Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json)
Hash identifier: 3JqYWoTXnKRTPpcU136gT21EqWHJ8d7ooTF48hJAW3s=
Subject key identifier: 45:47:9F:D3:38:9D:9C:39:EA:33:6F:32:D9:F5:92:C3:3A:DF:8D:CC
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 0199FBEB644EC3463CE7B4CD18CA464187F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: KTqb17i5Av+1jX/vueO/gc1NISIsgHlO65WNE3wO6dw=)
2: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (hash: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:64:4e:c3:46:3c:e7:b4:cd:18:ca:46:41:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=45479fd3389d9c39ea336f32d9f592c33adf8dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:8a:58:22:b2:25:01:b5:8b:b3:e8:e7:8d:
e2:08:4b:31:0e:15:aa:60:3c:5c:75:ce:d0:5f:dd:
c2:44:2e:bb:76:c9:3e:6b:ae:a7:37:94:5e:c9:ab:
3e:12:e5:a2:4f:e0:60:4d:83:c4:3b:ff:d5:e7:cc:
ed:8a:60:3a:84:d6:69:19:b0:42:d6:89:e0:51:85:
11:99:39:d4:53:79:ba:a1:ea:d0:ea:58:46:94:fa:
15:03:61:04:23:69:f8:d9:04:45:43:ae:b9:db:a1:
12:16:ee:e4:d3:c7:f7:9e:2d:6e:7a:c4:58:b4:09:
42:d7:e5:36:1d:8b:e6:b6:a1:31:af:18:87:76:b4:
3f:35:05:cb:ce:07:81:d5:53:31:89:b3:3f:d6:0a:
8f:53:05:59:d1:a1:78:df:d8:f4:cb:e1:5f:24:56:
3f:11:ec:67:75:1e:21:ed:11:ba:c7:3f:5f:87:ac:
5e:b6:02:35:42:83:63:a6:6f:97:f7:6f:6b:c5:55:
ae:39:72:71:75:4c:cb:b4:fe:ad:6e:3a:03:7f:4a:
d4:4c:c2:8a:a1:ec:74:d7:61:c4:7f:6e:d3:3a:7d:
45:a9:56:89:47:33:01:e2:00:36:f7:91:e7:1e:a7:
78:10:23:57:53:16:bb:25:f8:3f:6d:a9:f3:cb:4f:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:47:9F:D3:38:9D:9C:39:EA:33:6F:32:D9:F5:92:C3:3A:DF:8D:CC
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3a:26:29:92:2a:e5:13:f1:5d:a0:55:24:f0:fd:be:15:1f:
e8:64:95:9c:77:8b:7e:72:12:c0:03:63:da:74:44:6c:51:76:
57:76:51:93:9a:53:7b:96:68:31:40:ed:41:c8:84:6b:1e:2b:
ba:3c:6a:36:0d:e0:49:68:c6:20:d8:5d:a1:60:01:ba:01:69:
fa:1e:56:8b:3c:b8:37:75:51:c2:24:92:e4:0d:e1:df:84:fc:
0f:43:83:f6:61:76:2d:5e:27:ce:06:fc:6a:7e:07:ca:25:46:
cc:75:d3:7c:08:37:4a:53:b7:77:8d:f6:00:f9:be:1f:f1:63:
4e:a7:cb:b6:52:ec:4c:00:cf:bd:dd:b4:8b:54:e6:20:77:d5:
35:69:4a:84:40:8c:de:e2:e4:c7:82:dc:e0:0b:9f:03:3a:6c:
18:53:f3:83:52:0a:c3:8b:71:05:18:db:69:23:3d:25:18:df:
1b:27:c6:d1:1b:4e:5f:3b:1f:e3:79:19:99:b0:e9:8b:1b:48:
5a:47:d1:a9:4d:a7:dd:fa:d9:17:a4:f3:a5:e1:21:38:ab:8f:
4d:47:fe:52:a8:ae:07:3e:78:bb:24:8c:cf:4d:ab:fc:af:6b:
29:07:f8:d4:08:7e:ba:b9:46:32:00:cd:7e:9e:e7:48:12:1b:
10:c0:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:52 2025 by rpki-client