Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: 7edoxCc7EdLMfBLv96aOvfDRMOhzB7mf2hU/0Mk6tHE=
Subject key identifier: 8E:55:6D:97:00:1E:02:28:CD:8B:94:C5:E9:43:EB:2B:15:B6:96:C7
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 019A4DE154AF6454D1C9302D23019760F03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: Nqcprkl+ht6J5zvvJh8sL1n7IDCyrSjlS3LlSZowYVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:54:af:64:54:d1:c9:30:2d:23:01:97:60:f0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=8e556d97001e0228cd8b94c5e943eb2b15b696c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:8d:05:d2:8c:f5:1e:1d:79:f3:40:85:8c:
4e:3a:d2:88:fb:b7:b5:dd:57:1b:8f:ea:46:41:a6:
4d:89:d5:5a:dd:db:e4:7a:c4:67:e9:8e:5d:8b:3a:
c0:a1:d9:53:63:a7:e8:ea:dc:4a:e7:6a:ed:07:1b:
10:e5:94:9e:c2:b7:28:eb:38:38:1d:02:73:7f:b3:
77:92:57:38:a4:bb:47:a4:ab:da:83:c1:cf:7f:4a:
9d:71:db:3a:be:1a:90:f4:4a:f9:e0:fb:15:4c:95:
24:45:c2:6a:26:5f:43:20:cf:85:62:95:5e:f4:26:
36:e2:78:4c:97:08:e1:cf:65:64:1f:bd:ba:1e:8e:
94:ed:94:8d:78:d2:5f:8a:f9:f3:67:fc:8a:ab:09:
01:d1:49:6a:d5:50:d8:5d:b7:f2:4a:c3:3d:f0:df:
c4:4e:ca:68:e3:f1:92:e4:fb:e2:cb:b2:ac:23:5f:
87:fb:ef:31:ee:13:f1:0a:70:66:d7:79:42:af:0a:
d8:a5:68:d8:32:e3:28:06:4e:61:c7:4d:fd:c0:94:
d9:68:75:6a:8f:c7:4d:61:f5:0a:a2:ce:5a:53:cb:
f7:1d:5a:e0:5e:57:fb:d3:f0:80:29:e6:8c:fc:eb:
f2:ba:ac:70:97:ef:aa:20:4b:28:f2:bf:e2:80:6c:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:6D:97:00:1E:02:28:CD:8B:94:C5:E9:43:EB:2B:15:B6:96:C7
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:bf:92:b3:f8:3e:a9:7f:a6:3f:eb:b8:f9:d9:74:3e:0d:
91:0e:2f:e7:ab:3e:8c:5f:6e:2b:bb:35:6f:d3:d4:a6:47:08:
3a:e5:dc:b4:dd:11:40:da:48:d1:9f:c1:c1:63:ff:cb:67:b3:
2b:af:63:d6:31:20:e8:0b:7a:ff:22:3a:f4:7e:7d:da:5d:19:
91:a4:b2:fe:98:2e:23:8d:36:7e:0c:ea:7f:c6:17:1b:25:cd:
b7:5a:80:68:ea:6e:c5:17:3f:58:4b:c6:62:bb:be:15:25:ac:
41:0f:db:eb:46:36:2b:1b:46:0d:8d:f1:b1:92:81:ac:4e:12:
30:e2:22:6a:f5:8f:97:df:53:f5:fa:be:cf:e5:77:f6:db:b3:
f4:0d:5f:67:a2:b7:35:fb:3c:37:18:d5:e8:f1:c3:4a:cc:5f:
7c:e1:c6:3c:4f:20:ee:21:cb:95:50:65:b1:56:d4:69:1c:10:
de:7b:fb:da:2d:bc:a5:5d:73:ed:14:66:27:e4:8d:be:0c:fc:
b4:95:e1:98:aa:85:e8:65:9a:5b:4f:c9:9f:c7:08:be:e2:36:
5a:4e:de:5e:74:3d:96:af:ad:ef:a6:2e:0a:61:5d:74:ba:18:
09:ff:8f:6f:2e:7d:34:87:8f:b9:9b:45:6a:6e:52:6a:46:c3:
f6:1e:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:41 2025 by rpki-client