Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier: Pg6RC82dZdsdq9HuAK4T3YrTltU8Azk+IRAITcPc4ME=
Subject key identifier: 46:77:91:29:81:F1:85:6A:17:4C:5C:1B:CE:7B:C4:79:2E:27:6D:29
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 0198A04D120E0FBB7489C5449CF3E175A4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number: 0BEF
Signing time: Tue 12 Aug 2025 22:01:01 +0000
Manifest this update: Tue 12 Aug 2025 22:01:01 +0000
Manifest next update: Wed 13 Aug 2025 22:01:01 +0000
Files and hashes: 1: 0KlQdT1lu0CsM24p9yilVmugr4k.roa (hash: IYmqpSxBWUxOlCC0FW+IpqPujhd/KHXz7dmBrQJbXYA=)
2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: 1PDo85zm0tCMUtni06IoSIfzhDVt1Cpzi5g6BnZnwCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:12:0e:0f:bb:74:89:c5:44:9c:f3:e1:75:a4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Aug 12 22:01:01 2025 GMT
Not After : Aug 13 22:01:01 2025 GMT
Subject: CN=4677912981f1856a174c5c1bce7bc4792e276d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:e4:80:0f:53:a2:c0:eb:8d:29:24:04:01:
77:92:8d:07:4e:61:86:e2:9a:41:08:22:c1:a5:7c:
36:58:96:f6:26:14:61:7c:81:b8:e2:c2:30:02:d7:
3f:91:fa:d3:4a:29:84:f1:45:2a:46:29:cd:12:53:
d1:bf:89:a8:c3:b2:39:c3:3d:02:72:c3:d0:7c:71:
14:3f:f2:da:14:c8:87:94:79:95:3d:34:88:93:a9:
22:f2:23:d0:e9:3b:7c:32:d1:7b:93:53:01:dc:f3:
9f:dd:07:3a:75:80:a9:04:4a:f9:10:38:d8:d8:55:
6e:ef:63:c7:22:5f:ba:34:61:bb:70:3b:a9:36:21:
d1:fe:ab:40:a4:03:dd:48:d6:07:f4:41:60:5e:4d:
91:54:fe:b4:69:af:b6:a1:e2:90:27:17:fb:ce:87:
e3:86:f5:67:9d:26:92:c9:39:7f:1d:b4:0c:51:8e:
1d:28:6d:91:1c:0d:5e:ba:3c:45:ce:42:8a:6a:a3:
8f:ba:ef:79:95:54:80:a6:a8:af:c7:0b:1e:7d:3f:
c7:ab:3a:5b:bb:28:83:bd:92:92:1d:8c:6c:0e:7a:
63:27:61:11:f3:70:e1:37:04:7e:8a:f6:2f:82:2a:
34:0a:10:b6:39:13:9c:f1:7d:0b:e6:ab:88:86:36:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:91:29:81:F1:85:6A:17:4C:5C:1B:CE:7B:C4:79:2E:27:6D:29
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6a:c3:d1:18:61:e1:d2:cf:eb:fe:13:0b:e6:7b:a7:b1:98:
ff:18:ae:a4:bc:90:71:93:55:78:b2:aa:59:93:a1:a1:80:13:
25:23:56:83:a6:49:c1:0b:57:36:5c:32:ec:64:1c:ca:a4:d4:
0a:90:b5:f7:8e:1a:e7:8f:c8:1a:78:5f:29:81:67:09:e2:19:
68:53:76:0f:1c:1e:d4:a0:47:ca:fb:89:ef:f1:e0:cf:a5:55:
9b:c8:5d:4e:d4:81:77:33:a9:01:6d:4f:c5:75:ce:2f:e3:22:
04:d5:29:17:be:df:24:71:3b:2d:1a:21:05:1c:d9:26:c2:0d:
55:ca:15:08:27:22:88:eb:6c:37:0e:b0:75:e3:82:5e:0d:7d:
e3:6d:f5:ee:cc:73:a5:04:d2:e1:3a:ae:a9:d0:81:0d:c1:e1:
55:ad:48:49:6e:12:92:13:db:cf:cd:10:29:40:4b:96:74:ab:
bd:cd:48:8a:2b:b2:1d:36:73:61:a4:80:3b:64:80:55:3b:1b:
3e:58:cc:32:3e:0a:40:18:c8:0f:21:c7:92:b2:78:e3:e5:7f:
37:be:6a:e9:9d:2b:fe:eb:3b:73:63:ce:1f:dd:ba:60:26:35:
30:f6:43:12:19:a1:6a:27:42:4b:e4:9f:c1:1b:e9:52:27:96:
35:81:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:13 2025 by rpki-client