Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: if8BgsV0QwLlk6TFMdXn9eSwOHXtf3tDMR2cCOeAjwE=
Subject key identifier: 7C:88:D6:B3:75:26:91:C8:3D:93:B3:73:06:E3:75:94:BE:75:CB:A3
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019A4EF4E90C7C652D706819BB3804832461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: Sz8cpeRYTPGAEBcG5Tf3oQRKW+hAh7da0cswb8ydIdo=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e9:0c:7c:65:2d:70:68:19:bb:38:04:83:24:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=7c88d6b3752691c83d93b37306e37594be75cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:44:34:3b:93:fe:9b:e2:59:23:4b:89:9c:
0b:b6:94:a9:5b:47:1e:8f:61:5d:0e:26:1c:7b:a2:
3f:67:b2:ff:fd:d3:0e:07:b7:21:72:77:bf:27:6a:
73:31:46:84:35:8f:a3:19:b4:80:18:06:00:09:5f:
11:ef:f7:fa:89:8a:a5:d3:3a:fd:de:81:6b:89:46:
fc:63:ba:5a:a5:ca:a0:14:34:7d:56:08:9b:ae:46:
58:94:f1:26:bd:2b:04:fa:52:16:2c:47:77:38:02:
d6:e2:09:e0:dc:f2:65:bc:57:0a:f2:8c:7d:55:a3:
5c:27:4d:05:f7:0a:01:38:11:0a:d3:21:62:e1:94:
6c:b9:ca:fb:9b:b0:31:85:0e:ea:08:9c:a9:a4:4f:
9d:45:53:c7:c0:84:b9:81:11:fc:ee:1b:26:09:82:
d0:4f:d5:73:96:f9:79:9d:b0:97:7b:93:4a:96:e8:
11:e3:0f:cf:4f:78:f9:ae:85:7f:12:79:f8:b4:75:
cf:7b:f0:f0:6b:13:9d:32:91:a3:d0:ee:4e:8b:f3:
1d:cd:ae:b7:ce:24:62:c8:14:8b:e3:ec:a4:65:57:
d1:c2:eb:8f:02:69:01:ba:4e:ba:ae:71:cc:67:cd:
22:77:77:40:2f:dc:3d:f0:50:99:bb:0e:eb:66:6f:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:88:D6:B3:75:26:91:C8:3D:93:B3:73:06:E3:75:94:BE:75:CB:A3
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a4:88:2a:1d:4a:6d:c9:f7:5f:ef:f7:36:33:33:5e:9b:ca:
ac:d5:aa:5c:c5:65:b2:9f:85:52:cf:21:0c:2c:d3:bb:21:e4:
b7:76:f5:ca:e5:ab:0d:20:de:78:62:eb:a8:5f:6f:19:8c:c3:
a9:24:f3:8d:87:ce:32:81:6a:23:48:ad:7e:ce:a2:36:1c:13:
ee:39:2d:64:32:de:ff:b7:01:de:d0:3d:fa:0d:34:f5:64:9e:
ff:88:54:a9:45:c5:ce:df:33:cc:ab:1d:41:1f:e8:f4:5e:93:
19:11:cc:1b:47:8b:c5:96:c5:f4:4f:f7:1d:9a:0a:f0:9b:8a:
2a:56:4e:cb:e9:f3:21:66:bc:3d:6c:da:76:11:c7:9d:cf:c9:
40:77:e5:86:61:0e:f7:cd:44:3a:f0:a9:5d:6d:bc:9b:a9:52:
c7:18:34:0b:4c:46:94:2b:a1:71:b1:3f:4f:d3:a2:81:34:fe:
a4:7f:09:fc:6e:6d:b9:e4:3e:6d:2d:d6:04:0c:0b:74:1e:fb:
dd:05:f1:ff:2d:c9:b1:a2:d9:09:bf:70:4c:92:86:bd:d8:bd:
9a:d3:a3:3f:10:ab:16:65:be:38:a6:91:fc:77:73:b5:0a:00:
fa:02:b1:ca:92:68:ee:64:ed:31:31:db:4b:1f:3e:e4:46:70:
c1:ad:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:15 2025 by rpki-client