Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
File: OZETdfzEhZYSGQ6-zHrjcaAaam0.mft (raw, json)
Hash identifier: UpdTibOEFPQkAeEt90SSiczZKIdCZZHaZSOWDNc0oYM=
Subject key identifier: 66:93:00:2D:0E:7C:BA:BC:50:B3:66:A5:BF:A5:0A:6D:67:6B:E4:F1
Authority key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
Certificate issuer: /CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Certificate serial: 0198D5158CF74368389FDA0B4C8C3AEB69C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
Manifest number: 0F72
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: OZETdfzEhZYSGQ6-zHrjcaAaam0.crl (hash: b6/u7A/TY+C1YmBkB09+rrq6NLnMnMvgviN6Y/gCkZg=)
2: mV-huyQ7uf2YxiJ1JUpDypBxzhA.roa (hash: XQgQ9aC7Ey76psDYNwOwzM5lgNTkkh3rEJlv1Rte2h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8c:f7:43:68:38:9f:da:0b:4c:8c:3a:eb:69:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=6693002d0e7cbabc50b366a5bfa50a6d676be4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:8f:ac:11:e1:a3:7b:ca:b3:bc:04:3e:91:
95:18:b5:74:3b:5a:15:1f:61:7f:7b:10:c5:c5:ee:
0c:82:a4:54:4f:b4:b9:56:d6:5c:f1:ec:c9:cb:6a:
93:bf:6d:bf:97:4c:00:84:89:86:da:40:7d:91:c1:
c9:a9:6c:50:f5:30:f7:33:d8:81:8f:b0:35:fa:87:
5c:20:8e:ff:87:f0:d9:e0:ee:03:a1:48:cf:8d:68:
f3:80:cd:fa:25:df:09:08:63:ff:f0:e7:57:8a:71:
a8:45:7a:28:a0:2f:fc:a6:fa:3c:7b:c6:ca:31:04:
10:e5:72:4c:aa:74:fc:c1:47:c5:bc:b3:66:a9:ce:
92:40:07:e5:cb:b6:e7:85:ec:58:b9:b4:e5:e7:65:
dc:a5:8f:7a:0c:d1:b1:1d:81:5d:74:8b:ea:0f:88:
54:a9:00:48:ed:b2:2c:92:bc:67:10:37:f6:3f:b1:
e9:2f:92:7e:12:4f:f4:6c:3c:75:c7:ba:c2:94:b1:
26:60:0a:bb:06:11:fb:4d:1e:42:79:fa:c8:bf:ca:
1d:9a:72:35:78:55:8d:6c:13:d2:e1:1a:94:25:0b:
91:ad:5d:42:38:e5:f7:d0:81:4b:7e:82:e3:c2:4a:
b3:27:c5:bd:d2:bd:3f:67:14:12:11:dd:69:a1:a5:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:00:2D:0E:7C:BA:BC:50:B3:66:A5:BF:A5:0A:6D:67:6B:E4:F1
X509v3 Authority Key Identifier:
keyid:39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d1:0d:4f:c8:be:b1:f8:f2:1e:56:d4:38:17:d8:f5:06:19:
c2:20:41:c8:c7:00:5c:39:45:7b:7f:bc:9b:b3:e9:d6:09:25:
5b:4a:8b:87:a4:2b:7b:c7:d4:3b:42:8f:f4:2b:de:7f:d8:75:
3a:4e:23:a5:1c:10:82:22:e3:3d:93:68:a6:db:21:cd:ea:63:
34:b0:30:9b:b6:5b:c7:1e:f7:79:bb:6e:23:d7:f0:4d:e7:03:
99:32:e7:52:23:bb:d7:f8:05:b3:10:8b:58:a4:07:ce:d3:e5:
e3:3d:7f:42:41:7f:83:18:55:26:f0:9e:93:2f:24:d8:2f:3b:
96:e6:de:ef:c9:46:99:05:bd:70:c4:64:e7:58:0a:94:f2:48:
a6:7e:2e:48:61:f2:08:aa:9f:79:07:ad:33:30:b7:19:b8:34:
c2:83:d3:ed:8b:39:af:ef:9d:07:00:37:a9:2c:0c:0f:78:25:
c7:82:67:a1:cb:03:81:03:d1:a9:7d:4a:50:ee:ac:dc:b6:c8:
ba:96:69:94:e5:fa:ce:a0:e7:66:a9:c4:a6:c4:c2:44:f3:76:
95:dd:f5:a0:25:67:29:06:62:3c:72:84:53:b1:5c:4e:04:d4:
6b:0e:e7:53:14:7c:7f:4c:65:d0:e7:21:fc:63:f1:4b:36:75:
aa:16:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:48 2025 by rpki-client