Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: IeAiKmpmOGJ5igYnFASbxB30BxD3HdtQUlUo3AAc4MU=
Subject key identifier: ED:84:F6:39:AD:C8:E9:58:E3:03:6B:8D:F1:C2:98:0B:6E:A4:06:55
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 01984964F1EC163AF72C9C8A45E2794313A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:08 +0000
Manifest this update: Sun 27 Jul 2025 01:00:08 +0000
Manifest next update: Mon 28 Jul 2025 01:00:08 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: lUw1iAQk/Q4JzlVyNlPd5XrXpu7Lqgip1Uflr1CfGFA=)
2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f1:ec:16:3a:f7:2c:9c:8a:45:e2:79:43:13:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Jul 27 01:00:08 2025 GMT
Not After : Jul 28 01:00:08 2025 GMT
Subject: CN=ed84f639adc8e958e3036b8df1c2980b6ea40655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:db:4e:12:af:3d:d8:19:55:5f:c2:66:99:
7e:a9:44:9d:e4:a8:09:87:b5:c4:22:41:1f:c6:53:
87:69:21:6d:db:54:cc:4b:11:19:4e:22:24:e3:7a:
0b:b9:a8:f9:6c:cf:2c:99:e5:6f:2c:bb:e0:0b:1e:
b3:1f:c9:ca:3a:f4:6c:58:09:5e:55:88:29:0b:72:
23:38:da:89:28:b8:21:22:4c:20:9a:7c:8c:94:8b:
c4:30:83:06:91:77:8a:71:75:17:07:b6:fc:c1:05:
65:ae:53:e5:2d:a4:f6:9a:4c:00:d9:2d:07:ca:77:
ea:7d:a0:b6:d2:cf:49:79:95:e8:34:cf:a6:77:9d:
98:36:a0:d0:22:b8:94:40:1a:67:3b:9a:28:fe:a6:
be:66:a1:b7:01:62:ac:de:39:b0:02:b8:60:08:14:
ff:67:25:35:18:b8:ab:b9:83:b4:e3:7b:28:e6:91:
de:d1:b7:f4:ab:99:c8:38:ff:51:cb:ed:4a:33:8b:
45:85:75:0a:e4:e0:1c:f2:b9:7f:ee:13:60:53:cb:
b1:f5:28:d9:9b:9e:0f:4e:00:b5:72:26:89:c8:fc:
74:28:06:57:09:c3:e2:a5:b7:e3:d0:8f:a2:23:ba:
ee:87:2e:70:d3:60:ea:21:cc:c9:4b:2d:83:00:4e:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:F6:39:AD:C8:E9:58:E3:03:6B:8D:F1:C2:98:0B:6E:A4:06:55
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d5:c5:31:38:2c:de:07:28:18:98:fe:6e:01:3f:c9:f6:ed:
ca:b7:fe:cf:66:0c:7c:1f:35:70:c9:af:5c:03:2e:19:1a:68:
b1:2a:a6:02:aa:78:44:51:97:3b:af:57:5c:f5:1f:08:87:f9:
5b:e9:9b:df:a9:8d:47:7c:5b:2c:8f:cc:6f:26:ce:4c:f6:6b:
3b:bf:61:5e:74:fa:c4:f7:68:0a:ec:0d:62:4e:17:be:ad:be:
24:e2:2d:7b:64:de:33:b0:39:e3:80:d9:bb:80:96:93:e3:68:
8b:53:16:1c:1f:59:4b:82:9d:be:97:53:63:9a:b8:80:d4:d4:
80:51:c6:55:97:ca:e7:b4:ec:46:26:c3:b1:4c:80:ab:92:f8:
1b:f9:64:ad:11:6a:e2:a6:d7:7d:19:2b:0b:e4:ba:c6:71:8d:
2d:52:70:79:22:05:45:50:66:99:f3:be:ef:9f:e0:d6:1f:22:
52:d2:a8:9f:c4:ea:b9:39:9b:2d:94:97:99:75:cb:61:57:18:
7e:4a:4e:43:b8:1e:c4:af:8b:19:c1:02:ae:ab:9e:0d:6c:a5:
6d:78:03:0e:4e:65:a8:c5:de:2f:9f:08:8c:98:0a:66:8b:19:
4f:e6:65:f8:35:85:c2:db:cf:60:c8:6e:a7:ca:3a:5e:a0:41:
31:a9:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:44:25 2025 by rpki-client