Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: WVpGkMwlbDUOWb01AYbNi/SN7RjtibDPIEoZ4btD2Mk=
Subject key identifier: B3:7B:8E:B2:DB:8F:C5:C3:3E:81:3B:FE:23:73:1E:92:02:CA:11:17
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 0198D51560123539834C6C7DA30483804983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 0477
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: 53yl4Orp+6ODqWTQu0q7o51k+0OzZ9BHmVXCddB/IAw=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:60:12:35:39:83:4c:6c:7d:a3:04:83:80:49:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=b37b8eb2db8fc5c33e813bfe23731e9202ca1117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:6b:50:52:1c:da:5c:a7:fd:39:9d:22:f4:
1a:5b:8c:80:6a:ec:ad:7f:b2:9e:2c:2e:06:3b:1e:
e0:6e:47:c9:32:ba:19:e1:73:4e:14:0a:5c:c0:28:
6c:34:b4:d5:9b:1b:ad:62:d2:ab:80:79:9e:78:a9:
19:79:f3:05:23:7a:64:c8:32:15:31:d3:af:42:74:
1c:50:80:60:4f:57:a2:c5:be:60:17:9d:c7:42:79:
2d:1b:07:37:81:9d:7b:ec:2e:dd:72:bd:c5:f9:be:
a4:fc:3f:a7:07:6f:d2:51:b5:d8:84:0d:68:be:e7:
9a:fa:bd:94:df:f2:43:1a:05:ce:d3:78:06:4e:06:
6b:77:26:ac:7e:b5:81:fb:5d:41:14:70:8d:7b:01:
50:b9:7b:16:7f:e3:d1:ee:52:56:96:9c:44:5e:a1:
fe:74:d0:ae:32:89:d1:70:3d:ae:0c:52:91:7c:9e:
c3:b7:f8:f1:c1:6d:e8:4f:69:58:68:a3:96:99:09:
cb:ee:2a:89:ce:86:80:c5:ac:55:b5:ae:4d:19:ba:
fd:6c:0b:46:3b:e1:48:e0:10:3d:28:1d:c6:34:7b:
93:09:fe:b3:33:f7:f4:6a:a0:ee:ed:05:d2:a9:5c:
8e:5c:a7:d0:77:db:1c:b1:5f:ec:d3:e6:39:a5:5c:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:8E:B2:DB:8F:C5:C3:3E:81:3B:FE:23:73:1E:92:02:CA:11:17
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:58:ab:27:0e:66:24:c8:ce:db:3f:d9:66:c7:2d:43:20:ec:
59:52:ab:2d:92:99:e3:11:e6:6c:2f:c9:4b:29:24:ca:bb:e9:
f3:c7:3c:f2:28:6a:33:35:aa:4a:70:b8:be:37:51:38:0a:72:
f0:11:e3:4e:a3:b6:0b:02:c3:49:c0:ed:26:24:2a:0c:56:59:
3b:dc:c7:5d:02:1c:3a:08:57:c1:d7:cd:2f:c6:ed:a5:85:f2:
f0:84:37:c0:91:99:75:29:48:95:5d:0b:b9:89:d5:d5:dc:31:
28:cd:1d:ff:59:ee:93:63:1f:03:5f:d4:39:9f:90:d5:6e:f7:
75:d9:a1:ea:a0:9f:6b:79:25:55:b6:85:d7:53:86:29:14:65:
05:2c:92:b4:8a:a4:90:1a:95:06:95:29:e0:a2:c3:be:7a:c1:
a1:2b:33:29:67:3f:61:5d:10:22:d9:13:49:ff:3f:39:75:f5:
cc:a4:d3:44:75:43:aa:17:7f:56:b1:09:c1:b6:64:8d:45:ee:
e6:44:b3:53:80:3d:5f:a8:a1:90:05:6a:44:9a:00:97:85:8d:
dc:66:24:97:90:d7:e0:56:4e:a0:46:de:ec:ac:1a:20:a6:ae:
20:d9:6a:82:05:76:c7:c9:dd:66:e3:3d:c8:1c:37:17:41:a0:
74:5c:64:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFWASNTmDTGx9owSDgEmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl
MGU4YTUwHhcNMjUwODIzMDQwMDA0WhcNMjUwODI0MDQwMDA0WjAzMTEwLwYDVQQD
EyhiMzdiOGViMmRiOGZjNWMzM2U4MTNiZmUyMzczMWU5MjAyY2ExMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zFrUFIc2lyn/TmdIvQaW4yAauyt
f7KeLC4GOx7gbkfJMroZ4XNOFApcwChsNLTVmxutYtKrgHmeeKkZefMFI3pkyDIV
MdOvQnQcUIBgT1eixb5gF53HQnktGwc3gZ177C7dcr3F+b6k/D+nB2/SUbXYhA1o
vuea+r2U3/JDGgXO03gGTgZrdyasfrWB+11BFHCNewFQuXsWf+PR7lJWlpxEXqH+
dNCuMonRcD2uDFKRfJ7Dt/jxwW3oT2lYaKOWmQnL7iqJzoaAxaxVta5NGbr9bAtG
O+FI4BA9KB3GNHuTCf6zM/f0aqDu7QXSqVyOXKfQd9scsV/s0+Y5pVxOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN7jrLbj8XDPoE7/iNzHpICyhEXMB8GA1UdIwQY
MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt
YmYzNTFjMGYwZWJjLzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj
LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVirJw5m
JMjO2z/ZZsctQyDsWVKrLZKZ4xHmbC/JSykkyrvp88c88ihqMzWqSnC4vjdROApy
8BHjTqO2CwLDScDtJiQqDFZZO9zHXQIcOghXwdfNL8btpYXy8IQ3wJGZdSlIlV0L
uYnV1dwxKM0d/1nuk2MfA1/UOZ+Q1W73ddmh6qCfa3klVbaF11OGKRRlBSyStIqk
kBqVBpUp4KLDvnrBoSszKWc/YV0QItkTSf8/OXX1zKTTRHVDqhd/VrEJwbZkjUXu
5kSzU4A9X6ihkAVqRJoAl4WN3GYkl5DX4FZOoEbe7KwaIKauINlqggV2x8ndZuM9
yBw3F0GgdFxkqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:20 2025 by rpki-client