Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: 7dQaJCxShF134DHtCIf7wf18JmTxvpPPKR+CdoC5GT8=
Subject key identifier: 76:1E:F1:57:8A:C7:68:F7:77:97:2F:F8:B8:61:EA:C9:FF:E1:B5:ED
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 01967E33A86C141690B06D6E1B293DB6C723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1523
Signing time: Mon 28 Apr 2025 21:00:36 +0000
Manifest this update: Mon 28 Apr 2025 21:00:36 +0000
Manifest next update: Tue 29 Apr 2025 21:00:36 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: qLS/qjmn1FQrFkEjtxOxQMTUn6aH8+52FmHfdNG1Cro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:a8:6c:14:16:90:b0:6d:6e:1b:29:3d:b6:c7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Apr 28 21:00:36 2025 GMT
Not After : Apr 29 21:00:36 2025 GMT
Subject: CN=761ef1578ac768f777972ff8b861eac9ffe1b5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:3b:63:fe:3a:4a:54:3b:67:18:7f:08:60:
cd:4b:6d:f5:dd:e8:f0:7f:b2:6d:e1:b6:eb:3a:de:
23:e5:bd:96:ce:14:e7:51:f9:61:e1:50:0c:f3:f0:
aa:7e:69:47:45:d5:e2:07:f8:e3:35:16:1f:2a:6d:
fd:a6:41:de:b9:d7:1d:4a:c5:d7:57:91:bc:33:ff:
d0:2f:0e:72:21:87:0f:f3:13:8c:b0:a7:ed:a0:fa:
7b:d8:f5:cf:00:36:75:97:0d:c0:77:49:2d:4d:9f:
81:f0:c0:b2:a7:4a:d7:33:8f:94:fd:12:46:4a:f6:
19:bf:94:94:ed:e9:29:8f:d9:0b:73:bb:9d:f3:18:
e2:fd:9d:ef:50:66:f3:4d:60:78:12:d0:21:aa:3e:
6f:67:ee:7c:f5:04:c7:5c:23:36:67:fa:7d:82:1b:
74:d5:83:53:6d:6d:12:1c:5f:44:e2:0d:cf:52:dd:
92:82:95:cb:ec:4b:43:de:fe:84:bd:51:88:e0:e0:
cf:6e:8a:8c:47:f7:65:2d:b6:cb:c4:6e:20:9f:b9:
ba:2f:3c:89:1e:2d:8a:48:a8:3d:93:06:bc:d3:1c:
a7:34:56:2f:4c:59:5f:1b:62:75:24:4c:ce:6e:04:
2a:6b:e0:87:62:4e:c0:17:01:f4:2d:24:95:4c:70:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:F1:57:8A:C7:68:F7:77:97:2F:F8:B8:61:EA:C9:FF:E1:B5:ED
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f5:4d:11:4f:0a:95:ea:46:d8:fb:ab:1a:bf:23:b8:9b:45:
37:95:55:56:ca:10:05:2e:ba:38:07:24:da:fb:9a:cf:21:ea:
29:df:ff:52:48:de:8b:65:70:aa:f7:69:3d:7a:a6:a3:43:ed:
da:fd:bf:ff:7e:3e:23:6c:58:ee:34:d7:e0:70:ad:9b:65:a6:
38:fc:f4:b3:fa:3e:41:97:45:1f:ad:ed:ac:3f:62:b1:be:5e:
bc:6f:e4:be:6e:84:5c:21:0c:56:ef:c0:98:3b:13:61:23:76:
3a:04:e1:ad:91:00:57:b8:8f:13:f9:3d:dd:47:66:56:c9:c3:
30:6e:67:87:64:a8:e2:70:f8:10:af:c0:0e:c9:c3:a1:3d:b0:
4e:65:6c:61:31:81:5f:29:09:af:19:cd:63:ac:db:c3:e3:d9:
89:25:cd:1a:dc:66:29:cd:ac:41:a8:97:f0:05:07:a7:37:07:
79:0d:ac:cb:26:e8:31:a8:26:38:1a:bc:08:47:be:3c:74:6f:
ec:25:27:4f:ef:df:64:eb:bb:b2:d4:fd:1a:7c:02:6f:bc:fe:
25:36:1a:12:e0:36:60:7f:f0:2a:a4:bb:9b:6b:4a:1b:a0:fc:
e0:0a:9b:53:84:8d:1c:53:46:cb:8a:50:6f:2b:1a:e2:bd:6e:
b0:19:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:54:00 2025 by rpki-client