Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: S6NsUzQ5/p/SG5rW2XkKKQtXP5eLXxl8w5LZyXpnjtU=
Subject key identifier: FF:B8:79:53:35:AD:28:B0:CF:66:DF:08:92:8E:55:DE:B1:DD:3E:A2
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 019747425F70FB0ECD17558BE6C46EF1700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 03A9
Signing time: Fri 06 Jun 2025 22:00:21 +0000
Manifest this update: Fri 06 Jun 2025 22:00:21 +0000
Manifest next update: Sat 07 Jun 2025 22:00:21 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: LkhHCmQB8gd+8/YqS3jdMYCbq93tnDNLFUlq4tERIgc=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:5f:70:fb:0e:cd:17:55:8b:e6:c4:6e:f1:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Jun 6 22:00:21 2025 GMT
Not After : Jun 7 22:00:21 2025 GMT
Subject: CN=ffb8795335ad28b0cf66df08928e55deb1dd3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:38:eb:81:10:8d:bd:4d:05:46:f3:e3:42:
21:c5:be:c3:9f:31:b0:e0:5c:bf:a4:d2:ed:17:cb:
c1:32:51:94:61:19:cc:3b:34:4c:f5:2c:ca:9a:38:
74:e5:dd:e6:6e:0c:5e:f3:d9:b7:81:1d:6f:66:bd:
a1:1b:06:c1:34:13:c7:87:1c:e1:e2:3c:f5:9b:38:
b1:39:98:02:37:2a:1d:c0:c7:25:1e:9f:4c:b5:8b:
d1:61:0e:62:bc:95:59:31:05:dc:5e:b1:d8:6b:6b:
d5:aa:c9:8b:13:60:84:f0:dc:13:a5:06:d7:ad:7e:
73:75:e2:96:96:40:30:5c:72:39:0e:17:31:ea:b5:
21:07:12:28:5a:13:fd:e7:e0:ee:02:ec:1f:60:7c:
8e:f4:f7:55:ed:59:c1:ac:85:c1:c4:19:49:34:5e:
e1:41:0f:f8:11:1c:7e:5c:e4:af:2a:9d:bb:1d:56:
f3:34:28:7e:be:da:a0:e5:dc:67:3e:8a:d3:8f:44:
4b:14:81:9b:88:04:18:e1:69:e4:1d:8d:5e:e3:e1:
39:2d:8b:71:89:a4:b1:39:b3:88:07:77:f6:c9:64:
47:06:f1:c7:ea:26:22:b7:72:17:7a:cd:89:ce:b8:
b5:36:33:1d:8c:47:c2:91:e5:d0:e1:de:bd:4d:c3:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:79:53:35:AD:28:B0:CF:66:DF:08:92:8E:55:DE:B1:DD:3E:A2
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a8:0c:4d:96:3d:1b:d4:f8:20:2f:95:50:ab:b6:c6:72:18:
db:e1:58:4c:1d:e3:35:28:87:35:c5:a0:a1:19:c1:4d:32:66:
20:2a:81:26:9b:0b:b2:a1:9f:1f:10:db:c5:8e:d9:03:25:25:
74:cb:4b:aa:be:8e:74:bf:e6:1b:e9:f4:24:70:22:1c:93:11:
b7:95:44:c8:67:a4:76:df:85:53:f0:18:56:ee:db:1d:10:d0:
ec:26:e6:4c:49:26:9e:1f:3e:32:f8:99:a6:d1:ac:36:e6:00:
52:b3:e2:e7:68:e9:6f:ae:a2:84:17:a1:2a:96:66:6e:9a:a2:
38:74:bb:b7:f5:05:cb:10:6a:15:82:d2:b6:bb:9d:2e:e5:bd:
f2:5f:e7:3d:8e:65:b3:50:87:fb:35:b5:05:81:00:12:b6:96:
5e:a8:b9:9b:91:d1:77:81:76:18:8d:76:15:85:65:d7:52:e2:
3e:c5:4c:40:9d:ba:a1:93:02:a4:da:cb:f9:ef:51:2f:3b:16:
49:35:35:00:44:d0:fb:be:cd:a4:b9:b4:c8:67:ce:e2:15:90:
0c:13:ca:4f:86:f3:8b:02:fa:cf:9a:2b:b1:d6:94:d1:c8:da:
62:b4:e1:51:8e:ae:18:3c:2d:dc:b0:66:6f:4d:d6:38:3a:35:
1f:f2:52:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQl9w+w7NF1WL5sRu8XANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl
MGU4YTUwHhcNMjUwNjA2MjIwMDIxWhcNMjUwNjA3MjIwMDIxWjAzMTEwLwYDVQQD
EyhmZmI4Nzk1MzM1YWQyOGIwY2Y2NmRmMDg5MjhlNTVkZWIxZGQzZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCQ464EQjb1NBUbz40Ihxb7DnzGw
4Fy/pNLtF8vBMlGUYRnMOzRM9SzKmjh05d3mbgxe89m3gR1vZr2hGwbBNBPHhxzh
4jz1mzixOZgCNyodwMclHp9MtYvRYQ5ivJVZMQXcXrHYa2vVqsmLE2CE8NwTpQbX
rX5zdeKWlkAwXHI5Dhcx6rUhBxIoWhP95+DuAuwfYHyO9PdV7VnBrIXBxBlJNF7h
QQ/4ERx+XOSvKp27HVbzNCh+vtqg5dxnPorTj0RLFIGbiAQY4WnkHY1e4+E5LYtx
iaSxObOIB3f2yWRHBvHH6iYit3IXes2Jzri1NjMdjEfCkeXQ4d69TcNeYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+4eVM1rSiwz2bfCJKOVd6x3T6iMB8GA1UdIwQY
MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt
YmYzNTFjMGYwZWJjLzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj
LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6gMTZY9
G9T4IC+VUKu2xnIY2+FYTB3jNSiHNcWgoRnBTTJmICqBJpsLsqGfHxDbxY7ZAyUl
dMtLqr6OdL/mG+n0JHAiHJMRt5VEyGekdt+FU/AYVu7bHRDQ7CbmTEkmnh8+MviZ
ptGsNuYAUrPi52jpb66ihBehKpZmbpqiOHS7t/UFyxBqFYLStrudLuW98l/nPY5l
s1CH+zW1BYEAEraWXqi5m5HRd4F2GI12FYVl11LiPsVMQJ26oZMCpNrL+e9RLzsW
STU1AETQ+77NpLm0yGfO4hWQDBPKT4bziwL6z5orsdaU0cjaYrThUY6uGDwt3LBm
b03WODo1H/JSCg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:05:44 2025 by rpki-client