Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: pnVfkpn8sJlZ9H8rX928HrtEKBLzz61YLL+0GGR+1bk=
Subject key identifier: EA:EB:A9:A6:81:5F:FD:FE:37:8E:A6:67:7C:0F:D2:3D:F9:7E:42:9B
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 01984C65FFD31676C241E89A0B64D8C0C56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 12C4
Signing time: Sun 27 Jul 2025 15:00:09 +0000
Manifest this update: Sun 27 Jul 2025 15:00:09 +0000
Manifest next update: Mon 28 Jul 2025 15:00:09 +0000
Files and hashes: 1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: BxNHcaJSjZzUYvfmzT+ZU5wVUdmHpiDR8mO7YQSylnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:65:ff:d3:16:76:c2:41:e8:9a:0b:64:d8:c0:c5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Jul 27 15:00:09 2025 GMT
Not After : Jul 28 15:00:09 2025 GMT
Subject: CN=eaeba9a6815ffdfe378ea6677c0fd23df97e429b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:83:11:bf:53:56:61:72:47:0b:f2:32:f5:
3e:6d:c5:c3:64:1a:8f:18:cf:ba:84:57:f2:5f:88:
b5:7f:da:3a:ac:af:b8:c3:9d:49:eb:63:b0:c4:22:
39:e5:22:6c:54:49:19:fa:eb:0a:8b:f3:0d:36:d7:
68:66:da:55:bb:45:f7:e0:93:e8:88:a2:84:1b:28:
9d:4f:c8:e6:73:c9:cf:b7:34:06:d9:af:1e:6f:6e:
6a:3e:53:d1:63:7e:d3:bf:eb:8b:b6:66:4c:76:99:
8c:b5:16:01:d4:fe:fe:66:12:1e:42:47:56:27:9b:
8e:41:93:53:01:f5:c2:ff:f3:27:fe:5e:ee:ed:76:
6f:6d:c0:2a:df:2b:27:e3:df:45:29:c6:cc:70:2f:
31:a3:c5:90:38:e2:7f:4b:08:b9:80:a4:dd:b8:2b:
d9:db:ab:0c:74:65:df:20:54:ab:9d:a6:23:36:d0:
70:94:6d:eb:b6:be:28:71:1e:ff:28:24:b2:ee:9c:
1e:65:9f:2f:d5:ac:a6:dd:43:18:aa:f4:83:2a:a5:
b3:ea:a3:d9:13:44:75:4e:22:79:cc:da:73:55:b1:
df:64:47:13:53:1b:20:6d:52:e8:c4:b7:be:d3:73:
c8:71:4c:d6:f4:e3:60:85:29:b5:e4:a3:7a:cd:be:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:A9:A6:81:5F:FD:FE:37:8E:A6:67:7C:0F:D2:3D:F9:7E:42:9B
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:38:8f:20:f4:2d:9c:f0:fc:d8:e7:74:c6:3d:a5:ff:96:9e:
be:e3:af:7d:27:9c:84:64:b4:5f:ca:0b:6a:12:04:5f:5c:6d:
e6:ff:33:48:08:9c:a1:0b:68:36:fc:d9:99:42:08:b8:33:73:
6b:34:8a:48:29:5b:b8:95:ae:25:b3:e4:85:39:77:1a:79:1d:
7e:73:58:85:fb:7c:02:5c:41:c4:65:ff:5e:da:ed:14:92:2c:
0d:1a:6d:1e:89:96:f4:de:bd:74:98:78:a2:b4:d2:fe:c3:88:
f1:1b:eb:4b:49:52:c5:b9:89:05:f6:b4:c2:b4:e4:11:c5:67:
ed:39:00:f1:28:6a:b8:da:a0:4f:81:02:c9:45:86:af:91:f8:
95:28:83:6e:77:d0:e1:d2:98:a0:6c:e9:04:53:65:8f:5d:2e:
c7:f9:53:5a:56:08:b6:13:29:94:8a:4a:36:98:f4:0d:8f:b7:
bc:b8:50:fd:17:23:db:a5:30:59:2b:3c:85:5d:63:1b:14:fd:
10:03:27:3e:f5:ca:fe:40:01:98:4f:44:13:7d:9c:1f:77:e0:
bf:fa:c3:f3:c7:52:0b:c0:da:17:8a:83:f2:5a:18:9d:13:20:
a8:7c:fc:92:e2:0e:21:8e:14:6d:09:f5:01:ad:ef:5d:9e:91:
0c:58:da:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMZf/TFnbCQeiaC2TYwMVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OTNkNTRlNjM5MDgwYTQ2YzNmZTNkNThhYTg3ZTMwNWRi
NjlhZDEwHhcNMjUwNzI3MTUwMDA5WhcNMjUwNzI4MTUwMDA5WjAzMTEwLwYDVQQD
EyhlYWViYTlhNjgxNWZmZGZlMzc4ZWE2Njc3YzBmZDIzZGY5N2U0MjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRGDEb9TVmFyRwvyMvU+bcXDZBqP
GM+6hFfyX4i1f9o6rK+4w51J62OwxCI55SJsVEkZ+usKi/MNNtdoZtpVu0X34JPo
iKKEGyidT8jmc8nPtzQG2a8eb25qPlPRY37Tv+uLtmZMdpmMtRYB1P7+ZhIeQkdW
J5uOQZNTAfXC//Mn/l7u7XZvbcAq3ysn499FKcbMcC8xo8WQOOJ/Swi5gKTduCvZ
26sMdGXfIFSrnaYjNtBwlG3rtr4ocR7/KCSy7pweZZ8v1aym3UMYqvSDKqWz6qPZ
E0R1TiJ5zNpzVbHfZEcTUxsgbVLoxLe+03PIcUzW9ONghSm15KN6zb5YbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrrqaaBX/3+N46mZ3wP0j35fkKbMB8GA1UdIwQY
MBaAFDmT1U5jkICkbD/j1YqofjBdtprRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMt
ZDQ4ZmJjMWEyNDNiLzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMtZDQ4ZmJjMWEyNDNi
LzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTiPIPQt
nPD82Od0xj2l/5aevuOvfSechGS0X8oLahIEX1xt5v8zSAicoQtoNvzZmUIIuDNz
azSKSClbuJWuJbPkhTl3GnkdfnNYhft8AlxBxGX/XtrtFJIsDRptHomW9N69dJh4
orTS/sOI8RvrS0lSxbmJBfa0wrTkEcVn7TkA8ShquNqgT4ECyUWGr5H4lSiDbnfQ
4dKYoGzpBFNlj10ux/lTWlYIthMplIpKNpj0DY+3vLhQ/Rcj26UwWSs8hV1jGxT9
EAMnPvXK/kABmE9EE32cH3fgv/rD88dSC8DaF4qD8loYnRMgqHz8kuIOIY4UbQn1
Aa3vXZ6RDFjadA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:06:41 2025 by rpki-client