Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: tHhTCXYOFGZ3wKnW3RuzsnrT/yVesMj9hBsanuwlHxA=
Subject key identifier: 83:65:3C:CE:D0:5C:24:3F:E7:19:C2:FF:89:34:60:32:3E:AC:15:EF
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01992331901DFE9524B3B88483C40EF25010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 167E
Signing time: Sun 07 Sep 2025 08:01:14 +0000
Manifest this update: Sun 07 Sep 2025 08:01:14 +0000
Manifest next update: Mon 08 Sep 2025 08:01:14 +0000
Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: m+EkpDBpGU5Iu/MptLTBIm2C8rkx6bG4o+UQulNaJYg=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:90:1d:fe:95:24:b3:b8:84:83:c4:0e:f2:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Sep 7 08:01:14 2025 GMT
Not After : Sep 8 08:01:14 2025 GMT
Subject: CN=83653cced05c243fe719c2ff893460323eac15ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:70:f7:c8:87:e2:39:a8:a2:df:be:5d:c9:
29:bc:f4:18:ca:07:f7:1c:81:68:5b:ab:e6:95:da:
dd:6d:db:f0:37:d6:4f:20:73:0e:e3:d0:b2:c5:08:
a3:15:cc:86:1a:9a:19:d0:39:59:c8:8e:18:19:d8:
5a:b1:24:17:2c:89:f3:99:4b:2f:a1:08:f5:e3:ab:
3f:32:94:4b:c8:51:4f:bc:9a:ce:bf:ac:10:82:ce:
b2:13:75:3c:f3:c1:fd:b3:3d:b1:ae:87:b2:b8:4e:
34:ab:44:d9:cf:5e:7c:23:82:34:f0:e5:5e:50:97:
a5:08:f3:4d:db:7c:d9:32:79:98:f7:b1:6a:08:bf:
02:9c:15:bd:5e:fa:6a:24:e3:58:ae:2d:cc:ee:12:
59:72:58:99:93:ff:68:eb:95:52:43:58:77:65:71:
27:be:ac:60:39:92:49:cb:f2:fa:8e:51:1e:2e:63:
c5:c8:07:f5:3b:fa:2f:56:e6:b7:bd:87:e8:13:28:
ab:6e:de:b9:f3:63:4b:27:6d:f2:27:fb:e4:08:8d:
60:f7:86:91:80:d4:05:54:35:55:7b:e6:ad:1c:3a:
af:8e:84:0e:76:c4:05:60:f5:ab:fa:94:15:35:cd:
d0:81:90:ec:b2:4f:bf:0e:08:33:95:78:e0:3f:82:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:3C:CE:D0:5C:24:3F:E7:19:C2:FF:89:34:60:32:3E:AC:15:EF
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:d0:7a:bb:42:bf:db:83:0f:da:6d:ea:c5:45:3f:fb:91:
60:ea:8b:e4:cf:93:2a:b1:c1:16:3a:f5:6e:d5:df:e2:2e:18:
b9:4d:4a:9d:6d:dd:05:cb:db:5b:98:4a:f8:24:d4:96:b4:3d:
09:2a:77:70:81:a6:f1:51:d6:a0:ce:2d:81:c6:67:3c:b8:71:
8f:2e:38:44:ce:25:56:f6:67:f5:eb:c0:68:f2:fd:51:7a:6e:
2c:e1:a0:e5:dd:71:3a:0f:cf:db:9f:88:a9:e4:cc:79:c4:33:
12:77:f9:3f:d5:b1:b9:a2:a9:d6:23:16:e4:97:92:56:8e:d6:
e8:9c:50:ae:9d:84:f6:e7:bb:7c:bc:4a:44:ea:3c:b0:9c:66:
b5:6a:ad:8f:be:ac:1d:4d:5f:5b:bc:07:4e:93:bc:82:43:b4:
c9:31:55:22:41:58:91:45:8e:7d:ff:9b:e3:15:32:92:ad:34:
0c:d2:5f:bb:49:51:23:9a:81:d8:bf:34:f7:75:9d:aa:a7:56:
ba:0d:5e:25:62:9e:79:70:6b:a6:f2:bb:05:5c:0f:ec:18:9b:
44:46:a0:49:22:12:d4:53:61:4f:ce:9f:b0:52:ae:bb:85:68:
bc:ea:c8:0d:8f:16:43:d6:28:d6:8b:d0:4d:87:84:58:1e:29:
17:ed:3d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMZAd/pUks7iEg8QO8lAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiM2RhZWY4OTMwNmE3NWYwYjg4MTkxNDQwNzQyYTcyMGFm
YjNmMjAwHhcNMjUwOTA3MDgwMTE0WhcNMjUwOTA4MDgwMTE0WjAzMTEwLwYDVQQD
Eyg4MzY1M2NjZWQwNWMyNDNmZTcxOWMyZmY4OTM0NjAzMjNlYWMxNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrZw98iH4jmoot++XckpvPQYygf3
HIFoW6vmldrdbdvwN9ZPIHMO49CyxQijFcyGGpoZ0DlZyI4YGdhasSQXLInzmUsv
oQj146s/MpRLyFFPvJrOv6wQgs6yE3U888H9sz2xroeyuE40q0TZz158I4I08OVe
UJelCPNN23zZMnmY97FqCL8CnBW9XvpqJONYri3M7hJZcliZk/9o65VSQ1h3ZXEn
vqxgOZJJy/L6jlEeLmPFyAf1O/ovVua3vYfoEyirbt6582NLJ23yJ/vkCI1g94aR
gNQFVDVVe+atHDqvjoQOdsQFYPWr+pQVNc3QgZDssk+/DggzlXjgP4L71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINlPM7QXCQ/5xnC/4k0YDI+rBXvMB8GA1UdIwQY
MBaAFDs9rviTBqdfC4gZFEB0KnIK+z8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUt
YWFjYWQ4NmM2MTdkLzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUtYWFjYWQ4NmM2MTdk
LzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7zQertC
v9uDD9pt6sVFP/uRYOqL5M+TKrHBFjr1btXf4i4YuU1KnW3dBcvbW5hK+CTUlrQ9
CSp3cIGm8VHWoM4tgcZnPLhxjy44RM4lVvZn9evAaPL9UXpuLOGg5d1xOg/P25+I
qeTMecQzEnf5P9WxuaKp1iMW5JeSVo7W6JxQrp2E9ue7fLxKROo8sJxmtWqtj76s
HU1fW7wHTpO8gkO0yTFVIkFYkUWOff+b4xUykq00DNJfu0lRI5qB2L8093WdqqdW
ug1eJWKeeXBrpvK7BVwP7BibREagSSIS1FNhT86fsFKuu4VovOrIDY8WQ9Yo1ovQ
TYeEWB4pF+09yw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:40 2025 by rpki-client