Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: tf7Fdn3OgXG2fYtw61FEZF05jjLo3jRArlzpFPn/cB4=
Subject key identifier: C7:1F:FF:AA:A6:E3:1E:91:F4:F9:55:A6:D6:5A:E2:51:58:B9:6E:4F
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 0199FBEBF4E9BA19C6169090404C8869216C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: UxS5AtObJ5ajIV6gmv5LvGTfMAYTme0M+z3lEDhH3s8=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f4:e9:ba:19:c6:16:90:90:40:4c:88:69:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=c71fffaaa6e31e91f4f955a6d65ae25158b96e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:d9:8e:5a:c5:92:9f:ed:a4:2e:8b:3f:eb:
a7:04:61:0a:0d:3d:c6:64:4b:3f:fe:e5:db:b2:b6:
83:a1:7e:82:a0:9d:a3:96:f4:4c:60:70:bf:d9:1d:
00:11:75:04:9f:fd:37:2a:78:9d:0f:48:64:33:85:
aa:b7:da:59:ae:28:01:ed:48:98:80:44:c1:9b:3e:
e1:78:bc:88:86:26:79:49:9d:47:53:3f:17:b7:0c:
b0:f7:ce:f2:be:dc:3c:08:27:05:38:3e:40:f5:d3:
e6:4f:30:df:c6:49:2c:87:13:10:0f:c0:32:c0:02:
39:f9:56:ee:2f:bc:b0:9b:58:85:42:40:c8:a0:5c:
fa:77:dd:27:24:a9:84:8c:d7:71:c8:b4:a2:a0:8d:
02:83:79:5f:98:29:67:06:be:50:94:6b:ac:6f:7d:
1f:04:91:9f:f0:79:2b:d9:d5:1b:87:57:f3:b1:80:
55:b9:31:33:48:02:56:be:04:fb:94:a8:61:45:9b:
38:f2:89:37:03:01:73:d6:b0:ef:d3:11:16:12:91:
ea:54:c6:27:58:f6:20:0c:b4:29:a0:31:29:31:eb:
f2:eb:77:8a:7d:46:55:bd:84:44:a3:38:fb:02:3e:
07:8c:07:31:51:df:59:65:e2:c6:ce:b2:27:2c:d4:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:FF:AA:A6:E3:1E:91:F4:F9:55:A6:D6:5A:E2:51:58:B9:6E:4F
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:60:ae:b8:42:08:49:a7:60:dd:ff:83:71:45:37:0d:f5:f1:
c1:95:0c:0c:16:01:32:3a:d3:12:ce:36:b7:b5:91:65:55:56:
9f:17:97:ea:cd:b9:e7:bf:c9:59:2f:52:9f:c2:91:af:b0:7f:
f8:44:a5:4b:44:b1:bf:2f:b6:cc:5b:1a:67:1e:9a:f9:ca:42:
c0:2c:95:4c:f2:eb:87:77:61:ed:d5:9c:fd:7a:42:98:93:23:
24:eb:28:21:f6:27:5e:19:08:69:d7:2b:c0:69:1f:55:08:4e:
81:36:bf:17:90:67:d3:8d:45:c6:bd:53:1d:3b:f2:5c:65:cc:
f1:29:2d:6c:a7:f9:6e:5c:9b:84:3f:58:e1:c0:e0:17:94:f2:
e2:12:f5:a5:26:47:fd:e9:96:81:a6:05:56:b5:ee:c2:ee:c1:
a3:a3:2b:f4:c1:02:7d:d6:fb:b2:85:e7:a1:57:05:0e:fa:3b:
ed:14:df:f5:38:4e:a2:40:99:e0:99:34:0f:4c:cf:fb:03:3e:
52:af:6b:3f:3d:b7:d2:f7:e0:0a:8a:a0:3d:ed:33:a0:d1:c4:
65:ca:43:70:50:3c:6a:4d:62:50:b4:e4:df:89:e8:85:17:ee:
41:32:da:a9:8a:48:1a:e2:d3:44:53:fc:71:98:5d:91:4d:2a:
fc:cc:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:02 2025 by rpki-client