Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: R9i8GysH/tur3i64UMsxSqR4dIgPv3X01ksSDt2MNGw=
Subject key identifier: 74:22:C5:D7:1F:CF:9D:03:31:F7:43:E9:CD:CD:D0:CA:65:38:B5:8C
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019A4E4F4EE56D6262B376FC85E712255F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 15
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: 58vpK8vRiMDsKrPDcpGa-DJvE88.roa (hash: sInLzOJCLuIv4eBWcJWicm0cgoZkrirnczsJmugMVLs=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: dke6+OONUIWfrIg/Ityp5kDzS6slirF8Yt6acx7HNJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4e:e5:6d:62:62:b3:76:fc:85:e7:12:25:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=7422c5d71fcf9d0331f743e9cdcdd0ca6538b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:25:16:0f:d8:48:e2:d9:f7:52:f0:94:50:
da:70:11:1a:ff:b6:d3:af:04:da:c8:ab:11:68:1d:
85:d1:de:95:cf:e6:82:15:0d:f5:8d:16:ec:99:a2:
85:f7:44:e6:f2:42:62:b3:aa:88:67:a4:19:b0:30:
a0:37:49:45:3f:37:02:be:6a:0e:6c:25:c9:f2:08:
26:f0:03:7e:a9:62:94:32:18:d1:a0:04:60:59:68:
92:d3:d6:fc:6b:d6:13:63:2b:6b:67:a9:2f:14:80:
9e:e9:10:da:43:37:a8:b3:27:8f:27:e7:cb:ac:70:
3f:7d:98:6f:97:20:1a:7a:d8:57:4c:a8:a4:33:cf:
ed:7a:81:8a:e7:4c:f5:05:e8:0b:46:b0:b0:c7:03:
8d:c8:9c:f3:20:d0:0c:de:e7:f7:94:09:a2:8e:9b:
9f:76:fc:37:6f:5c:74:eb:bf:58:b1:28:a4:9b:7f:
0f:d2:74:ac:7e:71:a5:b2:f8:72:4e:e7:93:d1:7b:
27:52:cc:3f:3b:b9:50:b8:95:ff:15:63:94:1e:1d:
1e:11:75:89:59:64:24:1b:30:3c:1e:73:6b:07:77:
9e:bf:c6:03:ce:e6:f8:85:e5:fb:94:d8:3d:75:5c:
e5:4d:e6:3b:ed:ae:18:ca:95:33:36:86:c1:ed:55:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:C5:D7:1F:CF:9D:03:31:F7:43:E9:CD:CD:D0:CA:65:38:B5:8C
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c2:34:0f:15:79:2c:47:48:dd:6c:d9:0a:88:42:5d:27:77:
e2:0c:ab:4a:eb:46:b8:84:36:ba:00:51:7f:f9:23:2b:cc:25:
d8:6d:33:7b:81:bc:e1:14:44:c6:0c:18:34:ac:78:76:32:e8:
48:b1:5a:06:bd:28:1b:f9:e3:83:3c:82:2f:28:29:c4:fb:0f:
cb:f1:16:9c:1f:86:79:ba:0f:19:39:53:3d:ce:ab:51:ed:55:
ed:dd:86:2d:a5:b7:26:5b:b4:5d:03:05:9a:8e:f7:20:e7:00:
9d:9c:57:46:83:10:38:95:1d:27:14:73:b0:b5:c5:a9:81:ae:
9d:86:97:16:4b:75:fb:88:d5:ba:31:7f:28:a1:ca:d6:3d:ef:
7a:72:f2:16:36:78:29:c7:5b:18:6f:a5:ec:53:c6:bd:f0:c1:
c9:e9:5a:c6:f5:d9:6c:6a:62:92:04:e5:98:9b:f2:90:bc:af:
06:48:25:ae:9c:c3:10:8a:c6:12:04:79:c0:55:b1:2e:bf:b0:
aa:01:c8:90:76:d7:32:5c:65:da:43:96:7d:81:ea:2f:ac:81:
2a:c2:c8:d3:0d:56:ee:27:d6:87:5e:6d:23:27:80:b8:90:6f:
82:3b:5c:6b:c8:1e:68:91:6a:5d:28:1f:d9:f7:7f:e7:eb:72:
f6:71:ff:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:00:15 2025 by rpki-client