Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: 1xnD9fE6gC3b4DchdKfn55XfZfq7zW1MLsmQcXbZ1I8=
Subject key identifier: 3A:03:75:CF:D7:83:66:05:6D:1F:68:0F:35:E8:A1:D1:26:13:FE:D2
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 019872CFD0FC34340FDBF1D40CBC3BD5CB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:01:18 +0000
Manifest this update: Mon 04 Aug 2025 02:01:18 +0000
Manifest next update: Tue 05 Aug 2025 02:01:18 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: UgsoJn2Y9mmmJnvqfW37txs8Auh5U8NR9w/96tpJ66w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d0:fc:34:34:0f:db:f1:d4:0c:bc:3b:d5:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Aug 4 02:01:18 2025 GMT
Not After : Aug 5 02:01:18 2025 GMT
Subject: CN=3a0375cfd78366056d1f680f35e8a1d12613fed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:e5:33:44:31:80:38:c6:c6:63:84:ff:89:
e5:55:ec:5e:78:e1:9a:b6:93:92:03:9a:21:9d:ff:
5d:6f:0a:14:4e:7a:89:e8:12:67:ab:6b:1b:8a:61:
0b:36:9a:31:14:62:f7:b7:22:1c:41:00:40:de:2d:
f6:7b:8f:ce:ab:c4:99:df:bc:3f:6c:d8:e4:36:4d:
72:9d:bf:ef:fc:07:fe:6d:97:b5:b2:d6:c6:13:bf:
b6:13:4d:4c:c3:42:19:d9:ef:57:fc:df:50:62:80:
43:9e:1f:94:79:f8:39:bc:45:83:d0:5b:e2:71:d0:
4f:90:2a:b8:d3:53:a5:87:f7:62:c9:c5:17:67:ba:
fb:83:d3:2a:36:31:5b:fb:27:71:49:3f:8f:49:9c:
a6:e6:ea:55:52:36:33:f9:f9:ca:d9:c8:5e:f9:eb:
91:1e:4e:ab:e6:11:48:b2:c7:dc:e0:bd:fa:03:4e:
db:f6:c0:67:6b:9a:c3:fd:26:8a:20:5a:bf:1d:a8:
32:83:3c:45:55:48:2b:1e:f2:1a:cb:52:8c:24:0e:
36:a7:97:59:4f:e0:d6:57:44:c1:e2:7b:9e:15:7c:
4c:89:38:87:9d:7f:24:c9:f8:5c:5e:53:06:3c:54:
21:0e:7e:72:16:81:ad:8e:f9:70:48:e0:34:81:f6:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:75:CF:D7:83:66:05:6D:1F:68:0F:35:E8:A1:D1:26:13:FE:D2
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:ca:20:94:f8:12:f4:1b:82:6b:79:2b:ca:80:2c:0e:e6:
94:e7:ca:44:8d:6f:c7:1b:a5:ce:d4:cc:94:40:73:7d:98:8b:
c9:ac:ed:bc:b7:9f:52:09:be:34:48:d9:11:7b:eb:12:97:c9:
72:34:f6:ed:ee:21:ea:0a:3c:d5:20:c9:1a:24:77:6d:54:36:
d2:bf:47:3e:bd:89:35:c2:ac:2c:6d:07:89:f4:95:c2:d3:cb:
31:60:36:89:cd:b8:a8:f3:9d:bc:3e:95:42:1e:59:0b:91:74:
1a:ec:58:25:1f:ca:a7:1d:ed:b7:57:13:55:e3:89:c1:f5:9a:
84:8d:3a:0d:7b:ff:c5:28:21:3c:6a:c8:31:29:e0:f9:7c:c0:
39:3c:a6:f1:ec:3d:fc:af:84:2c:19:b2:4f:44:f8:d0:4f:60:
86:a1:50:f4:89:4c:87:55:cc:ff:16:5e:c4:f5:34:04:5a:6b:
f6:a4:05:40:83:21:83:1a:a4:05:99:0a:05:96:a8:84:bc:cc:
bc:2e:56:b2:b3:26:ff:26:a0:d6:be:77:d3:af:b7:a8:39:c1:
c3:65:92:d2:3f:a6:07:db:00:88:3a:50:d6:b4:c4:69:51:9f:
85:11:b6:65:46:9b:37:e5:e3:46:2e:e7:65:43:c5:64:08:dd:
27:66:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:39 2025 by rpki-client