Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: a4XUNpedE+EHWJsQ3kIYiN00C29aHu7S7xepxgBV/Mo=
Subject key identifier: 9B:BC:E8:C0:D0:4A:37:E4:9F:69:6A:77:64:91:9E:F6:0B:A2:CF:19
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 01976C2B501E1161C398849CA9DCB0822FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:01:07 +0000
Manifest this update: Sat 14 Jun 2025 02:01:07 +0000
Manifest next update: Sun 15 Jun 2025 02:01:07 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: xmMR4ZIUNRj3pj8MqCD0jfLrekZv5cC4f9u3giicURE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:50:1e:11:61:c3:98:84:9c:a9:dc:b0:82:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Jun 14 02:01:07 2025 GMT
Not After : Jun 15 02:01:07 2025 GMT
Subject: CN=9bbce8c0d04a37e49f696a7764919ef60ba2cf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:49:d4:64:d2:7d:05:7c:82:84:1f:f2:fe:
56:d3:7e:9c:d1:91:a7:9a:4f:18:05:cb:52:8e:ad:
1e:2c:4d:06:23:d1:7a:97:8e:da:6c:8b:0d:29:91:
f3:41:4d:23:e9:4b:5f:d8:79:d8:7f:f7:f6:de:87:
63:09:84:5b:42:21:e9:27:79:bd:1c:d3:f9:d2:2f:
d7:77:1e:46:94:2b:83:e3:77:6f:23:fe:79:b5:7b:
b6:fb:b9:c3:34:96:19:c0:43:71:be:92:ad:f4:49:
a4:de:41:25:4b:36:fe:df:55:04:fa:18:32:41:c6:
98:60:17:f6:8c:47:2a:26:17:45:dc:e3:f2:51:df:
e5:7e:ff:cb:59:ae:9f:90:39:6c:ed:3d:b7:f0:75:
37:af:eb:5a:f1:55:92:a0:e2:6e:70:15:5d:b7:b2:
da:b5:2a:96:61:37:1a:73:27:e5:a0:c1:5a:52:73:
ad:ab:40:8f:77:76:2f:ba:e4:97:c5:f8:93:03:26:
99:07:1c:67:b6:9b:8f:7e:7d:bc:94:9a:79:67:ff:
b6:9c:6a:cf:52:cd:a0:8b:40:d7:70:b4:20:0e:33:
4d:b5:02:45:08:8b:c0:5c:9a:0a:e2:a8:8f:d5:0a:
cd:ae:5f:cc:29:f8:c2:b2:e6:52:68:63:f6:74:cf:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:E8:C0:D0:4A:37:E4:9F:69:6A:77:64:91:9E:F6:0B:A2:CF:19
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:66:1b:fe:ff:b3:ea:37:56:5f:2f:e9:51:a2:b8:a1:60:8a:
71:cd:77:40:e0:60:7e:26:e5:92:97:35:a6:a5:62:db:df:57:
33:7d:57:3b:8c:ab:c9:ee:b4:6a:84:89:fa:e5:60:f2:87:8b:
92:82:d0:bb:03:16:06:56:8d:78:3f:7e:81:aa:6b:c2:c1:cc:
04:57:a3:31:67:fb:e2:99:3f:8d:12:00:a6:f6:c6:42:f9:d9:
ef:aa:43:a3:e8:b1:0f:6e:27:90:12:bd:fd:6a:15:2b:f4:62:
79:58:7a:df:e5:12:3a:87:c6:41:62:fc:fd:b9:28:fa:27:a6:
b2:f7:ef:ae:2c:e1:ee:77:fd:d7:cc:be:eb:0b:ea:30:89:bc:
52:df:62:c0:28:7a:f9:f8:38:a5:61:f2:24:54:99:bc:5b:af:
ad:ab:10:4c:79:5f:21:7c:e3:73:c4:a8:a1:0d:d1:50:a5:eb:
5e:e6:44:58:0f:9c:8d:8f:af:03:1f:98:bf:54:20:8c:8f:1d:
91:b6:f4:6b:70:c3:c7:49:02:37:5a:21:97:8c:51:f3:44:8c:
dc:92:9d:48:36:45:06:1a:ea:2a:b9:c5:0d:e5:59:ad:2b:cb:
ef:4b:08:a9:e0:1a:8f:a4:24:6d:b9:c9:61:70:34:b9:6e:81:
cb:28:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:12 2025 by rpki-client