Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: 2qQtKs1OuIWtpSinuRvkFTMpm7penhtMsc0rdKHWbbI=
Subject key identifier: D1:B5:45:A0:E7:BC:3E:38:87:26:49:7A:A5:2F:74:66:D2:1D:51:16
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 01993802335FB9DE5F52839BC08D39B15210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 133E
Signing time: Thu 11 Sep 2025 09:01:32 +0000
Manifest this update: Thu 11 Sep 2025 09:01:32 +0000
Manifest next update: Fri 12 Sep 2025 09:01:32 +0000
Files and hashes: 1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: NuY/5EdN8+vy6YZ7ofvg+A4xsztidCtpe6UNgtyt27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:33:5f:b9:de:5f:52:83:9b:c0:8d:39:b1:52:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Sep 11 09:01:32 2025 GMT
Not After : Sep 12 09:01:32 2025 GMT
Subject: CN=d1b545a0e7bc3e388726497aa52f7466d21d5116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:02:7a:2f:38:86:f0:a9:e1:1e:81:32:f1:
e2:21:39:9e:26:7d:3d:62:c0:da:cb:ab:9b:35:33:
6e:d2:44:5c:b1:66:11:64:ae:bd:b8:c2:ba:80:91:
f8:ee:00:b2:75:43:78:a6:9d:4d:c2:3a:b0:76:e4:
a3:fc:88:66:17:31:50:0e:89:69:a7:19:e2:47:d8:
ca:1e:4a:08:5e:d9:15:33:49:54:b5:15:7d:0f:b7:
4c:14:b4:84:8e:bf:2c:52:b2:69:e6:78:f5:14:91:
05:37:e4:9d:35:f3:2b:28:80:a2:88:99:12:b2:17:
d8:b6:14:e8:de:e8:fb:be:7f:40:c0:f4:19:e7:f8:
1f:7a:0f:99:ec:b3:6f:12:38:2c:7e:8e:c1:cf:e3:
d8:a1:d0:fb:f6:cb:0b:d2:3a:d4:93:59:ff:af:a8:
dd:44:53:49:05:e2:a7:bf:0b:82:d7:d7:cb:97:ae:
43:f2:83:bb:8b:a0:ca:e6:f6:f1:22:2f:dd:52:ee:
60:2c:c3:59:6b:94:76:5c:fd:d8:a7:cf:ee:4f:72:
c7:8a:8e:55:ce:71:05:e5:bc:b6:ce:9f:65:24:e2:
36:e3:d8:54:04:0f:41:fb:0e:99:eb:d4:2d:22:df:
67:ec:18:e6:91:d0:05:a0:6f:aa:d5:c8:72:86:4b:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:45:A0:E7:BC:3E:38:87:26:49:7A:A5:2F:74:66:D2:1D:51:16
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5a:d9:44:38:38:71:a0:2c:1a:52:32:2b:32:1a:d4:45:49:
83:6d:5a:24:7d:b3:b7:d2:e4:d4:77:11:87:9f:5c:b6:4c:16:
ed:29:f2:29:3b:e1:8d:5c:d9:bd:60:f1:0d:f6:45:f4:6d:0d:
1a:95:a9:fe:73:8e:0f:6b:4d:7d:e8:c1:aa:90:bb:16:da:76:
2e:1c:95:a7:e5:a4:4a:7f:fe:ba:73:a1:f9:38:6d:06:8b:f0:
d1:39:1d:73:98:6c:93:4d:ec:58:9e:cf:32:af:c6:50:29:84:
bf:48:44:7e:3e:96:61:eb:1a:ee:01:99:68:7f:7a:57:28:31:
ee:fc:bd:7e:82:98:8f:a6:bf:f2:f3:ff:46:10:06:55:3b:40:
01:79:43:3f:9e:c4:6a:02:a2:c9:28:0f:e3:a5:62:52:9a:76:
1f:ec:33:20:e2:09:a0:71:cc:4f:03:17:2f:cc:fd:6f:f9:6a:
32:8f:f0:85:49:62:95:f2:38:13:f0:d7:99:86:84:07:c2:92:
62:71:cd:df:7e:1d:4e:98:55:b1:46:26:fb:7e:16:b9:40:d9:
f1:9d:84:f4:cb:8e:37:3e:c2:c6:55:c3:b7:c6:09:72:8f:9b:
66:4b:74:d1:59:f8:1f:89:c8:55:de:cc:3f:b3:7d:cc:cd:de:
06:0f:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:53:47 2025 by rpki-client