Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: uBpLqrxDb4eRxATOwTG+bpz8S8qXckFMK1kWV1c9nhs=
Subject key identifier: 5B:1E:8A:66:48:C1:67:37:31:0F:23:C7:99:C3:AE:E2:44:E2:A5:23
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019873E1BB1C2E8271E016C93AD130E6721C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:30 +0000
Manifest this update: Mon 04 Aug 2025 07:00:30 +0000
Manifest next update: Tue 05 Aug 2025 07:00:30 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: rHA6ggg42c227VwarHWPA/0S4SB0vzVhkIi1HmoFKrA=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:bb:1c:2e:82:71:e0:16:c9:3a:d1:30:e6:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Aug 4 07:00:30 2025 GMT
Not After : Aug 5 07:00:30 2025 GMT
Subject: CN=5b1e8a6648c16737310f23c799c3aee244e2a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:ad:8c:c3:8d:02:b6:93:b5:9b:cc:b9:24:
61:0d:07:a5:54:83:9b:9b:64:97:29:9e:3b:a5:cb:
b7:44:ae:c1:71:a6:21:8d:77:47:31:e8:1a:a2:d5:
10:26:5f:84:6f:2d:04:df:d1:b7:0e:b5:21:6b:fc:
06:6b:fb:a5:b9:48:43:8e:dd:18:f8:7b:d1:f3:65:
74:bd:37:53:ce:55:f0:83:d5:12:a8:07:1f:33:c6:
44:25:b9:5b:d9:aa:f7:aa:60:1a:03:45:15:c8:17:
cb:24:d7:fe:f5:e5:7e:b2:4e:14:a0:e0:bc:81:3f:
69:38:88:e3:5f:9e:33:a7:dc:1c:59:f5:65:c1:88:
8d:55:97:72:19:72:e7:51:b4:6c:e9:ec:b3:eb:c1:
99:4e:d0:47:3b:46:22:d8:13:25:90:ba:44:5f:04:
16:2a:7f:e6:7e:f8:3d:2b:f5:ad:1e:fe:18:37:c4:
ce:9d:ef:e4:5a:ec:a4:0b:ca:66:e8:5c:bb:ea:29:
14:cc:48:5c:5d:c9:5d:a5:ae:ce:91:0f:ab:0c:fe:
7e:00:be:0c:45:9c:39:54:0c:90:4b:0f:7c:3d:8f:
0d:75:59:c4:7e:e4:00:ef:dd:f6:52:e1:bf:02:fc:
da:4d:bc:8a:de:55:1b:77:cb:59:01:1a:fb:87:aa:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:8A:66:48:C1:67:37:31:0F:23:C7:99:C3:AE:E2:44:E2:A5:23
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d9:ef:03:bb:c5:86:e5:4a:b9:ae:0c:d5:22:8d:c6:34:a4:
aa:5d:5c:f5:86:23:00:f6:30:1c:89:1b:65:ba:ed:37:46:6b:
9d:35:ed:d0:34:7d:1d:3a:38:d3:44:75:a0:1b:57:4b:b3:73:
db:f5:ec:67:4b:b9:1d:bd:54:cd:2f:7a:b1:38:bc:c6:4f:2a:
53:00:95:7f:89:2d:0a:60:e0:ea:e5:8d:a2:aa:92:97:2e:9f:
ef:1e:aa:38:8d:c3:8c:a4:4d:0d:dc:45:16:7d:33:e4:9b:fb:
f6:de:62:ab:53:ef:db:26:7c:9a:b9:86:d6:62:c4:cd:e3:16:
60:6d:2e:5c:36:a1:46:af:05:8a:3d:74:59:d7:fc:79:5f:f8:
b4:b9:53:7c:58:0d:e2:ff:de:cc:81:25:ba:be:e5:32:86:06:
c9:c4:3b:61:4b:80:00:75:31:0b:fe:e1:c4:e1:7c:6b:38:ca:
1f:52:d3:5a:05:f3:b1:ea:88:a7:e1:4c:a7:4b:23:4f:06:63:
08:b3:cf:01:7f:64:41:d3:a5:6d:31:57:7e:54:2d:52:9d:f9:
6c:c7:43:9d:49:76:0d:1a:30:25:37:30:86:13:59:cd:c0:25:
13:5a:6d:8f:52:08:df:92:e8:6c:27:10:79:43:75:35:b8:4e:
5d:f6:c8:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4bscLoJx4BbJOtEw5nIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzM2M2U0N2U2OWViYzVkMWMyMjUxZGRkNWRhYzdjOTg5
ODk5MjIwHhcNMjUwODA0MDcwMDMwWhcNMjUwODA1MDcwMDMwWjAzMTEwLwYDVQQD
Eyg1YjFlOGE2NjQ4YzE2NzM3MzEwZjIzYzc5OWMzYWVlMjQ0ZTJhNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUmtjMONAraTtZvMuSRhDQelVIOb
m2SXKZ47pcu3RK7BcaYhjXdHMegaotUQJl+Eby0E39G3DrUha/wGa/uluUhDjt0Y
+HvR82V0vTdTzlXwg9USqAcfM8ZEJblb2ar3qmAaA0UVyBfLJNf+9eV+sk4UoOC8
gT9pOIjjX54zp9wcWfVlwYiNVZdyGXLnUbRs6eyz68GZTtBHO0Yi2BMlkLpEXwQW
Kn/mfvg9K/WtHv4YN8TOne/kWuykC8pm6Fy76ikUzEhcXcldpa7OkQ+rDP5+AL4M
RZw5VAyQSw98PY8NdVnEfuQA7932UuG/AvzaTbyK3lUbd8tZARr7h6rUtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFseimZIwWc3MQ8jx5nDruJE4qUjMB8GA1UdIwQY
MBaAFDszY+R+aevF0cIlHd1drHyYmJkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMt
Y2NkYWRmN2Y2NWYyLzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMtY2NkYWRmN2Y2NWYy
LzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdnvA7vF
huVKua4M1SKNxjSkql1c9YYjAPYwHIkbZbrtN0ZrnTXt0DR9HTo400R1oBtXS7Nz
2/XsZ0u5Hb1UzS96sTi8xk8qUwCVf4ktCmDg6uWNoqqSly6f7x6qOI3DjKRNDdxF
Fn0z5Jv79t5iq1Pv2yZ8mrmG1mLEzeMWYG0uXDahRq8Fij10Wdf8eV/4tLlTfFgN
4v/ezIElur7lMoYGycQ7YUuAAHUxC/7hxOF8azjKH1LTWgXzseqIp+FMp0sjTwZj
CLPPAX9kQdOlbTFXflQtUp35bMdDnUl2DRowJTcwhhNZzcAlE1ptj1II35LobCcQ
eUN1NbhOXfbIhg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:11 2025 by rpki-client