Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: 6KVMobyrPB0L5gNqWa9O8tM9dA7WXagJYqpuWuEIdqM=
Subject key identifier: DE:57:1A:CF:1B:98:30:F6:C0:07:A1:FB:AD:77:B0:5E:4B:50:ED:A3
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 0199E5624007A25B276A8D0BDE737743593B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 0504
Signing time: Wed 15 Oct 2025 01:00:45 +0000
Manifest this update: Wed 15 Oct 2025 01:00:45 +0000
Manifest next update: Thu 16 Oct 2025 01:00:45 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: Ti9H4i+dU48TXBSNe9GmEdM0R6gs76Kyl8zQWgtuaQQ=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e5:62:40:07:a2:5b:27:6a:8d:0b:de:73:77:43:59:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Oct 15 01:00:45 2025 GMT
Not After : Oct 16 01:00:45 2025 GMT
Subject: CN=de571acf1b9830f6c007a1fbad77b05e4b50eda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:86:8e:c5:4e:c9:e8:c9:dc:b9:0f:9f:f4:
52:32:cc:01:0e:88:aa:87:6f:20:ba:94:ba:66:39:
01:8f:04:66:6a:aa:32:a0:56:2b:22:92:02:59:c4:
4b:ac:e1:bd:60:07:85:4e:3f:7c:e0:8d:f7:4a:99:
97:b8:af:00:9b:e8:39:f1:52:9a:1f:b3:50:65:8b:
da:19:0a:59:2f:74:49:57:28:16:2d:68:8f:0a:85:
a2:37:5e:82:65:c0:05:7b:df:dd:74:0c:90:11:d3:
6c:63:81:d0:8f:69:3c:e5:68:5f:9f:32:27:a8:50:
a7:48:a5:6f:6a:d9:2e:9f:a4:d2:8a:f6:b1:66:b6:
e8:94:5f:5b:51:4a:c3:75:f6:2e:d4:d6:8f:33:e7:
d5:e0:39:f0:c1:d5:f6:bf:b7:14:1f:75:c0:67:ba:
62:fa:b9:53:0c:88:ad:4b:d9:e6:ff:a1:e2:ec:0c:
91:ca:f4:67:81:fc:92:75:54:b7:91:d5:e2:56:2e:
2c:c2:c6:4f:7a:b4:0c:fc:a6:7c:fa:1b:30:cf:3f:
a4:42:4c:4f:aa:4f:53:45:f7:40:c2:4b:a4:c2:a1:
b1:34:d2:34:9a:af:e6:f7:cc:bf:e5:71:05:97:54:
47:1c:6e:b4:4d:78:83:1b:ba:7e:7a:a2:64:1f:78:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:1A:CF:1B:98:30:F6:C0:07:A1:FB:AD:77:B0:5E:4B:50:ED:A3
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:3d:dd:cf:25:e4:58:a4:05:52:15:1d:a3:39:c2:77:fc:
62:28:6a:f4:66:2f:bb:bf:f5:fa:1d:a3:2b:4f:05:d5:87:53:
68:39:54:9b:78:71:a9:bf:14:d2:c6:5e:db:4d:13:ee:f8:eb:
7a:f2:ba:d5:18:ce:5c:18:eb:a2:39:33:83:a2:65:8b:a0:f6:
d7:c1:6e:02:11:02:03:dd:08:46:05:37:d6:a9:55:bc:a7:37:
58:53:22:55:05:7b:f5:42:1f:bb:9f:70:93:ee:46:ea:06:4a:
a1:e4:a8:18:7b:e1:70:cc:48:8f:d7:7d:64:65:aa:b1:5f:b9:
c4:1e:da:d0:93:f0:c1:92:8f:46:db:c3:41:9f:89:12:78:13:
1d:45:f4:f1:68:8f:0b:c2:a8:a9:4d:5f:d5:e0:6c:6e:ea:03:
c4:48:58:be:f2:fa:42:38:be:99:0b:d4:f2:1b:25:ad:76:0e:
4e:aa:3e:5b:de:ea:f0:b1:5f:9e:ed:cc:7a:69:9f:a6:75:ba:
48:59:f5:04:d8:1a:c2:e4:2b:7c:95:6e:a1:e0:85:58:92:ae:
b0:fe:75:ca:83:8f:a7:15:01:fb:1b:30:c2:c9:18:9c:a5:37:
9b:4f:f7:77:2a:e7:8c:52:56:b0:27:61:80:70:9f:a8:bf:e0:
41:e3:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 10:48:15 2025 by rpki-client