:
87:1a:6f:20:65:c2:a2:05:e3:d1:97:d0:f7:a6:05:
8b:01:4f:04:52:4f:3c:6b:7b:7c:14:4b:b1:9e:73:
9b:6c:39:27:9b:54:2f:86:4f:be:e3:61:12:c4:6c:
99:32:a4:22:fe:86:81:73:1d:e2:ac:4c:bd:e9:fa:
90:f7:54:27:6f:4b:2e:47:5a:88:b9:a4:98:8a:b2:
ef:b9:50:0a:88:55:b8:49:09:68:19:bb:9a:9a:90:
8f:b5:74:b4:14:eb:92:fe:58:41:0e:b5:95:80:e6:
a1:dd:6d:bb:51:4d:ec:a5:0c:b9:e0:7f:62:63:b0:
77:aa:0c:c3:5a:43:63:5f:60:06:3e:2b:87:7a:23:
09:13:1d:10:ed:8f:45:c8:35:68:8f:a8:02:fe:bf:
14:02:7b:b5:0c:b1:fd:11:f7:4d:0d:79:3f:ac:e4:
f0:32:ea:60:0d:05:39:5f:46:af:23:40:72:42:da:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:84:FE:CE:56:CA:2E:7F:0D:50:1D:EA:28:37:E4:FE:9A:FF:FF
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:96:5f:67:b9:47:bb:5f:47:f1:18:2b:5e:01:3b:77:28:48:
f8:76:a0:d7:13:16:26:a5:ea:9d:62:f2:ad:db:0c:85:5b:69:
19:44:1d:1f:b8:14:fc:bc:7d:c0:af:d1:44:ae:af:1c:98:4d:
74:f0:7b:ef:13:bb:b1:84:74:27:2c:25:b9:ed:96:e2:a9:5a:
7b:50:6a:31:03:81:b9:e1:3c:21:a5:ef:b1:42:8d:b3:f2:01:
5c:e5:bd:20:dc:11:2f:d7:14:bb:60:25:bc:5e:81:9a:c3:a1:
75:18:94:4d:45:08:f8:12:0c:eb:2c:34:c4:60:51:e8:e7:42:
6a:d4:5d:42:c2:89:da:73:60:4b:70:bb:6c:c8:2b:5a:db:75:
95:ba:54:7c:bd:cc:0f:18:bf:f2:ce:3c:26:05:74:43:f6:64:
c9:e6:9b:9b:0c:96:e4:5e:1a:4c:e8:46:97:74:5c:b6:52:76:
f7:3b:b8:8d:c6:0c:76:2a:da:99:56:b7:00:5c:3c:86:fa:55:
80:09:8d:f4:7a:6c:9e:f2:a0:db:0b:34:46:60:f1:9a:e2:e1:
1a:8f:3c:93:94:33:6b:21:c0:91:58:48:d2:e9:bf:02:46:f2:
b7:ac:da:be:5a:b6:a7:1a:5f:9b:23:75:61:96:a2:92:c3:fe:
65:d1:70:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QOArrEskxJsoKycCYEPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx
NWIyMzkwHhcNMjUwODA1MjIwMTIzWhcNMjUwODA2MjIwMTIzWjAzMTEwLwYDVQQD
EygwYzk1ODRmZWNlNTZjYTJlN2YwZDUwMWRlYTI4MzdlNGZlOWFmZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+h6Q2NI5SqfdbR+mxzPTYnvgcv7
U1pmTkZF4XfmlvA2JgQv7yGnY2mMxKe/VD9VBbVqO8wWIW/8dWnXDWyOI1AnWYvJ
t0v0moCHGm8gZcKiBePRl9D3pgWLAU8EUk88a3t8FEuxnnObbDknm1Qvhk++42ES
xGyZMqQi/oaBcx3irEy96fqQ91Qnb0suR1qIuaSYirLvuVAKiFW4SQloGbuampCP
tXS0FOuS/lhBDrWVgOah3W27UU3spQy54H9iY7B3qgzDWkNjX2AGPiuHeiMJEx0Q
7Y9FyDVoj6gC/r8UAnu1DLH9EfdNDXk/rOTwMupgDQU5X0avI0ByQtoqPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyVhP7OVsoufw1QHeooN+T+mv//MB8GA1UdIwQY
MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt
NWY0Yjg3YWRhNGI1LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1
LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpZfZ7lH
u19H8RgrXgE7dyhI+Hag1xMWJqXqnWLyrdsMhVtpGUQdH7gU/Lx9wK/RRK6vHJhN
dPB77xO7sYR0Jywlue2W4qlae1BqMQOBueE8IaXvsUKNs/IBXOW9INwRL9cUu2Al
vF6BmsOhdRiUTUUI+BIM6yw0xGBR6OdCatRdQsKJ2nNgS3C7bMgrWtt1lbpUfL3M
Dxi/8s48JgV0Q/ZkyeabmwyW5F4aTOhGl3RctlJ29zu4jcYMdiramVa3AFw8hvpV
gAmN9HpsnvKg2ws0RmDxmuLhGo88k5QzayHAkVhI0um/Akbyt6zavlq2pxpfmyN1
YZaiksP+ZdFwcg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:51 2025 by rpki-client