Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
File: OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json)
Hash identifier: 3bZ6F6yH09JadzTrph77HT4NWlyHKTROna5LdXi/x98=
Subject key identifier: 89:04:D9:12:99:94:3B:F9:3E:9B:48:86:25:EA:FA:F3:D9:E7:43:31
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial: 01977CB17A1E9340F281D291E1A823372EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
Manifest number: 0322
Signing time: Tue 17 Jun 2025 07:01:35 +0000
Manifest this update: Tue 17 Jun 2025 07:01:35 +0000
Manifest next update: Wed 18 Jun 2025 07:01:35 +0000
Files and hashes: 1: 40TampSG5GQkpvyLk5qLlZwkf9M.roa (hash: cij1fX5KV3iHK8G+eUN/m++nExVx1hf+zVnHeptClME=)
2: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: 1jzC9DXm6K2NN8c9RLaxS14IyHCKgpTEvhhbgmKtYTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:7a:1e:93:40:f2:81:d2:91:e1:a8:23:37:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
Validity
Not Before: Jun 17 07:01:35 2025 GMT
Not After : Jun 18 07:01:35 2025 GMT
Subject: CN=8904d91299943bf93e9b488625eafaf3d9e74331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:cf:23:71:f5:45:70:e9:41:f4:80:9f:30:
20:11:d9:7e:9f:1d:c1:5c:86:83:ca:15:8c:35:02:
8b:2f:2a:3c:6d:eb:11:7c:8a:af:2e:9d:f2:7a:6d:
2d:6e:c9:ac:16:47:1d:ba:5d:0c:80:6d:80:12:46:
4d:38:e5:db:58:0e:47:a6:55:d8:97:d7:04:b7:fd:
f6:7e:21:20:e8:ae:40:d3:0a:b9:a2:44:d2:f2:2e:
d9:c3:72:e9:19:02:b0:d1:32:bb:2a:c3:82:0c:ac:
60:da:e9:e3:fe:4c:6c:f0:e0:5c:da:af:c8:87:89:
e4:af:3d:94:7e:4a:0c:72:84:b3:00:61:b7:68:61:
86:04:fe:50:4b:29:d4:a4:a0:2d:f7:ce:7c:53:f6:
13:dd:94:fe:36:63:07:eb:a6:22:0c:97:b9:7d:8a:
9b:13:b0:c6:d8:9e:d0:c6:d1:ea:2f:e6:e5:58:4c:
84:42:19:29:be:f1:84:ad:23:cf:0a:bc:c1:d4:25:
92:d2:2a:bf:f3:c6:88:49:76:56:25:21:30:62:4b:
fa:38:15:ec:e8:4d:d9:b1:db:1a:38:22:da:2d:55:
6c:3d:5e:c7:17:21:41:99:c8:7a:62:68:2e:17:f2:
f7:1d:f9:51:93:1e:23:3d:08:cc:04:91:fe:aa:66:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:D9:12:99:94:3B:F9:3E:9B:48:86:25:EA:FA:F3:D9:E7:43:31
X509v3 Authority Key Identifier:
keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:32:22:05:78:04:19:25:aa:31:af:ee:a9:91:d9:f0:89:3d:
87:92:57:54:4a:7f:93:d0:18:0e:a7:e6:ea:ad:64:2c:41:2d:
fa:80:12:22:ef:e0:38:18:01:70:a3:9b:f1:5d:8b:22:fc:f1:
f4:87:b8:b7:bd:dd:58:a1:9e:da:b9:df:7d:a4:07:0c:04:2f:
83:7e:74:ac:ee:6d:d8:90:b6:ff:ce:ca:ec:80:29:16:15:c6:
24:0e:d3:40:26:7c:ad:1a:ec:17:b7:18:8f:31:33:51:f4:de:
a5:68:1a:25:79:2c:42:53:53:ce:ea:52:12:ea:07:3c:88:9d:
b2:f3:72:5e:cf:54:a4:ca:40:a9:eb:a8:eb:7f:44:89:b1:be:
f7:8e:04:75:62:4f:07:d6:61:8a:c6:f3:44:7d:1b:4e:11:3e:
d5:4f:fc:cf:80:30:f2:fc:f9:1d:9e:a7:22:6c:89:e9:99:db:
f7:58:f0:7d:c9:e8:5e:84:31:b2:2b:18:80:1a:34:ed:ce:64:
de:30:4d:5a:f9:df:5e:3a:21:08:c3:13:f3:06:ce:14:59:fb:
81:66:e2:0d:1c:81:82:11:70:dd:e4:58:90:a6:c2:49:11:37:
83:67:e4:28:b5:05:e5:8f:56:ed:c7:b3:20:2d:d3:fe:89:8f:
11:70:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:22:26 2025 by rpki-client