Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
File: OZETdfzEhZYSGQ6-zHrjcaAaam0.mft (raw, json)
Hash identifier: SbzHqYQdfX6xvDMSbzNllWJlvhGFHpIhKudUZYI9kUA=
Subject key identifier: C2:3D:38:2E:7F:5F:85:7A:0B:0B:9B:32:00:82:B2:91:4E:32:82:AA
Authority key identifier: 39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
Certificate issuer: /CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Certificate serial: 0199FC8F8D7A1155E1961F2D9751AF0979F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
Manifest number: 100B
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: OZETdfzEhZYSGQ6-zHrjcaAaam0.crl (hash: vieIGK4XhgxaBZdD3vMaKsxUYPE/OoHNnYJOxECCbeU=)
2: mV-huyQ7uf2YxiJ1JUpDypBxzhA.roa (hash: XQgQ9aC7Ey76psDYNwOwzM5lgNTkkh3rEJlv1Rte2h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8d:7a:11:55:e1:96:1f:2d:97:51:af:09:79:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39911375fcc4859612190ebecc7ae371a01a6a6d
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=c23d382e7f5f857a0b0b9b320082b2914e3282aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:08:12:99:1c:a6:a1:f6:ee:af:13:cb:04:22:
ac:76:71:27:a3:7e:e0:11:72:83:8c:1c:f9:28:a2:
95:d5:21:92:6b:e6:80:e3:d1:62:14:0a:b8:4a:45:
10:42:d2:45:21:fa:3b:51:d8:a6:5d:a2:f5:98:88:
dc:f4:e0:c7:93:dd:60:fb:fc:aa:e2:53:ce:d1:a9:
8a:20:85:bb:0d:09:bf:e5:cd:9d:11:26:c7:04:2b:
af:61:07:19:0e:c7:41:e8:c9:7f:b5:4e:7c:df:24:
9b:b0:b6:ea:bc:f8:43:30:e6:d7:33:76:e7:b1:97:
fb:82:7a:8c:59:f1:81:81:c0:77:cd:99:f6:48:44:
c0:ce:e8:2b:f4:f8:28:29:47:46:3a:a0:27:4f:38:
a1:64:1f:71:d8:04:6b:de:82:f0:33:b7:2c:cf:71:
19:94:a8:8b:b1:5a:f3:43:c5:ae:b3:74:ec:d5:3f:
7b:bc:33:d0:bd:73:42:86:31:9f:41:da:18:f6:cc:
43:a9:73:ea:d7:8c:4b:dd:34:b7:8d:ae:81:b5:89:
35:16:48:40:50:c3:33:bb:d8:15:74:d6:79:8e:97:
d2:7a:24:f0:bb:f6:4a:e0:34:bc:2d:e8:cb:7b:cb:
b2:3a:3a:84:df:10:2c:05:4e:6c:e2:eb:b3:97:16:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:38:2E:7F:5F:85:7A:0B:0B:9B:32:00:82:B2:91:4E:32:82:AA
X509v3 Authority Key Identifier:
keyid:39:91:13:75:FC:C4:85:96:12:19:0E:BE:CC:7A:E3:71:A0:1A:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZETdfzEhZYSGQ6-zHrjcaAaam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/61c0c5-5257-453c-8e74-933d92d0000c/1/OZETdfzEhZYSGQ6-zHrjcaAaam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:4f:7e:54:bc:25:8e:64:1f:f7:7a:e8:02:74:c6:5f:b1:
4f:ab:18:f6:01:a9:7f:23:80:ba:b6:92:f5:5b:90:fc:1d:6d:
87:4b:35:0f:3b:fc:43:40:e7:81:2a:35:00:69:d8:1d:e0:65:
36:ae:48:ff:c1:f5:3f:d2:10:9c:64:91:74:f5:70:99:c0:dd:
28:08:a2:eb:a9:f3:7c:50:8f:8e:cb:b9:6c:6d:8d:e7:08:d9:
08:4d:9f:ff:6e:76:4a:df:06:17:86:88:e5:d7:8f:b3:24:e3:
b6:ee:ad:97:c7:49:77:19:76:e6:37:2c:6d:b1:18:6d:6a:06:
5f:43:a5:d7:1a:ec:91:cc:a4:37:8c:3d:05:57:d8:4b:da:24:
eb:11:4a:b3:e1:2b:91:bb:ed:5d:08:43:46:4b:dd:64:94:e7:
77:a3:78:b2:10:04:c9:57:b2:6d:16:fa:1e:8f:29:52:5f:80:
3f:d2:e8:00:8c:47:5c:e4:c2:73:6c:87:0a:ed:5a:10:c9:3e:
f8:b5:8b:c7:76:09:31:3c:c2:f9:86:c9:63:9e:6b:a5:7f:bf:
8b:0a:80:82:5a:af:7a:c4:43:af:99:45:3d:7f:5e:13:98:0a:
58:d5:8d:40:2f:53:c4:d1:a6:b9:e6:7d:b9:f1:2f:90:0e:52:
ee:f2:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:23 2025 by rpki-client