Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
File: OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json)
Hash identifier: gtPnX4HBHEBryoau/4rBrFED0ErnigOvvhy3h+XMLoc=
Subject key identifier: 80:AC:D2:8A:DD:DB:E0:59:CB:E8:AF:E0:DA:E9:98:38:A8:CA:36:56
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial: 0198D66150B99B6BFA938B2237E836CDA086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
Manifest number: 03D5
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: 40TampSG5GQkpvyLk5qLlZwkf9M.roa (hash: cij1fX5KV3iHK8G+eUN/m++nExVx1hf+zVnHeptClME=)
2: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: 4nutQyjO3JrcTFPQuXDshCi7EurjJdvBY8Il2lhJocI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:50:b9:9b:6b:fa:93:8b:22:37:e8:36:cd:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=80acd28adddbe059cbe8afe0dae99838a8ca3656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:6c:86:39:b0:04:c2:66:09:f0:c2:03:7c:
3a:e7:d4:1e:1c:8a:ab:f1:91:23:8d:c3:ec:ac:d1:
6e:9a:f5:37:e6:e0:b8:5e:1d:6f:4b:93:2f:84:be:
61:b0:ba:e1:a1:6a:fe:0a:5e:68:89:d8:06:f2:80:
ec:9e:6d:6c:07:01:aa:e7:b9:3c:a4:13:e3:4e:6f:
60:fb:fc:e7:33:69:40:09:55:d0:1e:59:c1:eb:26:
89:b7:08:11:08:84:46:07:43:9a:c5:be:1f:ff:41:
45:7c:de:49:e8:f4:47:a2:86:93:9c:0f:fe:b9:eb:
2a:f7:9b:7c:28:69:31:7e:1b:3c:b3:6c:ef:33:97:
af:3b:70:4a:17:c5:43:97:cf:5d:f5:88:46:26:57:
a4:0d:8e:f7:b1:a6:f6:08:ca:05:50:e1:05:20:3b:
f8:1a:13:bf:d6:46:89:1f:ab:ee:a5:36:17:ef:c9:
14:aa:1f:99:e6:0d:e2:06:9e:0a:78:d8:39:c8:0e:
94:36:b4:d3:57:23:b1:8d:db:1a:d9:62:aa:e1:b3:
b8:c9:23:21:c9:63:1d:b5:10:85:d2:7d:5d:70:cb:
89:c4:79:4f:46:f9:85:63:84:b9:90:46:53:aa:96:
8e:12:ea:6d:d1:b4:2a:e0:b6:38:d4:6a:b8:30:1b:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:D2:8A:DD:DB:E0:59:CB:E8:AF:E0:DA:E9:98:38:A8:CA:36:56
X509v3 Authority Key Identifier:
keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:36:d9:71:c4:fe:a9:82:40:e6:00:57:67:1a:3a:b8:bd:0a:
0d:fd:54:4c:ef:99:00:0d:64:2b:26:48:79:78:60:b6:f1:d5:
fa:55:9e:d9:d5:87:23:f0:7e:3c:d5:f3:e2:29:b0:a9:e7:79:
af:bd:12:3b:b3:5e:fa:0c:06:ff:33:03:2a:c5:df:bd:56:9d:
56:8d:6b:f2:d1:31:1d:13:eb:49:cd:f3:b2:31:7b:74:b5:97:
80:fb:05:fe:23:d4:b4:22:b5:dc:8e:7a:9b:4d:82:7d:47:d0:
1a:cd:52:ae:c3:48:c3:69:5e:d3:f7:81:20:79:33:fc:50:bd:
6a:b6:ad:22:56:2e:c8:36:63:13:e0:47:04:ca:be:a4:38:f7:
3b:77:6a:d1:64:70:06:5a:fc:5a:df:06:ee:67:70:47:55:d0:
35:8e:61:05:67:8f:6a:af:6e:87:ae:3a:05:ed:eb:2c:08:04:
e3:ee:12:6a:5e:e4:ee:6d:fa:49:fe:de:95:ec:8d:e6:f4:43:
7f:41:59:f0:6d:95:df:45:1b:bd:0c:8b:06:ac:c9:1c:a2:d6:
bf:2f:f3:6c:50:76:47:98:12:f5:3a:5b:aa:6f:03:e3:59:b3:
d8:af:1c:df:a6:56:7c:4b:c6:75:c5:2c:38:17:28:f9:3f:22:
ed:a7:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:53 2025 by rpki-client