Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json)
Hash identifier: v6NflkZY2tLRl71pU9F3aBcq/Ahc1g8CvgngN8wZHqo=
Subject key identifier: 4E:88:71:D5:1D:7C:75:86:00:AD:1B:A9:FE:60:62:B9:E6:EB:5B:A6
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 019A4EF58A12CECAB3228BDE9005DBBC4DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
Manifest number: 0AF7
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: 6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa (hash: u7nakvY2IzZI/nPIoCHOpaknwKeAH1RDuYLRGXqd0p4=)
2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: rUIe97rtxFXE71FBLkJV6OaK3riV1tInQymbf3J/rMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8a:12:ce:ca:b3:22:8b:de:90:05:db:bc:4d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=4e8871d51d7c758600ad1ba9fe6062b9e6eb5ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:b9:f7:ff:d4:7e:ed:98:42:97:16:7e:c0:
4f:45:5c:98:9b:36:ef:98:7c:e5:e8:45:36:5a:9a:
cb:85:9d:e3:e1:6a:a6:e5:1d:3a:38:3d:03:fa:cf:
91:44:4d:ee:f8:01:ff:04:11:ce:7e:b6:6a:83:cd:
8e:08:ab:08:b7:1f:1f:d2:78:f8:0d:cc:02:02:04:
2d:bb:2d:53:d3:ab:7f:99:b7:e9:00:11:80:71:c1:
f4:81:dc:57:76:b8:9d:54:2f:9e:c2:3f:c6:87:6e:
fd:e8:4e:01:69:5e:8e:dd:1d:db:8a:08:c1:64:c9:
97:fc:d8:65:34:7f:72:7c:7d:31:07:95:1d:44:61:
f1:de:db:62:8d:3c:94:62:93:8b:dc:39:fa:51:5b:
db:cb:c4:c3:24:92:60:e1:b5:72:cb:07:97:35:b5:
39:c3:b8:62:d7:27:ba:7c:93:72:8a:1c:91:c6:54:
e4:a4:3e:57:e7:86:b4:72:c2:d0:7b:1f:7b:59:0a:
03:62:d4:bb:53:da:6e:2e:6f:87:d5:2a:bb:75:27:
2f:d4:e8:ee:55:54:d1:cb:72:ad:26:11:1a:96:ee:
7e:e8:26:99:b9:f6:8b:9d:1d:49:8f:5e:53:8a:8e:
c8:6c:fb:4e:01:76:d2:9f:70:35:dc:a3:a2:6a:7b:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:71:D5:1D:7C:75:86:00:AD:1B:A9:FE:60:62:B9:E6:EB:5B:A6
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a6:5b:d1:db:e4:1c:bb:b4:13:41:75:49:c9:59:81:2d:77:
7f:af:ce:e9:04:c3:34:28:aa:60:09:66:7d:07:25:03:38:b2:
d2:25:21:09:46:35:42:07:b8:80:c8:66:40:ba:25:e3:1d:a7:
4d:c5:6e:9a:07:43:0a:34:d3:af:5f:80:21:a6:de:5c:1e:de:
05:59:39:9b:bd:35:6f:23:02:72:41:97:58:37:ba:04:e7:0c:
3a:0f:9f:b5:13:96:27:ea:0a:8e:e3:66:e6:d0:3b:bd:9a:0b:
fe:3b:1e:5e:1f:a0:f9:64:67:35:ba:4b:1a:a8:74:8d:61:af:
e4:f3:6f:9a:ea:98:fe:80:0a:0f:3b:76:13:ee:39:a5:77:25:
ac:46:be:d7:b0:91:f5:01:d9:25:01:63:da:a6:a6:f4:45:fd:
98:df:8c:7e:79:8f:8b:df:47:44:70:6d:b1:68:2b:f5:69:83:
79:4e:1b:26:54:54:3e:2c:2c:82:b7:3b:67:51:ea:6f:25:87:
65:16:a5:75:dd:49:35:ed:b0:08:07:bb:ab:60:bd:b6:96:b8:
41:97:d4:ea:d6:10:4c:a1:ac:cc:b5:5d:f6:3a:8c:7d:dc:1d:
5a:99:e7:56:c7:31:c4:27:b4:b9:38:f3:cc:73:44:ee:cc:fd:
d6:01:66:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:49 2025 by rpki-client