Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: j56Ap7kDR9YbCs5j8rJTtkVVnlTkr8A5WAh/bY4pZ+0=
Subject key identifier: 49:7D:5E:D9:74:A0:42:0C:00:5E:A5:27:7B:CC:DD:6F:A6:69:F3:F3
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 019A4DAB347A8DE0811D66E5F3D99C23F5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 053A
Signing time: Tue 04 Nov 2025 07:00:56 +0000
Manifest this update: Tue 04 Nov 2025 07:00:56 +0000
Manifest next update: Wed 05 Nov 2025 07:00:56 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: pjatywsZ+4iZFz75ukapCfp5aP5VG6esnWUTKj5CPQU=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:34:7a:8d:e0:81:1d:66:e5:f3:d9:9c:23:f5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Nov 4 07:00:56 2025 GMT
Not After : Nov 5 07:00:56 2025 GMT
Subject: CN=497d5ed974a0420c005ea5277bccdd6fa669f3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:20:61:dd:92:23:de:48:e7:e9:d7:ed:0a:
c6:2a:87:04:e1:69:18:51:21:2a:7b:0a:f5:fe:16:
35:89:61:ad:75:d4:38:b2:48:63:c6:c7:bc:7f:f2:
1e:09:4d:28:3f:58:f0:ed:ea:e2:d0:be:4b:e1:d6:
6c:a5:3a:96:1e:45:04:0a:38:0a:63:3e:39:ce:bd:
9e:dd:b4:01:17:07:6a:09:84:9b:60:3e:85:db:94:
84:ca:58:e0:88:92:97:5b:c6:85:da:c4:21:b6:8d:
58:1a:6c:6c:6b:46:bf:df:59:4d:0b:c7:48:fe:2e:
ff:03:4d:52:d1:4f:da:7d:7f:12:73:4d:55:f5:26:
5a:e1:10:e7:fe:ac:6e:bd:17:4e:ca:c7:65:e6:ca:
b5:41:42:a0:e7:5f:0b:c3:43:21:41:26:ab:3d:f5:
64:a3:96:e6:b1:1b:e0:42:13:90:08:ab:ca:82:45:
06:76:46:32:c5:70:c5:73:d2:bd:9b:c9:b2:5d:82:
84:4b:77:b3:71:44:fe:1d:23:53:73:4a:21:03:a8:
76:b4:5d:81:4d:29:f4:44:ac:08:e2:3a:bd:e0:b1:
50:53:ed:cf:30:83:23:21:d5:a2:6f:b4:50:79:a0:
17:b1:ec:f2:8f:83:c6:3f:10:61:aa:59:86:89:40:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:5E:D9:74:A0:42:0C:00:5E:A5:27:7B:CC:DD:6F:A6:69:F3:F3
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:1f:41:41:1d:f4:67:6d:9d:3d:ca:d6:09:b8:d9:5a:7b:
24:e3:ea:f3:6c:7a:24:23:4b:75:58:7a:a4:81:8f:37:81:4f:
19:5c:77:f1:14:42:3c:2a:4f:4a:0e:4a:d8:5f:57:68:fe:62:
dd:16:9f:e4:ba:71:4c:18:73:0a:10:fe:6b:b3:3f:e5:9a:af:
73:b8:ad:ce:14:3c:78:e9:e3:ff:db:10:ea:6d:0e:09:3c:e0:
5e:ba:27:14:7b:4b:9c:c2:23:86:23:d7:ff:02:f1:5c:e9:fd:
66:c7:bd:3e:79:b2:74:bd:77:10:0d:b4:de:78:4f:c6:32:1b:
c0:1c:45:2c:03:cf:13:1e:52:5a:49:9d:6a:02:c7:47:22:7b:
a6:b0:dd:a9:b4:e4:5c:41:26:e9:c3:5e:bd:36:11:e6:b6:c7:
e2:59:5a:3d:f8:f8:10:db:07:4c:6f:66:82:ce:52:07:d0:81:
7e:64:22:70:20:85:d5:65:a8:0c:45:5a:5d:b8:2e:ac:b0:7d:
5f:7b:aa:f0:dd:0d:17:54:8b:a0:9d:cf:3b:38:04:40:4d:1c:
ee:7f:7a:74:7d:4d:c6:c5:fa:7e:cd:ef:19:ec:27:7d:f9:d0:
7c:06:90:0a:90:e3:f2:19:d4:8a:60:23:32:9a:95:58:ce:09:
85:ec:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:03 2025 by rpki-client