Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: 7LQtHXAKx62Y+sXXJoFSOXHpKDrsVzHMmTIEjGltJSc=
Subject key identifier: D8:EF:1E:29:2D:7B:7F:34:94:76:D9:A3:B6:CA:13:45:AC:1E:85:EA
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 0199FC8F9A60AE622661497DA34AD1287E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 0510
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: MA52EiH8BQu9XmjTQ7kcIJxdrN7RW8EUtc2Hd/TQLEc=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9a:60:ae:62:26:61:49:7d:a3:4a:d1:28:7e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=d8ef1e292d7b7f349476d9a3b6ca1345ac1e85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:ff:4c:49:2b:8a:00:90:45:ac:eb:87:4a:
b2:0f:47:9c:2c:44:cf:e8:50:ee:34:8a:a9:55:9a:
d8:2e:1f:c5:25:d7:a5:60:31:53:61:e4:2a:5d:f5:
c9:55:b5:cd:4d:3b:e8:37:72:03:34:02:67:d0:49:
79:9e:1d:90:a1:9d:49:a6:51:26:1d:e1:91:da:17:
0d:ef:06:60:5b:b3:bc:d8:82:bb:ed:78:5c:ad:37:
8d:77:6f:4b:cf:21:c7:24:68:d4:12:b5:73:6c:98:
7c:e4:d4:0a:03:b5:50:bc:6a:85:ad:90:5c:f7:e9:
6e:fb:70:b3:fe:7c:48:05:23:6a:41:11:11:82:9c:
84:9e:e4:95:8a:55:ae:3b:89:19:01:32:79:ab:b4:
f9:ab:76:8a:3b:78:54:c0:43:5e:99:b2:df:1d:a4:
46:8b:9e:80:54:84:02:97:c6:fa:f5:f9:76:5d:22:
36:17:26:db:0e:68:da:2d:1b:56:06:b7:d5:b5:1f:
7f:78:6c:16:ee:87:e5:da:7e:73:a5:03:0e:49:fe:
3b:7f:e3:2b:77:f6:d8:1a:13:10:23:89:91:78:50:
9f:44:2e:db:93:d0:dd:81:6c:a4:0f:41:7f:67:ad:
37:1b:b9:3b:60:c3:26:1b:4f:ec:cb:2a:18:f6:8c:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:1E:29:2D:7B:7F:34:94:76:D9:A3:B6:CA:13:45:AC:1E:85:EA
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b0:45:08:48:b0:fe:f7:e6:eb:94:ab:c9:c1:82:63:ed:f0:
6b:cc:bb:17:3f:6b:a3:59:1d:71:93:97:6e:b0:df:b7:98:17:
d5:49:4b:c9:c7:96:05:6a:90:59:40:1c:7b:32:23:47:48:54:
c4:d2:4a:ef:b4:25:0a:b6:ab:9a:22:60:fa:b1:90:cb:e7:1f:
fb:f9:fa:25:9d:d3:57:6f:b3:60:ef:3c:f4:91:c4:5a:61:af:
70:c5:56:b5:8d:97:04:d7:bb:02:c5:98:d5:ff:74:ae:83:7f:
3f:e8:b2:d7:2e:94:c9:79:aa:99:58:df:f6:b3:80:b1:46:64:
08:0c:6a:49:df:b5:26:76:ac:03:82:50:aa:3a:aa:d8:d4:f1:
1e:16:33:1d:0d:ed:6b:f1:8d:e1:4c:25:3a:d6:26:2c:4a:e0:
39:46:88:88:25:2d:23:d2:89:b5:86:a9:e0:e6:89:ed:3e:62:
40:a4:c4:df:68:04:18:a5:47:55:51:b0:d2:e8:c9:59:20:7c:
0f:06:91:fe:4d:2f:30:79:94:43:65:91:16:7e:8e:35:b1:d4:
5f:90:a3:e1:db:6e:89:a8:d2:6b:33:30:b1:18:9e:f9:5c:89:
97:8a:05:cb:8a:7f:8a:86:36:8d:61:d8:39:b8:dd:6b:3b:6f:
7c:15:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:01 2025 by rpki-client