Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
File: OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json)
Hash identifier: c+Z1V7hjYMtTngtDBttxKy3B/2Es6UMIcR89lv483rU=
Subject key identifier: 9A:4D:09:6B:E7:89:EF:61:97:4E:A1:1D:79:FB:5E:34:26:F8:62:D9
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial: 0196BF6EF5A57BD4991C297A1EDC05255F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
Manifest number: 02C0
Signing time: Sun 11 May 2025 13:00:41 +0000
Manifest this update: Sun 11 May 2025 13:00:41 +0000
Manifest next update: Mon 12 May 2025 13:00:41 +0000
Files and hashes: 1: 40TampSG5GQkpvyLk5qLlZwkf9M.roa (hash: cij1fX5KV3iHK8G+eUN/m++nExVx1hf+zVnHeptClME=)
2: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: D7zdHxlQfZljjmRkThD933kAfL68m2duCnczKszrI9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:f5:a5:7b:d4:99:1c:29:7a:1e:dc:05:25:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
Validity
Not Before: May 11 13:00:41 2025 GMT
Not After : May 12 13:00:41 2025 GMT
Subject: CN=9a4d096be789ef61974ea11d79fb5e3426f862d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:d3:ea:fa:69:df:77:b9:3c:9d:62:81:09:
95:56:ac:4f:c8:9b:e1:26:d5:d2:0b:2d:6d:8e:40:
78:7d:1f:6b:72:52:80:af:34:02:21:3f:38:91:5c:
93:6e:d0:6a:33:d8:a3:08:f4:fa:06:a1:53:5b:03:
57:15:46:2e:7a:5d:64:d9:c5:25:e3:bc:13:9f:b3:
86:1f:b4:d9:a9:de:3c:f2:0f:56:61:a8:69:43:6c:
22:47:47:d4:39:bf:0b:4a:0a:f8:d7:34:0e:55:fe:
84:2e:41:03:ae:c5:b8:2b:0d:c3:1b:d5:2d:e8:aa:
92:19:63:e8:78:69:74:bf:5d:23:3d:67:86:4e:26:
6b:0a:36:ea:41:69:fa:76:d8:9a:3a:a0:89:6e:c0:
fa:ed:23:41:83:d4:3e:b4:57:00:a5:dd:fb:ec:f9:
a3:bb:f7:09:e3:bf:c4:00:7a:6b:45:e2:58:7c:82:
bb:dd:41:c2:96:6d:31:82:21:46:6a:56:2a:94:7e:
a5:a3:ef:d8:59:27:87:ff:9d:ef:af:df:d4:81:92:
b3:83:7b:c2:5c:ee:f3:9d:72:c3:3d:81:00:09:d8:
1d:47:24:81:49:39:07:59:88:98:28:6a:25:ec:ce:
47:f7:f1:78:5e:04:bc:67:e2:e3:77:31:e6:47:96:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4D:09:6B:E7:89:EF:61:97:4E:A1:1D:79:FB:5E:34:26:F8:62:D9
X509v3 Authority Key Identifier:
keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f9:8d:25:83:87:e7:28:06:66:99:10:3c:0b:ef:c6:b2:92:
60:1b:40:42:4a:25:c6:cd:a5:6d:e5:4e:94:ef:ef:92:92:2c:
57:fe:84:2e:b8:a5:bf:6e:c4:e6:15:59:04:f2:a9:b1:3a:78:
ec:e5:7b:6c:05:60:c1:03:ab:62:a1:cf:01:ea:de:45:8e:95:
c3:3d:65:2e:fd:81:ec:af:c3:b6:3f:3c:94:23:bc:fa:5d:d8:
be:7c:19:c6:0c:5c:58:78:d6:41:3a:cd:6d:39:8e:fc:36:ef:
4c:e3:0c:be:c2:f4:38:2f:6f:87:17:8c:11:3c:4a:42:f7:21:
e0:e3:8c:68:b4:89:d3:cb:4d:12:d8:28:85:12:98:28:ce:52:
9a:69:c5:db:86:cf:75:4a:1e:c4:9a:04:27:8c:9e:0f:b2:da:
39:5d:f4:67:6c:55:1e:c9:61:3d:6d:14:0b:7f:a0:c3:f5:b6:
a5:95:ce:0a:bc:8e:85:62:01:96:38:d7:6a:9b:ec:4c:99:55:
b4:f1:eb:75:53:bb:17:8c:ea:32:f0:7a:81:2a:75:70:05:49:
e4:b4:d6:af:24:92:b9:98:83:bb:8f:01:02:e3:b5:a9:d0:74:
56:d5:34:44:b5:b7:13:84:b8:38:38:f3:46:bc:63:76:cc:40:
ea:20:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:04:50 2025 by rpki-client