
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: HNp6XFuGKPS8dLUZ3i0cHwt2KmCLWPm6WpNK3FFylzI=
Subject key identifier: 97:8E:19:48:CC:EF:5C:6F:04:3E:C2:70:E4:51:C3:8B:9E:25:3E:8A
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01987562D74FE9D839E637F67782ADD4F243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1624
Signing time: Mon 04 Aug 2025 14:01:08 +0000
Manifest this update: Mon 04 Aug 2025 14:01:08 +0000
Manifest next update: Tue 05 Aug 2025 14:01:08 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: znmQzdn0XMvEsy8vR8u6/h+lso3coerMVi28OlpO5Fw=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:d7:4f:e9:d8:39:e6:37:f6:77:82:ad:d4:f2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Aug 4 14:01:08 2025 GMT
Not After : Aug 5 14:01:08 2025 GMT
Subject: CN=978e1948ccef5c6f043ec270e451c38b9e253e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:42:64:b9:d4:04:f3:7d:c8:da:f1:90:d4:
a3:81:c2:3d:5f:a8:f9:12:2e:8d:f1:d8:87:85:a6:
f2:d1:7f:ef:32:1f:f5:ad:cf:45:72:d7:8d:5c:a7:
e3:2b:32:39:47:16:77:ac:84:01:0b:ae:65:e0:be:
05:98:1b:bb:d7:1a:b5:b6:9b:24:55:80:8a:c2:0d:
c5:e9:f2:87:ef:04:47:10:a3:a7:d0:b4:c4:e4:6a:
3b:00:8e:f8:23:0b:d0:90:b5:cd:99:96:37:63:a8:
11:61:89:cc:0c:08:58:96:b2:1e:47:fe:91:1f:ae:
b3:3c:61:1d:47:ac:b2:19:b0:99:f2:a2:cb:ae:c9:
e7:46:cd:dd:15:43:f8:37:1c:d1:83:63:95:7d:9e:
01:0a:70:a7:9c:6e:a3:94:61:ec:92:31:aa:86:a3:
cf:87:04:6b:74:93:3d:0c:37:2d:4a:fa:23:f9:9d:
9c:e5:a7:df:62:ca:10:ce:ca:9b:fb:cc:32:f2:f9:
c1:9e:a0:e3:de:6c:39:09:e6:cb:d0:33:f5:2c:74:
da:9c:70:32:f2:72:2d:8c:55:79:8d:7e:36:af:53:
39:0e:8b:8e:0b:9b:35:a2:2b:3f:71:2d:2a:d6:05:
29:5c:f2:19:40:69:0f:b0:ab:35:37:d0:d4:4d:87:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:19:48:CC:EF:5C:6F:04:3E:C2:70:E4:51:C3:8B:9E:25:3E:8A
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:32:45:76:61:40:e8:e0:37:ad:c5:36:06:3b:f0:24:e3:96:
2b:e8:ff:95:c1:78:41:14:4d:25:34:b2:39:8a:cd:32:c7:ac:
3a:db:09:6b:c1:1e:8c:56:aa:18:e6:31:46:c2:d5:45:b7:f7:
10:02:9d:9f:e9:af:33:ef:01:a2:73:2a:f2:d0:88:51:4f:c6:
c3:f3:c8:b7:ec:2a:f3:d6:35:79:76:bd:22:ce:65:e2:c8:68:
38:64:14:21:f9:8d:03:a1:c3:c8:2d:de:4b:50:20:7e:81:b7:
0c:77:3b:45:d5:77:1d:ab:c5:ae:56:5f:d9:72:b7:17:9f:14:
b7:ac:a2:fd:e2:bc:cd:bc:b2:ed:75:8e:33:4a:fd:40:6c:31:
bd:96:3c:c4:3a:3d:19:9a:e8:77:fd:8a:68:6b:ac:68:38:a6:
8b:7b:53:20:ba:43:29:67:5c:6f:cb:4b:90:b0:6d:35:86:f0:
97:97:e1:66:f7:c2:9c:25:4a:ac:98:f5:f5:6c:d5:e5:7f:4a:
45:96:36:73:c3:a5:26:fb:c0:7d:09:e7:00:79:d4:8a:bf:26:
da:0c:e1:ef:17:98:fc:3f:26:f3:19:52:34:ed:8e:7f:06:22:
e2:d1:50:22:88:5d:4d:9c:d4:37:5e:53:8f:b5:dc:4f:1d:05:
40:67:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:55 2025 by rpki-client