Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: FvYqvT8qIRjGwE/a2lDTGUG0nezehO+i98+VPm3G6Ps=
Subject key identifier: BE:E7:0F:4F:85:97:E9:0C:F5:CB:83:4E:BC:04:B6:EB:18:1B:F1:25
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019884315EDF0C42A1856103B19B68DCEB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 05FF
Signing time: Thu 07 Aug 2025 11:01:24 +0000
Manifest this update: Thu 07 Aug 2025 11:01:24 +0000
Manifest next update: Fri 08 Aug 2025 11:01:24 +0000
Files and hashes: 1: 2bBaeD35kseI457ZAPL2x12So_w.roa (hash: oq5BcVgGKnzmBudzjO96n+tl2tyiGaHICIAPgJhlDTA=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: XRHY3RoVZeYchoyAVrh0L51kBILh7ylmrx0En1sMBMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:5e:df:0c:42:a1:85:61:03:b1:9b:68:dc:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Aug 7 11:01:24 2025 GMT
Not After : Aug 8 11:01:24 2025 GMT
Subject: CN=bee70f4f8597e90cf5cb834ebc04b6eb181bf125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:7f:b9:7f:00:e0:db:83:a7:d6:ef:fe:9c:
1f:34:d6:52:f9:c8:fd:16:46:03:3b:0f:e8:86:5c:
ec:76:5f:c4:b6:e6:4d:b7:f9:30:d5:0b:a1:ce:45:
43:9a:a3:ee:15:63:fb:6c:84:f7:c1:11:c5:5e:14:
c7:18:0f:9a:67:49:4c:1c:15:21:ad:7c:b4:61:e6:
b4:c1:19:8e:91:79:04:1a:47:ad:5f:b8:d0:7f:f1:
fc:63:10:40:06:b4:9b:89:c6:74:c9:3f:c5:ba:49:
cd:71:f8:48:ef:25:e6:97:98:dd:ef:63:ab:05:1a:
1c:54:ee:7c:68:c1:d2:46:aa:30:5f:b6:be:0c:9c:
66:91:3a:b4:66:f0:e0:76:dd:9c:4d:47:b0:57:93:
34:04:8a:1b:ba:cc:2d:e7:13:1a:01:d1:c2:ec:76:
b1:93:b2:c8:3c:f9:a0:39:88:62:74:cf:61:14:15:
da:d3:d3:f9:e3:ae:99:0f:29:f2:71:30:b8:ac:0d:
d5:10:c8:d4:a7:a3:a1:8e:a8:ca:16:3a:17:e2:33:
76:cd:b2:89:a8:9e:95:be:53:af:c8:39:69:50:5e:
3e:cd:d3:1c:bb:79:66:99:c1:e1:bf:6d:5f:74:15:
1b:24:66:b7:64:1d:44:d0:0d:bf:17:6c:c5:a3:99:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:0F:4F:85:97:E9:0C:F5:CB:83:4E:BC:04:B6:EB:18:1B:F1:25
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c1:fb:6d:f4:b0:33:de:71:73:d0:c8:e0:5d:8b:0b:6d:c1:
78:7a:24:65:7b:10:af:0d:70:4a:b6:99:ea:cc:61:d6:58:a0:
74:9e:ae:8b:c5:e1:11:bc:84:b3:eb:4e:8c:4a:65:48:47:62:
a6:8e:03:2c:c9:47:c7:7c:37:25:9a:34:b9:c4:bd:1e:b5:38:
9c:5e:ed:fc:40:f6:51:a5:ce:08:9d:9c:31:4e:18:11:e4:75:
1f:f1:1d:ae:8a:51:cb:37:02:43:52:32:37:a1:76:e6:c8:7c:
45:4d:94:2d:42:b1:52:ad:29:30:c3:69:98:27:cc:ef:37:d2:
ff:0a:23:15:53:9d:6a:96:da:ff:bd:bd:bc:7c:e6:a8:52:08:
ce:45:1e:29:04:82:08:12:8d:45:73:3e:e9:91:28:45:1c:4c:
a9:e1:81:cf:57:69:6c:20:31:64:02:24:3e:6a:57:64:df:d5:
db:4d:04:f8:c3:9e:04:fa:31:67:5e:ab:bf:3a:0d:23:4d:06:
85:ff:3a:d0:bc:f4:1c:12:76:c8:3a:15:3e:65:d1:41:f0:31:
32:16:27:cc:9d:a7:c9:fb:4d:bb:ce:8e:e4:16:2e:9d:95:22:
4f:c0:0f:2b:2d:b3:7f:48:95:52:61:df:30:a5:67:7b:9f:e9:
18:ca:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:25:17 2025 by rpki-client