Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: keCwd4gGrwJGZq5anHiLg28x+WB3lVDZ51TcqeXlh+E=
Subject key identifier: AF:3A:75:43:6D:5B:E6:94:D9:89:2F:D4:6C:8E:2C:4B:74:75:EF:76
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019675303FC1F0F746905FBE38CB49EFD2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 07EA
Signing time: Sun 27 Apr 2025 03:00:18 +0000
Manifest this update: Sun 27 Apr 2025 03:00:18 +0000
Manifest next update: Mon 28 Apr 2025 03:00:18 +0000
Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: uCRgwjZBJ/o8G6Yb3kOBcZtDbTlAaiIoHVlxr3yYA8M=)
3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
4: KRSjlLP_LGaVl43CnNfHf_qcv0Y.roa (hash: T6wpRaMQShfnxACSwpJMZJO4nNVJDFOyvCxB/2y9lh0=)
5: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
6: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
7: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (hash: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=)
8: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:3f:c1:f0:f7:46:90:5f:be:38:cb:49:ef:d2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Apr 27 03:00:18 2025 GMT
Not After : Apr 28 03:00:18 2025 GMT
Subject: CN=af3a75436d5be694d9892fd46c8e2c4b7475ef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:0d:40:1f:8e:9a:c6:9a:9e:e3:6b:63:70:
4e:dd:53:0c:d5:58:1e:21:e4:6f:18:73:4a:48:cf:
8a:a7:b8:98:c5:4c:25:9f:e2:77:56:fa:7a:3b:52:
1b:f9:1b:a2:4c:2c:94:42:57:ba:9e:76:bd:dc:65:
dd:98:78:4c:f1:1d:97:e3:33:51:ce:57:c1:31:b4:
d1:3d:ae:f6:5b:26:27:49:10:28:ca:10:0c:99:dd:
9f:af:b9:d8:4b:32:5b:03:ec:70:a2:06:f7:d9:aa:
02:5a:0b:2e:0f:a3:80:4e:07:d6:4e:02:78:b7:d1:
8c:6d:9c:91:79:78:cf:fb:93:f0:88:25:9d:fc:24:
85:61:bc:14:bd:2f:9c:de:40:d3:d1:90:81:b4:53:
35:2e:3a:f3:b3:22:a6:6f:41:41:46:1f:f2:ed:96:
42:fb:53:fb:d9:70:7a:53:ea:6a:ad:84:9a:ea:3a:
42:e2:a6:1c:d7:b3:61:b2:fc:65:87:23:09:8e:a5:
97:c4:bd:aa:46:c9:35:01:3b:4b:90:02:3e:cc:4e:
17:29:ef:84:1d:f7:8a:b5:84:90:30:95:a6:4b:00:
00:0f:fb:36:63:c4:f0:47:59:7d:c3:7e:4a:1e:c8:
fc:15:62:49:08:12:e1:06:63:7e:24:15:6c:26:1c:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:75:43:6D:5B:E6:94:D9:89:2F:D4:6C:8E:2C:4B:74:75:EF:76
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:64:59:34:99:11:d0:95:32:ba:d9:c9:91:fe:33:fa:20:
9b:ed:43:69:19:4d:a5:2c:f2:91:90:57:cf:78:ca:cd:a3:ad:
2d:31:68:09:09:b7:ad:b4:b2:62:1c:01:dd:d3:a6:84:f8:5b:
97:77:6e:7a:9a:65:49:08:24:68:d9:4d:5e:d4:fb:f1:f4:2a:
2d:cf:d7:f4:47:d1:a9:b8:f7:17:aa:9b:40:b5:48:50:88:9d:
bc:70:59:c2:f5:e2:5e:3c:90:2c:c6:13:05:28:25:6c:a4:8a:
b0:f5:55:35:3c:fc:e2:28:70:58:74:eb:a5:19:43:94:94:bb:
01:cf:79:76:85:6d:f1:40:a9:cd:63:36:04:f4:47:a9:c3:30:
27:a3:0c:b0:52:34:4d:6f:19:9e:ae:26:05:02:85:9f:c6:62:
43:ce:63:d6:02:d1:61:74:51:77:34:98:d9:8f:0c:14:60:d7:
59:91:29:35:9d:bc:04:26:28:89:3c:32:6b:89:c4:72:b7:96:
6d:9a:ab:da:21:f4:3b:71:c3:67:9c:1f:da:41:2c:22:73:6f:
df:57:19:2f:45:56:20:04:57:da:6d:3a:64:65:57:36:88:ea:
fe:c0:10:98:c6:1d:2b:c8:e4:ec:e4:66:f3:66:32:b2:6e:eb:
91:44:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:49 2025 by rpki-client