Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
File: oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft (raw, json)
Hash identifier: MmWvasGh4VOt1oRYx2n3Vf4xxz2joMRC6zBM9aqBRUg=
Subject key identifier: D1:1C:BE:7D:B6:29:11:58:5F:C5:69:E4:D4:E5:84:0E:EB:1D:BD:23
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0198850C30F8BA8AD2FBE06EEE4E55A7060D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
Manifest number: 0FFD
Signing time: Thu 07 Aug 2025 15:00:25 +0000
Manifest this update: Thu 07 Aug 2025 15:00:25 +0000
Manifest next update: Fri 08 Aug 2025 15:00:25 +0000
Files and hashes: 1: 2T-Kvt1bpdN0_YBGdtCgkYbtIFU.roa (hash: Mf9Gi5BZzMGQWvLtTffTsiys4iB2LC9omw3gsN9Ua/M=)
2: 8ut8tz3y77DXYwwnH4Tk5ohbpoo.roa (hash: rjplWuK2sYDzK8S0DsSM/RF7omBp5MfyQgZEev+mntE=)
3: KPfJAcgx7L3A0aFCbGFayqyF-FY.roa (hash: xJj+dDH+N/nG56pXNQf9GMw4+lIOhhZqTxulM01CFMg=)
4: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (hash: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=)
5: iK9udSOii6eVubAybBf08kgqr4w.roa (hash: ec+Jzg/u7sS5r/6pUZL1GtKcTt/c/Wl3ArbZF1Qkfkk=)
6: oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl (hash: y1mBHm6SHkbKYKCCVMnjuVXRZBB0Rk3IHw5PjeuqDQM=)
7: yFU0STDV72MqU-sRM_Kr-cA_ycU.roa (hash: 5zjLZ1D73ucyALUkDp0UIe5Nzvw4GxQzx2gLau7CgqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:0c:30:f8:ba:8a:d2:fb:e0:6e:ee:4e:55:a7:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Aug 7 15:00:25 2025 GMT
Not After : Aug 8 15:00:25 2025 GMT
Subject: CN=d11cbe7db62911585fc569e4d4e5840eeb1dbd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:d3:d3:80:fd:db:df:3e:e6:2c:00:9c:c7:
b6:66:98:1c:10:91:7a:48:82:51:78:60:4d:06:68:
bb:e7:71:8c:a4:14:46:d9:37:d7:6c:62:f3:ca:a7:
bc:ae:b3:1e:c6:2e:23:3d:08:47:e5:43:19:05:0b:
cf:3e:32:7a:b2:99:27:6f:17:eb:e9:e2:fd:32:89:
1f:74:6e:0e:f9:3c:36:dd:57:d7:50:c6:54:64:8b:
2d:d2:23:4b:4f:dc:c0:cd:f0:40:dd:e6:0c:21:1d:
f1:f6:87:2b:35:65:4c:c8:b0:71:52:bd:bf:4e:cf:
83:49:f5:26:db:45:87:0a:e6:21:56:4e:67:4f:5b:
a5:29:19:8d:7b:38:ae:13:ed:17:03:c8:6b:81:2e:
a6:82:02:d2:9b:0b:f5:46:81:1d:a8:4b:60:8b:5a:
29:5c:df:cc:a5:92:0c:34:a4:bc:ae:73:e1:2a:28:
99:3b:7c:05:ed:9a:46:55:31:d5:f2:3c:36:be:37:
eb:f8:e3:60:aa:80:d5:b8:d6:cb:cb:b3:53:e4:87:
bd:62:d2:39:52:c2:81:e5:fd:3f:3d:a9:aa:c7:48:
54:5f:29:f8:a7:f7:9d:eb:41:ea:e4:09:e9:9c:a0:
46:d0:c1:a2:4b:ae:ca:90:be:20:0b:5b:69:3b:4e:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1C:BE:7D:B6:29:11:58:5F:C5:69:E4:D4:E5:84:0E:EB:1D:BD:23
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3c:cc:5a:36:22:74:32:95:86:f9:67:26:7d:7a:1b:b4:94:
be:75:03:e9:52:9d:06:39:a7:df:59:e9:38:03:7a:13:29:90:
91:2a:36:01:af:e9:29:e3:d2:2b:f5:05:ec:5e:16:0e:32:c2:
fa:90:44:96:8e:1d:4a:29:2a:05:44:f8:46:24:fa:1e:a5:0e:
2d:9c:57:e0:34:5c:80:c9:ad:6f:0d:31:46:7d:e3:d8:0c:f7:
58:d1:d1:93:8a:13:e1:01:84:65:2d:2c:20:9a:f8:86:6f:fc:
d9:01:e0:ff:bb:21:ee:d6:a3:12:24:40:c8:30:1d:bf:8e:f4:
cf:96:99:a5:94:91:33:00:c7:fe:8a:9b:59:d9:41:d9:fd:22:
f5:48:51:c4:35:f1:2e:48:80:df:fe:5e:be:93:e1:00:0e:42:
1a:25:0f:75:87:31:04:89:75:75:12:43:43:b3:79:d4:0b:9b:
3e:a9:c8:72:ea:50:2c:f7:3f:13:35:cd:b8:d2:96:80:a6:a2:
5b:83:b2:ce:f5:d6:55:72:e4:5b:69:57:41:65:37:41:ec:61:
09:dd:ec:dd:89:91:5c:1f:b0:a1:c2:43:72:1c:f6:aa:7d:ef:
7e:a3:13:2d:33:3e:b0:da:8d:44:bc:64:9a:0a:a5:ed:90:43:
02:a0:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:08 2025 by rpki-client