Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: vRGpVaTmrW2a7xMn0u8YWMV12Otb5phqePAbCQCBxPg=
Subject key identifier: 29:2C:A2:C0:E0:E9:84:08:0E:0F:97:23:1F:6E:39:65:27:A4:0E:CE
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 0199FD6ADD45D8AB2596A87765274E2A5DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: qHnfAcPiwgyp/FgaEgQGqijcE392zXNiNOgxaR1VIAg=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:dd:45:d8:ab:25:96:a8:77:65:27:4e:2a:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=292ca2c0e0e984080e0f97231f6e396527a40ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:07:65:94:a5:e5:9b:0e:f1:be:c0:17:9e:
11:66:6c:21:e2:bc:00:37:5e:82:50:c9:7f:3b:a1:
b0:49:1e:06:00:90:ec:e5:55:ca:6d:72:74:c0:79:
d4:07:8d:b4:bc:2b:a2:a1:1d:4d:59:67:eb:45:44:
a9:77:8b:1d:f7:0a:6e:da:1f:a2:d2:21:6f:14:28:
55:6c:c1:6b:61:53:ed:d2:f7:62:6c:8b:5a:99:17:
8f:19:98:97:42:76:a7:9d:ee:ec:f4:db:ae:f7:15:
8a:bb:0d:cc:60:c0:6f:21:40:ef:08:1e:f5:84:78:
11:c7:1d:ec:f9:7f:47:81:ef:91:19:0e:47:ff:aa:
03:c9:0d:bb:7b:5e:0a:0f:69:d6:f8:3a:73:e1:9e:
78:58:7a:7e:ef:5c:9b:ec:ab:fa:d5:26:ca:53:af:
bb:58:0e:7a:fe:85:39:19:4e:b5:fa:1e:5e:03:65:
33:5c:e3:ac:2c:11:f9:31:46:0d:61:a7:1c:51:50:
8c:19:6a:bd:ba:3a:92:7a:1b:e3:39:e4:73:eb:34:
53:c2:7a:29:86:00:55:9f:02:a0:61:da:f8:fb:ac:
4d:c0:36:ea:5f:a3:d0:4a:0e:e6:26:dd:a6:bd:4f:
49:95:bb:c7:c6:60:d1:9b:b2:d8:c7:b6:af:04:cd:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:A2:C0:E0:E9:84:08:0E:0F:97:23:1F:6E:39:65:27:A4:0E:CE
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b9:9c:cf:dc:f6:fc:ee:63:66:00:fd:d8:c0:b4:42:91:b3:
44:5c:9b:c4:e0:4d:d8:2a:41:ea:67:f0:a6:4e:1d:52:0f:0a:
f9:1c:0a:8d:21:2a:fb:c1:75:4f:df:fb:2d:4a:59:ec:4a:7a:
66:5e:38:df:6f:ec:13:8f:ce:1b:57:aa:66:b1:42:01:dd:8f:
f2:63:45:b7:c4:b7:fd:34:b7:a0:59:02:8c:6a:9b:84:72:0c:
27:2d:c0:01:77:10:2c:3f:92:51:6c:94:67:3a:e6:db:bb:76:
f7:ca:d5:3d:cc:21:05:5d:78:a7:51:ab:06:59:d3:84:d3:34:
10:13:c6:9b:d8:2f:d7:78:c6:f7:e5:5b:36:a8:4d:2c:85:08:
b9:c2:1a:ec:1d:a4:1a:e4:5d:2f:5c:7f:dc:3e:50:33:94:99:
26:54:a2:6f:f0:4e:02:06:18:68:79:82:81:58:5d:9d:74:60:
ce:cf:cd:a4:4e:e2:88:94:dd:7e:36:55:50:0c:82:10:f1:0d:
53:c2:73:b6:03:ef:1f:c3:ba:6d:00:8c:60:e2:bd:ff:75:c6:
ab:24:2b:09:f0:1d:11:d5:0b:0b:fe:26:0a:70:76:6b:27:81:
14:14:e0:0e:2f:52:3d:d2:2e:70:29:64:36:17:fc:08:5a:f3:
dd:dd:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:43 2025 by rpki-client