Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: e4CMLWW8Rj8HqWfLnNTlLxZV08UER6PkEKksTndDpXw=
Subject key identifier: 25:B6:0E:DC:34:81:B3:10:77:2B:D1:DB:A4:BE:7D:A1:6B:81:52:C0
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019778D3AB1F8124956811B83C5A66449BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 13:00:27 +0000
Manifest this update: Mon 16 Jun 2025 13:00:27 +0000
Manifest next update: Tue 17 Jun 2025 13:00:27 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: xFWlt5hZjHSgM+1pV9h8PnBjX/vLdO0s3vP/sZ0ZE/I=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:ab:1f:81:24:95:68:11:b8:3c:5a:66:44:9b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Jun 16 13:00:27 2025 GMT
Not After : Jun 17 13:00:27 2025 GMT
Subject: CN=25b60edc3481b310772bd1dba4be7da16b8152c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:d9:31:ec:e9:10:81:81:46:5d:34:a1:45:
1e:ed:e5:57:2b:4b:92:b4:1d:7e:b9:c8:8b:fa:77:
89:3f:81:33:ee:ee:6e:a2:35:d4:eb:85:8f:74:e1:
34:e5:73:0b:1f:75:d3:36:2c:f7:2f:cb:4c:01:ea:
1b:64:7e:7a:98:1c:e6:d9:72:05:01:39:00:a3:87:
7c:9d:dc:e3:33:08:32:55:0c:43:4c:13:48:39:96:
e3:53:d1:7b:76:cc:0f:83:d2:92:4b:ce:7d:59:74:
f9:2a:04:70:61:67:32:cb:98:6a:96:1d:9f:19:c9:
3d:d9:78:56:e9:9d:fc:b3:44:1f:a4:05:e1:f7:54:
20:fa:3c:f2:81:29:aa:52:81:57:7f:97:ad:c0:49:
03:bb:2c:79:ed:c0:a6:27:7a:0d:2c:c1:a1:e7:06:
a8:a0:f9:0a:26:73:81:d9:43:6e:24:ef:ab:71:cf:
7e:22:52:b4:5b:03:9e:61:c6:4e:d1:ad:06:3a:a0:
5e:41:99:9f:58:c9:d7:47:44:af:1d:bc:29:15:11:
31:d5:5e:f8:45:42:6e:2b:c5:ed:26:83:39:99:8c:
44:82:f9:d5:d5:42:79:fc:d4:2f:5f:d6:ba:7f:19:
11:59:3d:a5:1f:7d:6f:43:99:c7:df:37:d2:1f:53:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B6:0E:DC:34:81:B3:10:77:2B:D1:DB:A4:BE:7D:A1:6B:81:52:C0
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:16:f6:40:4d:f8:d9:b4:89:c6:7d:9e:98:24:43:88:4a:ef:
3a:9c:a1:9b:0f:8f:32:bd:78:93:58:b2:87:b4:fd:77:ff:64:
e9:69:47:6d:10:99:6f:ac:f4:0f:61:03:3b:b9:42:f0:35:db:
4f:80:1d:e6:83:23:38:fe:55:2f:55:0f:01:d7:94:ed:5a:2d:
63:a9:44:95:79:3d:db:cf:03:ca:ef:2c:e9:d2:5c:4d:10:3c:
f5:c0:74:7f:15:25:38:cb:21:84:93:d1:b0:1e:c1:94:03:68:
c4:04:92:b1:b2:3f:9a:44:ae:ed:29:47:82:2d:03:89:77:28:
c6:d2:d0:56:ce:d2:63:79:b1:60:79:85:4a:1e:bf:c3:a3:4c:
15:76:74:fc:6e:2e:65:5d:b8:91:c1:45:28:a3:2f:91:5e:5a:
69:66:ad:ee:95:9c:e4:e3:92:f3:aa:ed:7a:72:4f:b5:8a:4f:
ed:4c:52:86:75:36:c0:9f:7f:2c:d8:b7:f3:db:ad:26:24:d0:
4d:77:ac:60:70:10:ec:e5:0a:5a:f7:21:61:10:ec:c8:9a:92:
47:64:98:ab:9d:da:cd:49:42:ea:96:6f:e4:18:80:2e:cd:17:
34:b3:ce:59:b1:06:4e:08:98:33:ec:f6:eb:9b:56:a3:d1:83:
f2:51:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:24:28 2025 by rpki-client