Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: MNRIFICvyTSSq0iWpm79dFN7S/eqTnVSbE5truecsrw=
Subject key identifier: DC:9C:90:48:2A:45:F3:77:76:12:9C:BA:82:46:F0:B9:E4:F4:62:4B
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 0199FCC68979D99446E1B757491CD9C16036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: TIxkoHexgTsiYiQLLwz28x1ZKbdgwvItZtjR0NERRbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:89:79:d9:94:46:e1:b7:57:49:1c:d9:c1:60:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=dc9c90482a45f37776129cba8246f0b9e4f4624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:47:30:51:13:4b:f6:50:00:1f:1c:7e:2d:
de:61:d1:67:e6:37:ac:05:98:27:04:2e:42:4b:9c:
d7:3b:34:da:ed:72:48:48:da:4d:b2:5c:bb:fe:42:
43:c6:c0:e5:6d:28:f1:a4:7a:97:29:9c:aa:32:41:
8f:ff:a1:79:45:a8:fb:74:cc:27:e1:16:7f:c7:29:
7c:f6:23:8c:07:a2:a7:e4:80:ef:cc:ee:28:15:02:
3a:c5:0b:64:c2:58:68:fb:21:fe:65:36:a9:67:b4:
bd:e8:5b:38:b5:78:90:ab:0a:bc:2d:7a:74:fc:1c:
cb:94:35:8c:6e:18:2d:22:df:be:63:c4:df:73:a1:
e7:58:d3:9a:87:06:2a:02:ec:cb:06:d4:3e:c1:29:
a1:3c:69:72:3b:57:7f:fa:06:17:d6:56:f1:22:12:
21:86:91:a4:a4:5b:78:41:77:65:fc:c1:48:a9:af:
8b:80:4e:08:4c:fa:36:ce:b5:fb:55:c2:b4:0c:08:
90:70:05:c0:90:fb:a0:b8:e4:c7:8b:d3:bd:0d:12:
bc:33:24:ee:ed:9b:f0:91:3c:59:7f:b6:13:0f:06:
ff:1d:c6:5f:48:00:70:0c:3c:6c:4e:9a:05:be:21:
16:4b:6f:24:bf:3e:07:17:3d:8b:a9:e3:94:ad:34:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:90:48:2A:45:F3:77:76:12:9C:BA:82:46:F0:B9:E4:F4:62:4B
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:9e:23:84:b4:e1:8e:09:fd:52:82:88:42:92:9b:f1:7a:
91:74:8c:f7:8e:58:bc:b4:2e:66:71:c2:fb:82:72:0b:50:9d:
fb:de:e7:28:96:8e:db:ba:28:6d:25:24:59:84:61:47:46:30:
f5:4b:70:77:06:ab:2c:69:82:d4:d8:18:da:32:f8:79:76:6b:
44:6c:13:0c:03:4a:5a:0b:b5:73:0f:81:d7:a4:97:56:1e:79:
87:79:65:d8:d1:8a:3e:e5:74:41:1d:62:31:55:30:00:f4:e5:
72:10:43:e8:8e:ef:59:86:7f:9b:9d:65:66:05:b8:78:61:4f:
35:bc:ed:63:10:ef:ac:49:39:fc:22:19:d6:74:64:05:d4:2f:
bf:58:b5:ca:e1:13:ec:45:69:fe:cc:bd:67:04:43:26:79:88:
5b:b9:84:08:98:b1:0c:83:12:25:b8:e6:90:86:13:a1:14:38:
6b:e3:f2:0e:6c:a9:27:20:9c:cd:65:1c:30:d3:3a:53:5b:e9:
ae:ab:de:6a:eb:ab:68:65:96:e5:c6:09:bb:40:6a:2d:92:b8:
a3:8f:eb:f4:40:42:d0:46:d4:39:be:df:e1:d7:75:af:2f:55:
d5:ce:b3:af:58:eb:e3:ae:53:b4:19:5c:2a:34:e8:7f:22:89:
b1:38:4a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xol52ZRG4bdXSRzZwWA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy
MTI5MTAwHhcNMjUxMDE5MTQwMTMzWhcNMjUxMDIwMTQwMTMzWjAzMTEwLwYDVQQD
EyhkYzljOTA0ODJhNDVmMzc3NzYxMjljYmE4MjQ2ZjBiOWU0ZjQ2MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhdHMFETS/ZQAB8cfi3eYdFn5jes
BZgnBC5CS5zXOzTa7XJISNpNsly7/kJDxsDlbSjxpHqXKZyqMkGP/6F5Raj7dMwn
4RZ/xyl89iOMB6Kn5IDvzO4oFQI6xQtkwlho+yH+ZTapZ7S96Fs4tXiQqwq8LXp0
/BzLlDWMbhgtIt++Y8Tfc6HnWNOahwYqAuzLBtQ+wSmhPGlyO1d/+gYX1lbxIhIh
hpGkpFt4QXdl/MFIqa+LgE4ITPo2zrX7VcK0DAiQcAXAkPuguOTHi9O9DRK8MyTu
7ZvwkTxZf7YTDwb/HcZfSABwDDxsTpoFviEWS28kvz4HFz2LqeOUrTS8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyckEgqRfN3dhKcuoJG8Lnk9GJLMB8GA1UdIwQY
MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt
OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl
LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMeeI4S0
4Y4J/VKCiEKSm/F6kXSM945YvLQuZnHC+4JyC1Cd+97nKJaO27oobSUkWYRhR0Yw
9UtwdwarLGmC1NgY2jL4eXZrRGwTDANKWgu1cw+B16SXVh55h3ll2NGKPuV0QR1i
MVUwAPTlchBD6I7vWYZ/m51lZgW4eGFPNbztYxDvrEk5/CIZ1nRkBdQvv1i1yuET
7EVp/sy9ZwRDJnmIW7mECJixDIMSJbjmkIYToRQ4a+PyDmypJyCczWUcMNM6U1vp
rqveauuraGWW5cYJu0BqLZK4o4/r9EBC0EbUOb7f4dd1ry9V1c6zr1jr465TtBlc
KjTofyKJsThK7w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:29 2025 by rpki-client