Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json)
Hash identifier: Nd+YHRE5vRQibq+mnUkqMoZ+k7Gb1VH0+FmHgjOqbuk=
Subject key identifier: C9:6A:97:25:82:47:40:14:44:D6:8A:1E:35:5F:97:6C:4B:E6:C1:BF
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 0198824354500DCAB2B1E326DD331FFFD646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
Manifest number: 0B65
Signing time: Thu 07 Aug 2025 02:01:47 +0000
Manifest this update: Thu 07 Aug 2025 02:01:47 +0000
Manifest next update: Fri 08 Aug 2025 02:01:47 +0000
Files and hashes: 1: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (hash: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=)
2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: jDS7PPXuDqkvaaVdCVHPWe4roe/acDiSIBXeXUUUa4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:54:50:0d:ca:b2:b1:e3:26:dd:33:1f:ff:d6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Aug 7 02:01:47 2025 GMT
Not After : Aug 8 02:01:47 2025 GMT
Subject: CN=c96a97258247401444d68a1e355f976c4be6c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:b5:aa:32:de:da:dd:81:8e:94:f5:23:d5:
3f:6f:83:44:01:b0:f9:27:4d:4b:b5:a1:66:ce:73:
b2:d9:62:3b:46:11:35:4b:50:83:ed:c0:00:2e:3d:
8a:8e:3d:67:cf:2b:da:ca:8f:fb:00:7a:8e:32:be:
24:64:bf:20:7c:0f:40:e8:9b:de:ba:94:86:39:cf:
22:47:52:a3:bd:d4:f1:e6:e1:a9:09:8a:48:1e:63:
c2:01:e7:1c:11:1e:97:14:b5:75:19:e7:41:59:26:
95:c4:de:97:0e:8f:43:a6:19:f2:a5:d8:63:20:13:
fe:7f:dd:2f:d1:73:c2:3f:f8:30:9c:dc:ac:5b:88:
71:a7:35:bb:81:1d:39:bb:38:82:f4:f4:99:cd:52:
06:10:02:dc:7e:1a:5d:54:5b:20:27:c2:2a:37:33:
bd:53:7e:46:62:ca:d4:4e:e0:94:6c:22:e2:3d:8f:
47:b4:e5:16:ce:e7:e9:82:da:b9:a6:12:0a:3d:d3:
f0:64:48:4f:8c:1b:21:d4:fc:3b:ec:ab:02:22:d4:
06:b9:be:c7:ff:e0:c9:5a:fb:0a:21:be:68:78:9d:
58:9a:a0:e3:55:7e:29:ab:c7:6b:0f:ae:b2:15:5f:
0b:07:37:77:50:ad:bd:0b:b8:46:3b:4f:05:fd:21:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6A:97:25:82:47:40:14:44:D6:8A:1E:35:5F:97:6C:4B:E6:C1:BF
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:83:2a:64:10:4a:c0:00:e3:1a:82:ca:f7:18:06:e5:98:d9:
26:3d:5b:b1:3c:ee:b2:3e:3d:b9:3c:30:99:09:71:7c:59:8b:
ac:2f:ed:c4:a2:4b:6d:63:21:4e:e2:f2:a8:ef:8e:7a:ca:e4:
b9:91:55:e7:6b:f2:cd:09:bf:a0:ba:dd:f6:a7:dd:20:c8:e2:
db:c0:1d:8b:4d:0a:9d:24:8a:d9:13:32:e3:85:f3:a4:65:a9:
4d:8f:3f:e1:22:af:5c:c3:23:ea:a0:b9:7f:9c:0a:a8:69:35:
0f:44:81:aa:73:9c:c9:3b:cb:42:09:8c:67:a6:41:4b:35:8a:
4a:84:b3:20:7a:2c:d2:19:be:7d:89:09:77:24:62:25:0c:0d:
59:14:5f:17:1e:a7:5f:54:64:cd:55:b5:20:ab:d3:2e:08:35:
37:5a:e7:67:7d:42:0b:73:b6:81:2b:b5:e2:10:01:0b:79:b5:
d0:95:58:4e:da:9e:c1:89:29:cd:70:6e:df:05:d0:1b:ea:0b:
9c:a6:da:d5:33:77:6d:aa:f6:94:e4:93:05:f7:72:b4:63:32:
0a:c1:cf:76:8b:26:45:f7:49:40:b4:e0:26:7f:1e:ad:86:68:
e5:b6:34:e7:b7:10:ec:f0:fe:40:4b:86:0a:ab:fc:48:4a:38:
36:46:78:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:18 2025 by rpki-client