Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: FHW7eXRai4SrPE0VvJeumVjdazwhJm8fGgafItAFzaU=
Subject key identifier: 28:10:0E:34:24:4A:81:16:24:B6:FF:E1:E0:E5:DC:14:15:72:3B:17
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019846646D3EBE746154FD42B0E05D88114F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 05DF
Signing time: Sat 26 Jul 2025 11:00:43 +0000
Manifest this update: Sat 26 Jul 2025 11:00:43 +0000
Manifest next update: Sun 27 Jul 2025 11:00:43 +0000
Files and hashes: 1: 2bBaeD35kseI457ZAPL2x12So_w.roa (hash: oq5BcVgGKnzmBudzjO96n+tl2tyiGaHICIAPgJhlDTA=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: 8wHxbUi4Mex+4pPBpVwRKfutMsB3HmVak6c/IevbA90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:6d:3e:be:74:61:54:fd:42:b0:e0:5d:88:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jul 26 11:00:43 2025 GMT
Not After : Jul 27 11:00:43 2025 GMT
Subject: CN=28100e34244a811624b6ffe1e0e5dc1415723b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:cb:32:da:59:0e:75:95:ba:7e:2f:f0:ef:
06:54:66:83:e4:38:c1:e7:38:38:2e:b2:f8:d5:f6:
97:32:25:4b:3d:25:24:18:c6:f6:e6:a5:5e:fb:43:
a4:55:26:c7:0a:5b:74:b5:d2:ce:d9:1a:46:f1:47:
18:6d:c6:f0:ed:5a:48:69:dc:fb:82:4d:9e:81:6f:
ff:5b:ff:6c:6c:96:be:e8:2f:3f:cd:88:cb:b1:9a:
1a:72:96:b0:8a:dd:64:c4:3a:34:d6:17:c5:7a:01:
0b:a6:64:3d:7b:cf:51:3c:f4:ad:d9:7e:1c:50:74:
87:8e:a8:cb:11:26:7b:06:01:bc:a8:f4:01:04:0c:
0c:e8:4d:32:5b:7d:2b:9a:e7:3b:e9:c1:27:1d:12:
2c:fa:be:93:91:12:5f:84:2f:cd:ad:51:fc:e9:3f:
ce:cb:d9:2a:3a:f2:a4:ef:50:41:2b:ec:8d:3e:07:
0d:27:a8:10:14:d0:73:b5:bd:2f:0a:6f:62:62:0a:
d9:ac:d2:3f:aa:5b:34:6b:ea:f5:86:0e:dc:03:a6:
85:3c:2f:e1:fa:ac:d8:84:ed:76:0e:9f:3a:b3:79:
d4:99:0e:9e:bf:37:83:4b:8d:e8:89:2d:3b:e8:d7:
8f:31:6d:45:4d:2e:67:90:86:c2:ea:99:66:18:58:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:0E:34:24:4A:81:16:24:B6:FF:E1:E0:E5:DC:14:15:72:3B:17
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:76:3b:c4:48:46:96:b9:98:bb:c1:ae:14:18:e8:32:24:6c:
c9:a4:74:c3:96:94:73:90:2b:8e:3a:56:06:56:cc:c9:a6:a8:
6a:a5:e8:cc:1e:29:58:15:5d:15:06:8e:ef:93:d1:cb:c4:0f:
28:a6:3e:f0:88:d2:2f:48:8a:99:df:c8:63:2d:19:c2:de:38:
87:f8:1a:29:49:8e:8e:1e:fd:ff:c9:d1:c6:48:19:f7:22:e0:
b7:1b:fc:ab:90:19:12:b4:2d:6a:d0:0c:d6:72:66:90:83:6d:
5b:60:d3:d0:44:cd:a4:d0:d7:08:c8:a0:06:38:e5:6c:d6:34:
b6:4e:02:b3:7d:c2:65:ed:ba:3c:97:61:65:5d:99:85:c0:2f:
86:58:93:c9:7a:a6:b4:3a:68:b7:18:f5:69:88:ec:69:00:89:
0f:63:f8:74:78:dc:ae:db:fa:5c:0d:88:31:28:b5:8e:c2:ad:
71:bf:d8:56:59:12:47:2c:3c:09:a6:0e:a8:83:61:1c:ba:32:
f5:fa:46:3a:63:d3:13:07:23:1a:d9:04:50:3a:37:b9:79:92:
c6:81:68:08:ed:ad:3e:ce:d3:49:5e:2f:66:cc:b5:43:3c:0b:
31:e0:b3:61:c7:54:39:67:95:5f:9f:fc:e9:d6:ef:30:71:6e:
d6:47:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:27:39 2025 by rpki-client