Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File: PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier: +WHKwcuOkSw8iSHjzofNKTKC2p4jBB+HP7nESnQN/qo=
Subject key identifier: 10:70:7B:66:AD:F5:EA:57:1A:F1:BD:15:1D:7D:DB:74:49:6A:FA:E1
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial: 01988C211481FAAA5B6AF194D8E4340AEC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 00:00:34 +0000
Manifest this update: Sat 09 Aug 2025 00:00:34 +0000
Manifest next update: Sun 10 Aug 2025 00:00:34 +0000
Files and hashes: 1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: ZuCdkg1fPrzO4FJ1RDiWvzVQhGDOnFGk63Arq8umE6I=)
5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:14:81:fa:aa:5b:6a:f1:94:d8:e4:34:0a:ec:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Validity
Not Before: Aug 9 00:00:34 2025 GMT
Not After : Aug 10 00:00:34 2025 GMT
Subject: CN=10707b66adf5ea571af1bd151d7ddb74496afae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:03:28:d5:91:b8:d1:7e:72:b1:9d:7f:0e:
09:3c:82:f2:9e:91:35:a3:46:5a:de:1c:dc:53:7e:
e3:83:0b:71:ac:64:b5:f1:7c:62:fd:c3:b6:2c:21:
f9:77:21:6e:b0:48:02:5c:c4:4f:2c:75:67:8f:d4:
44:a0:63:b2:5d:4f:9c:22:41:e4:e3:d6:88:0a:6e:
d5:29:8d:00:37:f7:4c:f5:fc:fe:9e:b0:67:fe:ef:
53:dc:d6:71:04:ec:23:f1:77:1e:ae:14:be:ad:fd:
83:33:e0:20:ce:ef:35:88:66:74:d8:40:d2:23:cc:
44:44:da:d7:f9:19:7b:67:4b:ec:18:ea:6f:ea:aa:
ff:48:3c:fc:a7:52:81:3d:08:cc:1e:24:2f:d1:91:
49:49:ee:2d:26:c9:c5:69:3f:6b:eb:66:f7:d1:00:
20:0d:1d:50:19:de:f7:63:b6:d4:fc:bd:64:83:ae:
93:1e:e9:ab:4a:15:25:ba:1c:72:09:37:0a:ac:01:
bb:a7:77:92:04:a7:a1:e9:81:7b:5e:83:99:fc:62:
d5:45:d4:c5:53:83:bc:e9:c0:40:ef:d4:16:f0:c4:
47:44:0d:a3:1c:a2:d4:a7:00:59:f8:55:12:b1:15:
8b:df:e6:70:14:80:7d:ec:4a:9d:06:6d:15:e9:9f:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:7B:66:AD:F5:EA:57:1A:F1:BD:15:1D:7D:DB:74:49:6A:FA:E1
X509v3 Authority Key Identifier:
keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ea:6b:c5:26:ee:81:7c:12:4f:81:aa:c0:17:20:2f:38:53:
8c:19:02:f2:eb:ab:72:67:3f:41:41:32:0e:d6:86:4a:f3:69:
ff:67:61:a3:a9:57:52:eb:80:46:3c:52:62:14:3f:f0:13:8b:
3c:76:75:2a:e8:28:79:54:b2:ff:e1:ef:f7:51:32:6f:93:cb:
75:ef:13:b1:d8:9f:ed:d1:a3:4a:d3:3e:28:c9:3a:db:b2:43:
db:e9:76:eb:2d:c7:bf:43:c5:5d:25:1b:1a:8b:97:4d:16:6f:
cb:2f:c3:33:07:63:42:6e:48:f5:aa:12:2c:d0:a5:06:3f:5e:
27:71:d9:09:47:e9:19:d4:09:51:75:8f:a5:c7:93:79:88:00:
39:99:57:69:be:39:cd:da:0d:41:28:f7:a8:7e:e2:13:41:9d:
43:da:ab:24:10:b2:5c:e6:b3:3d:65:7a:e9:20:b1:00:80:35:
7a:fe:ee:0b:c6:f9:03:f0:6e:9f:a5:e4:ed:00:6d:0d:e8:79:
da:71:f9:e8:98:08:65:fa:23:ea:4f:db:b3:14:16:e2:da:ea:
08:06:3b:99:5a:76:44:5d:e6:9d:1c:40:44:d9:fc:2b:b7:32:
6a:99:58:9f:e9:c3:42:5c:f5:32:28:32:db:4c:58:3d:6c:c3:
bb:56:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:38 2025 by rpki-client