Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
File: OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json)
Hash identifier: JM8xWqXXU6+7OODReA43sJhvVe0eS1VSsNFa0fhTFqI=
Subject key identifier: CD:EA:D7:2F:7A:F4:12:E3:C9:FE:F0:30:AE:0F:93:06:B8:D7:A5:A4
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial: 0197488C8DEF7B3F5910F687FEA476A99B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
Manifest number: 0307
Signing time: Sat 07 Jun 2025 04:01:00 +0000
Manifest this update: Sat 07 Jun 2025 04:01:00 +0000
Manifest next update: Sun 08 Jun 2025 04:01:00 +0000
Files and hashes: 1: 40TampSG5GQkpvyLk5qLlZwkf9M.roa (hash: cij1fX5KV3iHK8G+eUN/m++nExVx1hf+zVnHeptClME=)
2: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: L5/RtoaoCFYP8D9vOuV9MNmeGlCt2PVKb6itesoSIn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:8d:ef:7b:3f:59:10:f6:87:fe:a4:76:a9:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
Validity
Not Before: Jun 7 04:01:00 2025 GMT
Not After : Jun 8 04:01:00 2025 GMT
Subject: CN=cdead72f7af412e3c9fef030ae0f9306b8d7a5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:7c:dc:d3:4b:e9:5e:a2:e5:e4:68:34:c0:
fa:71:4c:73:be:90:b5:92:b7:fc:86:49:c5:53:33:
c8:f4:fc:18:7b:ee:7b:78:72:a1:0b:47:8b:bd:c7:
d1:e3:34:51:5d:23:50:56:9a:92:d5:91:ca:e2:8a:
1f:83:1b:a4:00:14:7d:bc:a8:18:81:a1:a8:1e:c5:
32:34:4c:1c:b0:07:3e:d6:88:31:5a:4c:ab:eb:60:
6e:51:84:89:3a:56:a4:61:6c:03:30:e1:0e:2b:0e:
31:64:11:75:83:ea:26:7c:52:22:ee:31:46:e2:4b:
09:11:7f:94:44:93:12:ac:50:d3:22:d4:cb:3f:a6:
53:d2:37:f9:08:eb:bd:28:89:d3:e3:ae:06:66:f4:
49:a2:8d:6a:31:e0:24:30:c4:7d:f9:b5:f8:d5:be:
5d:42:00:a7:ec:dd:0a:d5:be:48:2a:d1:62:62:9d:
13:b8:15:9a:3e:8d:ab:bc:b5:12:bf:54:b6:6c:ea:
bb:a8:b2:a8:19:5b:e6:d1:e8:c3:a7:28:4c:1f:4b:
bd:1a:b0:f0:f2:10:1c:c3:a9:75:1c:fb:47:00:22:
37:07:f9:73:ad:19:c9:a1:bd:81:e2:21:db:c7:72:
ca:04:e7:a8:fa:3f:97:0a:ff:34:5d:c1:8e:0e:4f:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:D7:2F:7A:F4:12:E3:C9:FE:F0:30:AE:0F:93:06:B8:D7:A5:A4
X509v3 Authority Key Identifier:
keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:12:96:3f:59:a5:e3:40:35:90:d7:ed:0b:fa:95:84:b2:72:
f2:b4:b0:77:64:e0:9c:57:a1:4a:29:12:0f:f2:c4:98:e5:c9:
90:e4:f7:c1:d5:72:40:56:8a:50:42:7d:4d:c1:81:68:9a:4d:
d1:41:ef:4c:8d:d6:a7:32:28:00:87:36:d3:60:ff:f5:83:5e:
2b:80:52:9f:11:a9:cb:63:69:36:be:bf:5a:36:45:48:b9:3f:
94:20:ee:64:4b:1c:d6:95:70:48:87:48:7a:1b:65:75:fc:a2:
57:18:4e:32:a9:3d:7c:89:7c:af:37:db:76:a0:1c:27:bd:2e:
41:d3:54:8a:d2:9b:b3:47:d5:a0:87:db:f4:af:e9:96:48:29:
f3:6f:c4:11:4c:bf:32:c5:16:a6:fd:70:71:c9:58:14:4c:19:
97:e7:dc:05:18:3f:37:63:88:81:41:18:2f:bc:70:6f:e0:5f:
22:d6:bd:8f:c8:6d:c1:75:c2:ba:10:ff:93:c1:87:d2:c1:5e:
ce:9c:cd:af:6e:9b:cf:39:6e:c1:1a:90:42:2e:9b:7f:0e:bf:
8f:35:16:b7:9c:bf:8b:ff:26:a9:cb:ab:03:4b:4b:3f:4e:78:
c7:45:10:e1:45:18:9f:d5:96:d8:d9:9f:eb:40:72:04:20:c8:
db:0f:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:47 2025 by rpki-client