Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json)
Hash identifier: S3YoZVBRb2dczFu4U0IM6X8mtwkoYTaKNf/KzfOB3wA=
Subject key identifier: C5:2B:C6:65:95:6C:F7:BB:C7:47:84:F7:7B:1B:48:C9:0E:F1:11:B8
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 019769CF04F8C4AA02E154355F337C34F8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
Manifest number: 0519
Signing time: Fri 13 Jun 2025 15:01:04 +0000
Manifest this update: Fri 13 Jun 2025 15:01:04 +0000
Manifest next update: Sat 14 Jun 2025 15:01:04 +0000
Files and hashes: 1: 4Knn2Ld5egn1camg9bhppId4Qlo.roa (hash: A8w1HB94c5M9H4eQOiI6lWSCTjnLMlfowVXvZM3dO6s=)
2: 5bwrov9Q4TKzJTBo9upY3XK0THU.roa (hash: TYWC6rWZltrX891RQlcpPW39DIbNZYI93ECjvUJPd18=)
3: S_FCvdfbH_ZK63a0stUMhU8oaw8.roa (hash: eXZV7SJ3ck6L3XgOeiX3iX+u0/ekcILrG+TMmUo1bYY=)
4: UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa (hash: hvtnqOC4PJ7xkfHCQl1PdGQcbPT0pkEqxG9iEFd/GZI=)
5: gOWYAyjzxIKRFcUZmXLFPZZQLAE.roa (hash: uorrOksjaGfolUbfcHF+KBKk6xKRTaR+l4ir2v0cUaI=)
6: g_ElxkrC5OfOyHZzsFQIM1AuuFQ.roa (hash: s9+zwcgiFmScc9IvVxtLII47fLB+BQdFtBCLqfaDxwU=)
7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: OCy49LOWgOPHrExZ7107fjS63JEWxTkyfwWHp9f81TY=)
8: zvXh2JmULYTuuJGfZa88vbAc7K8.roa (hash: XQvzCYYY2c/DWeWDz/HVl73sGmFpwXBX4BVFr0eF6dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:04:f8:c4:aa:02:e1:54:35:5f:33:7c:34:f8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Jun 13 15:01:04 2025 GMT
Not After : Jun 14 15:01:04 2025 GMT
Subject: CN=c52bc665956cf7bbc74784f77b1b48c90ef111b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:66:06:83:66:4c:35:9f:fd:e9:44:cd:37:
f7:4a:7b:01:58:67:c3:60:7a:8a:bf:e3:f7:f0:e0:
32:8b:6b:5d:86:a8:0a:6d:14:87:0b:2b:86:94:38:
6b:e8:cb:d5:7c:39:af:43:00:bb:75:19:10:d7:92:
9b:20:d1:7b:80:54:3c:ff:53:07:f7:2d:00:ed:64:
03:32:6d:b4:3f:ac:5d:f5:a1:d8:4e:b9:92:b6:25:
ae:1e:0d:4c:8d:8f:29:7e:8e:f8:04:d1:7a:d0:dc:
57:ac:6e:15:ce:3e:b3:bd:8d:b2:87:c4:05:ee:af:
14:c4:bb:cc:ac:34:ab:c7:94:ed:c4:7f:fd:cb:2b:
d8:6a:2e:d7:86:e2:f8:e5:d6:f3:54:74:c2:50:67:
1f:79:78:20:9b:53:58:bd:52:eb:1e:2b:22:32:b8:
82:8a:d2:72:68:29:6d:45:03:0f:81:b1:90:2f:72:
0f:6f:8a:f0:49:72:a2:6b:53:bf:8f:9f:21:88:07:
35:4d:89:c0:a3:81:9a:53:bb:3c:6b:0c:46:bf:30:
8e:9a:57:28:8d:8a:ff:e7:81:31:56:08:50:3e:f8:
49:4c:a9:c7:61:1a:ed:4e:92:28:23:dd:21:5d:15:
aa:9a:f0:f1:0c:1f:2f:d7:ce:37:a6:ff:5c:c8:ef:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:C6:65:95:6C:F7:BB:C7:47:84:F7:7B:1B:48:C9:0E:F1:11:B8
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d4:50:a5:4e:14:62:a8:f1:21:ee:89:9f:de:4c:59:7a:f7:
76:13:da:99:7f:80:e7:f1:75:fa:f8:84:2a:15:15:b9:13:38:
94:c1:47:ce:a1:52:fa:1b:b9:93:f8:d8:68:87:cb:f9:62:6e:
e9:ba:dc:f7:c4:39:a2:ba:48:b5:87:7b:95:08:8e:c7:c7:aa:
63:4a:56:69:cf:81:74:0a:2f:a0:1c:42:51:d4:e7:80:9f:91:
e8:07:cf:61:fe:8d:80:f7:c2:ae:7e:d3:11:cd:fd:6a:66:b7:
58:3c:4c:75:9f:e6:67:cc:ea:16:2b:61:cf:4f:bd:34:56:8b:
c0:e1:f9:f1:49:5e:20:3f:fc:a2:e4:5b:d6:9d:6c:bc:b6:62:
a6:d3:ea:50:bd:6c:e5:51:03:22:e2:90:05:ba:79:37:a5:88:
f8:49:2d:dd:c1:e2:10:14:c7:7f:b4:1f:22:db:e1:b4:ea:80:
6a:98:52:a0:a5:68:1e:b4:30:ad:fc:c5:7f:7e:fe:a6:30:e5:
eb:fb:2a:ad:09:27:c5:db:9c:05:70:c7:71:09:f2:d5:63:1e:
2d:ae:92:44:2e:70:e5:db:18:88:a5:ae:c1:75:5d:71:59:b6:
ea:bd:91:c1:f9:5e:a2:a2:93:45:06:aa:f1:02:4f:85:56:c6:
72:8b:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:50 2025 by rpki-client