Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: u1pZ6fPAYbUc+etIrBK+HKCMKrZRfAhB6fRVhvVP8Qc=
Subject key identifier: FC:DB:1A:74:E2:90:77:4F:80:C3:64:F0:FF:C6:4B:A7:02:00:58:09
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 0198D65F090E7CC837BC9AB6AB6A8574FA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: lAGG7v/Zj9N5n5iIHejSJAnQrGCizobOu16ndCv60Ds=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:09:0e:7c:c8:37:bc:9a:b6:ab:6a:85:74:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=fcdb1a74e290774f80c364f0ffc64ba702005809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:f7:a6:97:9f:29:8a:53:c2:a9:e4:44:c4:
d0:d2:b1:ad:fa:91:5f:11:e5:06:a1:db:b8:29:ee:
41:c9:7c:d5:71:79:83:ee:d1:4a:b7:18:ac:ba:1c:
41:40:2d:c0:e3:39:2c:63:5c:0b:31:fd:0e:62:d4:
87:4b:cb:d4:f6:f4:00:2e:8b:c6:98:0b:0a:6b:21:
87:b6:1b:01:c0:8e:35:e0:3f:bd:ad:b8:2b:1f:94:
cf:9a:f1:4c:31:4d:19:22:84:d7:91:d4:67:e1:4d:
ba:14:06:67:1a:ed:4f:29:5d:97:f0:d7:d3:a1:bf:
76:60:63:90:61:4b:e7:d3:ad:d0:ea:f1:1b:2f:ff:
43:18:5e:9f:24:46:8c:89:2c:8f:bd:d6:83:b9:73:
ce:97:66:f0:3b:c4:00:ca:5d:76:13:a0:01:5d:17:
a3:71:f8:c1:ef:71:90:9c:98:36:be:d8:9d:be:84:
2c:df:71:13:ef:f3:34:0b:d4:44:e9:45:42:73:04:
7e:52:12:16:bc:d9:a8:ac:ed:e2:6e:d7:2d:e8:94:
8c:cf:06:89:8e:7d:cc:22:39:29:f5:ca:7d:1d:00:
2c:13:0e:f0:c2:93:53:1d:69:f1:6e:a0:ae:4e:37:
cb:d2:a3:3e:27:25:fb:6c:a9:79:76:72:a2:a3:06:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:1A:74:E2:90:77:4F:80:C3:64:F0:FF:C6:4B:A7:02:00:58:09
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:3a:38:12:ee:9d:ed:54:15:b0:af:2a:79:92:26:ef:71:
d8:1f:92:8e:a1:e0:47:3a:78:1d:f4:8f:ec:d4:05:53:3d:5d:
02:34:bb:71:d0:b6:e9:d7:f2:87:c6:ea:5e:fc:b2:04:b7:d4:
84:81:0e:10:7b:da:d0:a3:95:e2:e1:ea:56:97:34:60:a8:80:
9d:3e:8b:d7:0d:a9:8d:21:ef:20:1f:9d:3b:58:76:e8:ec:21:
47:6e:68:eb:1d:7e:25:57:47:69:de:f6:28:2a:70:60:35:b8:
f7:61:7f:96:97:94:71:be:ae:af:6a:be:e7:05:12:be:65:ca:
d3:bf:cb:f5:0b:e8:a6:78:3e:14:69:60:90:e2:ac:59:3b:f0:
44:25:5b:1f:94:b6:48:a5:32:dc:d9:d4:ef:af:3b:1b:3e:bd:
1b:07:dc:44:0e:2f:43:f5:8a:35:d0:70:b7:86:a4:f7:7d:5a:
9e:a0:89:35:b0:70:f2:e2:c8:9e:75:b7:74:f8:ed:95:7b:c5:
fa:59:dc:bd:19:32:72:2b:d4:6f:dd:8f:66:2b:34:2d:15:b6:
11:57:27:0d:98:53:88:ec:24:19:6f:5b:89:66:d7:27:66:25:
98:b5:2c:76:b8:0f:c9:fc:54:ad:f9:59:48:48:2a:ac:08:b3:
14:82:14:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwkOfMg3vJq2q2qFdPouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzM2M2U0N2U2OWViYzVkMWMyMjUxZGRkNWRhYzdjOTg5
ODk5MjIwHhcNMjUwODIzMTAwMDA5WhcNMjUwODI0MTAwMDA5WjAzMTEwLwYDVQQD
EyhmY2RiMWE3NGUyOTA3NzRmODBjMzY0ZjBmZmM2NGJhNzAyMDA1ODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe33ppefKYpTwqnkRMTQ0rGt+pFf
EeUGodu4Ke5ByXzVcXmD7tFKtxisuhxBQC3A4zksY1wLMf0OYtSHS8vU9vQALovG
mAsKayGHthsBwI414D+9rbgrH5TPmvFMMU0ZIoTXkdRn4U26FAZnGu1PKV2X8NfT
ob92YGOQYUvn063Q6vEbL/9DGF6fJEaMiSyPvdaDuXPOl2bwO8QAyl12E6ABXRej
cfjB73GQnJg2vtidvoQs33ET7/M0C9RE6UVCcwR+UhIWvNmorO3ibtct6JSMzwaJ
jn3MIjkp9cp9HQAsEw7wwpNTHWnxbqCuTjfL0qM+JyX7bKl5dnKiowYwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzbGnTikHdPgMNk8P/GS6cCAFgJMB8GA1UdIwQY
MBaAFDszY+R+aevF0cIlHd1drHyYmJkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMt
Y2NkYWRmN2Y2NWYyLzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMtY2NkYWRmN2Y2NWYy
LzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeQ6OBLu
ne1UFbCvKnmSJu9x2B+SjqHgRzp4HfSP7NQFUz1dAjS7cdC26dfyh8bqXvyyBLfU
hIEOEHva0KOV4uHqVpc0YKiAnT6L1w2pjSHvIB+dO1h26OwhR25o6x1+JVdHad72
KCpwYDW492F/lpeUcb6ur2q+5wUSvmXK07/L9Qvopng+FGlgkOKsWTvwRCVbH5S2
SKUy3NnU7687Gz69GwfcRA4vQ/WKNdBwt4ak931anqCJNbBw8uLInnW3dPjtlXvF
+lncvRkycivUb92PZis0LRW2EVcnDZhTiOwkGW9biWbXJ2YlmLUsdrgPyfxUrflZ
SEgqrAizFIIUYw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:17 2025 by rpki-client