Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json)
Hash identifier: Bwz03cn4veMGp50KCd63VJTMGdEVRk2H/TJBsCtIzjA=
Subject key identifier: 93:5B:91:D3:45:F3:1F:EF:F0:0E:FF:61:8D:92:37:DB:E2:3C:0C:2C
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 01988B104F67C3A3E3995B9F8A73C25C65EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
Manifest number: 0A0D
Signing time: Fri 08 Aug 2025 19:02:38 +0000
Manifest this update: Fri 08 Aug 2025 19:02:38 +0000
Manifest next update: Sat 09 Aug 2025 19:02:38 +0000
Files and hashes: 1: 6t5f4Ujb0FAO84dMqgRAqgV1jVs.roa (hash: u7nakvY2IzZI/nPIoCHOpaknwKeAH1RDuYLRGXqd0p4=)
2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: i8fl0ACwoEsEcOqAFd/yZ+f1AA2ZOlG4dMyxS8L6/f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:4f:67:c3:a3:e3:99:5b:9f:8a:73:c2:5c:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Aug 8 19:02:38 2025 GMT
Not After : Aug 9 19:02:38 2025 GMT
Subject: CN=935b91d345f31feff00eff618d9237dbe23c0c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:3c:6b:5c:f7:f0:28:7d:37:2b:e1:81:3b:
91:17:e0:39:d5:61:db:df:84:48:42:d5:40:24:48:
2f:2a:59:10:a5:6b:31:0d:48:1f:d8:aa:b6:20:d3:
b4:d1:5a:de:39:85:95:3d:99:aa:a6:c2:53:ef:e5:
16:bf:21:59:ef:66:7f:0e:7f:22:1a:fa:a6:fd:f4:
1b:61:cb:3a:d3:5b:0e:4c:5c:d6:a9:7a:3f:05:76:
54:3e:91:2c:4c:dc:b8:eb:ed:86:3f:3f:ba:91:5e:
cd:a5:f1:57:a9:15:0d:26:9d:12:ff:93:03:9d:98:
14:d2:f3:f1:40:61:9a:9c:a6:2b:7d:b1:9b:27:37:
c1:81:c7:78:c9:ef:fd:9c:a8:bb:09:62:e2:45:e8:
2b:2f:2b:31:02:cd:6d:6e:92:25:f6:22:cb:f4:4f:
51:39:be:46:44:04:25:37:bb:f2:5a:a6:cc:79:ac:
16:ea:b7:45:50:59:bb:ec:dc:5c:07:67:bf:eb:2c:
6a:f5:7a:1d:52:70:03:c3:0b:48:d4:9c:55:9b:38:
34:5f:2f:64:4d:a6:f4:ee:f2:29:dc:17:b6:95:6d:
5c:54:58:96:5f:20:37:a5:19:56:84:78:5e:39:06:
44:cd:a2:83:8d:7a:eb:51:44:c5:9e:fb:e3:b2:8b:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:91:D3:45:F3:1F:EF:F0:0E:FF:61:8D:92:37:DB:E2:3C:0C:2C
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bb:54:f2:34:61:06:2c:25:6c:6b:53:73:52:9b:02:18:33:
fd:f3:98:ba:95:4d:57:e8:80:ad:f7:f3:0f:7f:f7:3e:cd:a0:
cd:59:18:df:5d:c8:46:e3:1c:a7:f1:2a:3b:0b:59:7f:20:37:
8e:32:c1:df:12:1d:bc:b4:0a:39:fc:73:1d:40:fe:4b:1b:c7:
4c:f8:9a:01:e5:6a:00:08:72:32:dc:ec:e4:42:10:d2:c1:31:
82:b0:8a:ae:39:47:38:7a:c4:d1:25:0f:cd:2d:0e:93:a1:d3:
bf:99:43:26:53:c7:52:82:81:d6:56:1a:b2:91:e8:c7:96:b7:
18:44:aa:f7:ae:64:1f:a2:46:f8:bc:aa:ce:97:b6:bf:ea:24:
79:0a:11:4f:03:6c:61:ab:ed:9b:2b:19:08:eb:a4:fd:5e:ed:
cc:b4:ea:ef:b4:47:b0:f1:5c:c3:48:f3:ef:33:24:d7:58:24:
63:93:85:e4:3e:dd:96:32:5b:04:a4:66:08:fb:d6:f9:75:3d:
8f:c7:9d:b5:c0:2b:66:1b:67:98:2d:fc:7f:67:32:f9:15:ce:
0a:ba:71:92:5e:23:be:4b:b1:0a:27:73:48:af:e2:57:bb:13:
88:b9:2e:c7:50:c3:de:61:cc:55:b4:0d:86:e1:a7:a0:43:fc:
1d:e4:f3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEE9nw6PjmVufinPCXGXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzA1Zjk3YTI2ZjMxZDgwMDYwNTlmYjNhYjE5ZWFjZmI3
ODM0NTUwHhcNMjUwODA4MTkwMjM4WhcNMjUwODA5MTkwMjM4WjAzMTEwLwYDVQQD
Eyg5MzViOTFkMzQ1ZjMxZmVmZjAwZWZmNjE4ZDkyMzdkYmUyM2MwYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1g8a1z38Ch9NyvhgTuRF+A51WHb
34RIQtVAJEgvKlkQpWsxDUgf2Kq2INO00VreOYWVPZmqpsJT7+UWvyFZ72Z/Dn8i
Gvqm/fQbYcs601sOTFzWqXo/BXZUPpEsTNy46+2GPz+6kV7NpfFXqRUNJp0S/5MD
nZgU0vPxQGGanKYrfbGbJzfBgcd4ye/9nKi7CWLiRegrLysxAs1tbpIl9iLL9E9R
Ob5GRAQlN7vyWqbMeawW6rdFUFm77NxcB2e/6yxq9XodUnADwwtI1JxVmzg0Xy9k
Tab07vIp3Be2lW1cVFiWXyA3pRlWhHheOQZEzaKDjXrrUUTFnvvjsosRFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNbkdNF8x/v8A7/YY2SN9viPAwsMB8GA1UdIwQY
MBaAFDswX5eibzHYAGBZ+zqxnqz7eDRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xYWE5NTEtNmM0OC00OTNkLWFkODkt
NThiOWIwYzI0NDBiLzEvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xYWE5NTEtNmM0OC00OTNkLWFkODktNThiOWIwYzI0NDBi
LzEvT3pCZmw2SnZNZGdBWUZuN09yR2VyUHQ0TkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLtU8jRh
BiwlbGtTc1KbAhgz/fOYupVNV+iArffzD3/3Ps2gzVkY313IRuMcp/EqOwtZfyA3
jjLB3xIdvLQKOfxzHUD+SxvHTPiaAeVqAAhyMtzs5EIQ0sExgrCKrjlHOHrE0SUP
zS0Ok6HTv5lDJlPHUoKB1lYaspHox5a3GESq965kH6JG+Lyqzpe2v+okeQoRTwNs
YavtmysZCOuk/V7tzLTq77RHsPFcw0jz7zMk11gkY5OF5D7dljJbBKRmCPvW+XU9
j8edtcArZhtnmC38f2cy+RXOCrpxkl4jvkuxCidzSK/iV7sTiLkux1DD3mHMVbQN
huGnoEP8HeTz4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:42 2025 by rpki-client