Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: baBgACf04Jg5NtXWGN2qQ7+/dyOP3JKodXZx6WIVokQ=
Subject key identifier: 4D:B7:70:E7:A6:85:3F:8E:A5:1C:D8:1E:C5:C6:FA:F0:11:6D:AA:00
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 01984A09D2B94D08E32BF3364EC63995BD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 042F
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: xa6URmsDsNb5ttCCgMGxSTU+0mOG+Bym5jptMhiFre8=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d2:b9:4d:08:e3:2b:f3:36:4e:c6:39:95:bd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=4db770e7a6853f8ea51cd81ec5c6faf0116daa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:c4:28:ad:66:d1:1b:93:fc:7c:87:74:1d:
31:4c:89:05:0b:ba:47:57:eb:e5:20:79:69:e3:3c:
54:9d:2a:1c:ff:6f:e2:6d:2a:9d:4c:10:11:4e:ae:
61:2d:54:aa:40:b2:3d:28:e2:5a:68:64:5a:ae:3f:
35:18:30:67:94:7c:52:e3:b1:90:0d:eb:85:a4:53:
07:46:f9:5d:6b:2d:a5:2a:e1:e3:67:92:60:48:b8:
df:fb:59:ae:a9:3f:b0:78:d8:db:e7:78:84:ae:e6:
99:4e:fd:f0:88:35:65:1d:dd:5c:88:e0:f6:98:38:
d8:fe:79:55:a2:a8:3b:6d:e6:88:f7:69:a5:fe:db:
0d:6d:df:19:28:dc:9f:0b:49:93:6e:9b:9d:c1:bf:
b5:60:b2:a8:79:5e:ef:71:38:d8:aa:2f:8a:d1:a2:
1f:fd:d6:2c:f2:02:f9:9d:16:83:66:e2:34:48:d5:
26:37:37:db:6f:14:c8:32:43:27:d8:19:ff:ba:af:
a9:43:9d:c2:73:89:8e:ed:30:ef:c7:41:06:ed:38:
ea:3f:cd:93:a7:98:be:67:32:93:26:71:bd:f7:74:
c5:80:9c:48:59:58:8f:81:ff:65:82:e1:76:d7:0f:
3d:b4:85:67:8d:8f:68:6d:f2:97:e1:b9:15:01:b7:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:70:E7:A6:85:3F:8E:A5:1C:D8:1E:C5:C6:FA:F0:11:6D:AA:00
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d2:72:c5:87:56:ca:c1:b5:39:57:83:48:f4:1b:c0:69:4d:
ab:06:ae:34:be:21:08:cc:6b:92:c1:05:4c:92:7d:ad:ca:f3:
c6:4d:10:99:b1:0c:f9:4a:b7:08:81:e1:f3:9e:bd:94:4a:86:
f2:35:0a:e5:9b:63:13:ae:bf:69:7f:21:16:d1:a4:0c:d9:52:
0b:1e:30:d8:9b:68:f0:2c:28:30:f7:b7:5c:1a:50:cf:ad:c7:
56:58:9a:38:58:c0:cf:53:90:9c:9c:ba:db:7e:7d:4e:e7:03:
7b:13:09:69:10:f7:16:d1:21:cb:d6:1d:24:48:16:e9:2e:05:
19:5a:e2:1d:12:2a:b7:f2:a2:23:80:3d:7c:3a:9e:79:d2:2b:
71:d0:a4:67:17:a3:4d:b1:f5:2c:fa:dc:f7:d5:77:3a:81:88:
ac:1a:b4:ab:5e:36:83:a6:e3:b8:64:e7:7f:f2:af:b1:f7:b5:
cf:6a:80:d0:c5:4e:bf:94:c1:af:7b:ee:ab:79:be:70:8f:77:
9e:6e:69:06:f6:cb:e9:b1:fd:25:ee:6c:2c:95:7e:d0:a0:85:
70:fc:ac:3e:e1:5b:10:36:7e:8e:01:88:fb:90:b2:0f:dc:fc:
c0:98:6a:ae:73:74:96:39:38:c6:19:e7:48:5c:9d:b7:02:6d:
30:80:9d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:17 2025 by rpki-client