Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: WwJfRhRB3K7oaTcAXGj7x/5on3OLB2W+ezyb0Z8RSz8=
Subject key identifier: C8:07:42:E7:E3:A1:27:0F:29:44:5E:50:BE:0D:72:45:0E:9E:36:ED
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019A5609265FA387765E601B02687BBA7097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 19
Signing time: Wed 05 Nov 2025 22:00:31 +0000
Manifest this update: Wed 05 Nov 2025 22:00:31 +0000
Manifest next update: Thu 06 Nov 2025 22:00:31 +0000
Files and hashes: 1: 58vpK8vRiMDsKrPDcpGa-DJvE88.roa (hash: sInLzOJCLuIv4eBWcJWicm0cgoZkrirnczsJmugMVLs=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: ZKT1c4q+5k3m9ykGb1NYvjCsn1mlH4vsANO0Kr1DQfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:09:26:5f:a3:87:76:5e:60:1b:02:68:7b:ba:70:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Nov 5 22:00:31 2025 GMT
Not After : Nov 6 22:00:31 2025 GMT
Subject: CN=c80742e7e3a1270f29445e50be0d72450e9e36ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:5f:dd:ea:02:71:6a:e5:60:90:f9:96:38:
52:b1:54:e4:b9:80:e9:ff:55:83:d5:de:dc:8a:7d:
25:36:a7:cc:72:1e:b2:46:00:36:8e:82:5b:9e:49:
98:ea:f4:ac:5a:76:02:8b:99:e1:61:cb:ff:69:03:
e3:dc:ec:68:67:a7:fe:cc:aa:d7:d7:46:b0:48:8f:
dd:bc:69:4d:24:4a:aa:84:5c:ec:53:86:74:16:06:
50:29:e7:7c:da:59:81:7d:fe:10:7c:b6:90:c0:9b:
33:cd:ba:98:98:62:30:a1:91:ee:f6:73:a8:45:b4:
15:ed:4f:8e:28:f1:df:52:2d:72:f0:ae:91:42:96:
53:22:d1:fe:bc:e2:dc:cb:f9:a1:61:f4:28:3f:45:
2d:0d:26:8e:99:ea:f1:29:16:48:81:2e:df:4f:df:
a9:2b:ee:07:a1:7a:06:04:77:ab:a6:5f:6c:81:f2:
27:3f:cd:52:9a:aa:2c:d8:1c:1b:95:4d:33:8e:f7:
ad:1d:df:e9:0e:97:e4:d3:99:ef:71:af:a4:21:24:
88:25:56:35:24:ce:7c:87:e6:cc:93:34:41:b3:45:
5d:98:86:7a:28:7c:d0:49:4a:0b:96:3e:1b:39:f6:
33:e6:ed:57:8a:f5:39:1e:1d:4e:8f:93:53:a1:83:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:07:42:E7:E3:A1:27:0F:29:44:5E:50:BE:0D:72:45:0E:9E:36:ED
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a9:88:cb:22:82:cf:97:68:46:49:d2:25:2d:b0:27:e2:84:
45:43:45:7d:c9:32:d5:9e:e6:24:7b:32:dc:3a:3b:37:f5:a0:
c7:6b:a9:4c:59:a2:b0:2a:c4:93:c6:1f:73:70:83:48:3a:8a:
1a:13:62:f8:6b:04:a6:fc:50:68:93:60:b9:aa:88:22:28:5d:
dc:7e:bf:3b:5f:f3:58:5d:f4:08:83:09:11:5c:dc:5a:df:bb:
15:cf:79:13:8c:6c:1a:72:11:1d:7e:d4:fb:88:30:19:ad:ba:
5a:b1:ea:2c:0b:eb:06:9f:1a:d9:ee:69:9f:55:e3:5b:bc:a8:
33:76:4e:7a:72:20:07:e8:ed:88:b2:c4:d6:21:e9:48:1f:99:
57:2a:0e:2e:bf:da:e9:ad:95:75:71:67:0c:d1:ad:b8:55:60:
4b:0a:2e:88:0b:d6:21:b8:16:3b:a6:f2:95:fc:04:bb:ba:29:
de:a6:d2:ce:8d:49:f8:4c:47:29:4e:2f:f1:4f:13:b7:92:d1:
64:e5:32:ce:b3:3d:f5:e4:d5:ca:16:8f:48:bc:c8:28:4b:18:
cb:3e:4c:e3:e4:17:1c:19:01:e9:82:ca:1c:8f:1a:b8:a7:49:
57:58:a7:f4:3b:85:ec:ba:19:49:e7:6c:40:d0:ea:be:9e:2e:
7c:61:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:28:43 2025 by rpki-client