Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: 9hBuf0OKRaL6nKsJE5lGOJMB6KqJNoStqckTSe425xM=
Subject key identifier: F6:EE:64:E3:B2:DC:B5:06:25:46:2A:F3:83:00:0A:6B:49:58:44:E2
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019A73383656EA8A87E9A2B5C92ACBD2489E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 14:00:54 +0000
Manifest this update: Tue 11 Nov 2025 14:00:54 +0000
Manifest next update: Wed 12 Nov 2025 14:00:54 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: XPJUJKRyF3QDtD5tQq6NmP+UIyZpwQ6qZo5uTD38A8s=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:36:56:ea:8a:87:e9:a2:b5:c9:2a:cb:d2:48:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Nov 11 14:00:54 2025 GMT
Not After : Nov 12 14:00:54 2025 GMT
Subject: CN=f6ee64e3b2dcb50625462af383000a6b495844e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:28:9a:a7:0c:98:e2:c9:d4:36:11:86:5a:
11:0c:a0:ad:e3:ff:8e:4f:ee:8e:6d:51:01:02:c8:
5d:0d:28:9f:da:53:94:d9:c3:cf:b3:93:bc:63:a4:
8c:f3:4b:0f:1d:46:8e:c4:aa:5b:5b:da:52:5b:fc:
6e:e0:32:0b:14:4a:79:44:3a:df:9f:f3:3c:10:df:
86:79:83:57:c3:31:a8:53:81:68:0d:ed:eb:8e:c4:
f8:d5:2f:26:65:61:79:93:2c:14:ea:28:bf:e7:a3:
63:b7:20:4b:58:bb:2b:0d:26:b8:35:ee:94:8d:62:
a9:29:46:05:4d:a9:6c:db:ec:b4:04:14:2b:d5:08:
4a:88:24:df:48:d6:1b:4e:89:12:85:09:77:2b:91:
c2:ca:ac:37:d5:5b:0e:1d:f9:ff:0c:7e:22:99:ee:
60:ad:f7:39:68:61:f3:86:95:a4:0a:a5:62:51:fb:
23:54:49:37:42:b4:c8:1a:88:c5:67:12:ff:39:2e:
91:ed:bd:ce:7f:36:94:b9:8c:85:8c:0e:4d:8b:d1:
d5:cf:60:ee:6f:70:5e:fb:0c:ef:93:b1:d2:ee:1f:
15:f2:99:f4:14:3f:49:30:b5:de:b3:93:f2:a7:d3:
12:ad:68:fe:10:b4:25:a1:e9:4a:a0:50:cf:63:6c:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:64:E3:B2:DC:B5:06:25:46:2A:F3:83:00:0A:6B:49:58:44:E2
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:67:6a:d9:a1:5f:45:c1:89:b3:27:49:02:c8:d7:0b:62:
9d:7e:20:63:3d:0f:23:87:df:a1:46:3b:ad:63:de:49:dd:58:
29:a4:98:dc:d6:a9:19:1c:99:fc:49:44:28:d7:43:55:00:df:
44:08:47:be:08:63:1d:2c:01:75:82:8c:e3:78:a3:3f:fa:00:
bc:12:f9:07:f6:f5:43:5f:8b:4b:b7:83:4f:4f:89:b6:0d:c9:
b2:3a:96:ec:3f:34:77:26:81:e0:02:5e:af:02:6e:0e:3f:de:
74:c3:51:c1:f7:cc:7d:02:cc:fe:75:38:0a:f0:27:35:84:cf:
2f:c5:28:cf:ef:bf:79:44:98:83:3a:f2:71:6a:c8:5d:bc:27:
ae:98:ae:06:61:df:57:f7:05:3d:e6:96:ca:0f:b5:5e:ac:5c:
34:01:2a:98:df:fc:5a:14:fc:a9:14:a3:a0:1d:35:ba:d9:5e:
80:05:09:c8:a8:42:e8:8b:e5:89:0c:52:3c:43:06:d5:ef:33:
5b:38:dd:1c:70:21:bf:f8:e0:12:59:b6:b3:71:79:11:35:27:
fa:e6:34:e0:68:5a:27:0b:69:99:c4:80:d3:57:09:47:a6:b4:
4a:6b:69:62:7d:61:cb:e9:96:41:1f:2e:d1:36:ea:97:46:ee:
c1:03:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:52 2025 by rpki-client