Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier: JCXhJuBwbLUX4/vOHld+hUw8jrGmlJThK39qDPBikCM=
Subject key identifier: 84:A2:0C:B8:84:A1:94:12:9E:22:3C:96:AC:6E:50:76:B9:27:BC:6C
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 0198530D2E015ACA5CDD0CC2869303EDA191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number: 0BC7
Signing time: Mon 28 Jul 2025 22:00:29 +0000
Manifest this update: Mon 28 Jul 2025 22:00:29 +0000
Manifest next update: Tue 29 Jul 2025 22:00:29 +0000
Files and hashes: 1: 0KlQdT1lu0CsM24p9yilVmugr4k.roa (hash: IYmqpSxBWUxOlCC0FW+IpqPujhd/KHXz7dmBrQJbXYA=)
2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: J3365jfUpAmleMBbgDXfOqRd0rEwLXXIshh2rmLhuhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:2e:01:5a:ca:5c:dd:0c:c2:86:93:03:ed:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Jul 28 22:00:29 2025 GMT
Not After : Jul 29 22:00:29 2025 GMT
Subject: CN=84a20cb884a194129e223c96ac6e5076b927bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:ff:fd:b6:12:3e:8a:de:3e:96:56:f0:14:
c6:a7:de:5c:41:39:8c:aa:22:f0:67:29:00:bd:2e:
50:4a:ec:50:c3:08:74:6d:98:c7:be:6c:5f:2d:0a:
41:5c:5f:61:d1:44:c1:28:20:92:3c:09:2c:e3:8f:
a3:79:58:26:31:f4:9d:81:8f:eb:11:18:51:ff:14:
b7:b3:39:0d:aa:60:cb:cb:b4:81:1d:cb:06:51:25:
1f:c6:91:c4:3c:4b:25:26:62:6e:ed:4d:f7:94:e7:
01:b8:02:f2:b8:a1:84:11:f9:67:29:d1:e6:3e:e4:
58:e2:ca:25:ae:c0:1d:5e:5a:d5:0f:7a:91:fb:23:
1f:c6:79:fa:f4:5a:31:76:00:31:40:eb:0b:d8:7b:
62:43:9a:76:54:ee:77:37:23:7a:fa:22:3b:68:64:
59:b4:ca:21:f9:18:50:88:84:0c:1c:3b:80:78:c4:
b8:bb:2a:c3:ae:17:0c:51:53:bd:70:db:e3:7c:67:
96:6d:42:1a:c1:f2:70:57:db:dd:0e:04:ac:7b:e2:
b8:bf:33:00:c5:45:6b:d3:72:de:e9:3d:5b:b1:c7:
18:a4:94:ab:ab:44:22:5d:4f:08:d9:88:91:95:79:
26:7a:c7:46:24:14:32:34:1b:db:35:89:fe:1b:9d:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:0C:B8:84:A1:94:12:9E:22:3C:96:AC:6E:50:76:B9:27:BC:6C
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:84:bb:1b:e5:19:34:d8:ef:1f:69:17:9f:6c:e7:8f:92:de:
cc:fe:be:d1:26:1d:05:a8:45:bf:84:68:45:6a:71:32:20:8d:
13:16:8a:e0:a7:0c:e9:62:db:24:12:cd:26:f3:0d:2c:68:01:
8b:e5:c2:46:70:38:c8:52:4b:89:90:3b:6a:b9:ca:94:34:d4:
48:a5:9c:e2:62:91:96:60:37:fd:00:e5:89:af:f7:a1:76:e5:
b9:85:ff:e0:3f:4b:8a:6d:fe:7b:9d:90:c4:2a:e0:6a:df:f0:
7d:8b:12:b3:17:eb:22:73:af:1a:d0:11:bd:78:d6:d1:ea:34:
2d:f9:f9:eb:a1:32:84:34:c0:58:da:d1:d7:07:01:8d:ff:cb:
e6:78:56:70:75:16:af:0a:87:0d:e1:a0:d9:27:a2:16:e9:96:
a5:e3:e2:39:e6:f1:dd:ba:8c:0e:c5:d3:63:3b:fa:dc:68:a0:
9f:5c:59:c3:6a:bd:9d:f2:39:5f:ae:54:ba:8b:56:b9:10:a0:
cb:72:49:36:9d:80:44:8e:8a:ca:16:c6:d5:7c:b9:06:b0:c9:
f8:de:89:de:35:dd:52:02:c0:31:82:00:cc:ca:19:59:b3:a0:
9d:3f:5b:40:07:d8:c0:d7:b8:b7:62:7a:06:29:3c:5e:7a:c6:
74:73:ef:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDS4BWspc3QzChpMD7aGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzYzZTA5YmQ2OTQyYWRhYjQyNDE1OTk5Zjk3OTk5MGFi
OTY2ODIwHhcNMjUwNzI4MjIwMDI5WhcNMjUwNzI5MjIwMDI5WjAzMTEwLwYDVQQD
Eyg4NGEyMGNiODg0YTE5NDEyOWUyMjNjOTZhYzZlNTA3NmI5MjdiYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXr//bYSPorePpZW8BTGp95cQTmM
qiLwZykAvS5QSuxQwwh0bZjHvmxfLQpBXF9h0UTBKCCSPAks44+jeVgmMfSdgY/r
ERhR/xS3szkNqmDLy7SBHcsGUSUfxpHEPEslJmJu7U33lOcBuALyuKGEEflnKdHm
PuRY4solrsAdXlrVD3qR+yMfxnn69FoxdgAxQOsL2HtiQ5p2VO53NyN6+iI7aGRZ
tMoh+RhQiIQMHDuAeMS4uyrDrhcMUVO9cNvjfGeWbUIawfJwV9vdDgSse+K4vzMA
xUVr03Le6T1bsccYpJSrq0QiXU8I2YiRlXkmesdGJBQyNBvbNYn+G50HswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISiDLiEoZQSniI8lqxuUHa5J7xsMB8GA1UdIwQY
MBaAFDs2Pgm9aUKtq0JBWZn5eZkKuWaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pZLUNiMXBRcTJyUWtGWm1mbDVtUXE1Wm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hNzIxYTAtZWRiYS00NzZkLThiZTMt
MTQxNDIyOTQwMzg1LzEvT3pZLUNiMXBRcTJyUWtGWm1mbDVtUXE1Wm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hNzIxYTAtZWRiYS00NzZkLThiZTMtMTQxNDIyOTQwMzg1
LzEvT3pZLUNiMXBRcTJyUWtGWm1mbDVtUXE1Wm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIS7G+UZ
NNjvH2kXn2znj5LezP6+0SYdBahFv4RoRWpxMiCNExaK4KcM6WLbJBLNJvMNLGgB
i+XCRnA4yFJLiZA7arnKlDTUSKWc4mKRlmA3/QDlia/3oXbluYX/4D9Lim3+e52Q
xCrgat/wfYsSsxfrInOvGtARvXjW0eo0Lfn566EyhDTAWNrR1wcBjf/L5nhWcHUW
rwqHDeGg2SeiFumWpePiOebx3bqMDsXTYzv63Gign1xZw2q9nfI5X65UuotWuRCg
y3JJNp2ARI6KyhbG1Xy5BrDJ+N6J3jXdUgLAMYIAzMoZWbOgnT9bQAfYwNe4t2J6
Bik8XnrGdHPvYg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:12:53 2025 by rpki-client