Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: LzIDQdBTRWt6QWSG1JvmC6eCxN+xA6NFR7hyKGm0/VM=
Subject key identifier: AF:48:CE:D2:7E:23:3F:46:78:E9:E9:8D:27:01:E7:C8:81:F5:29:9D
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01978E13496C9B1DC2AF19C8EE32C101A787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 12B1
Signing time: Fri 20 Jun 2025 16:01:57 +0000
Manifest this update: Fri 20 Jun 2025 16:01:57 +0000
Manifest next update: Sat 21 Jun 2025 16:01:57 +0000
Files and hashes: 1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: 8bUBPdqoWW3NGp67DkpLT+lWF+4n+XWsCah9Zm/Pfmo=)
7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:13:49:6c:9b:1d:c2:af:19:c8:ee:32:c1:01:a7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jun 20 16:01:57 2025 GMT
Not After : Jun 21 16:01:57 2025 GMT
Subject: CN=af48ced27e233f4678e9e98d2701e7c881f5299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:44:73:61:71:38:b0:1c:31:26:a6:6a:32:
29:b5:3c:8a:9e:a1:c7:0e:ba:40:7d:12:3a:cc:f2:
ec:08:9b:c7:a7:10:e0:ae:46:b9:72:34:01:ee:85:
c8:71:3f:b3:f9:e7:a7:e4:a3:29:34:11:3e:02:f1:
48:f9:c9:69:76:f2:71:ba:7d:7c:a6:8a:0e:fb:68:
3f:3f:d7:93:13:6c:ee:e3:6f:d5:a2:6d:6e:b2:22:
7c:c0:39:66:94:79:8f:27:0b:8f:a6:40:0c:e6:08:
c3:08:9d:c6:04:d5:28:1b:92:20:c7:42:3d:ca:00:
cb:3a:1f:a7:35:05:57:ce:57:45:2e:35:71:4f:27:
3a:55:95:66:85:41:4f:30:d4:7f:7e:f4:53:48:d7:
89:5d:cc:58:f4:15:2b:1b:c8:1f:1d:01:68:d5:c9:
9f:1c:16:3b:91:91:24:f1:18:a1:fd:f0:bf:f6:75:
a9:c3:7a:a6:e3:5c:be:ec:23:d1:71:87:3d:47:32:
f5:ea:f5:b4:f1:4f:1f:4e:aa:38:45:9d:78:90:b9:
38:76:f6:4c:58:36:f8:02:cb:db:a1:d7:d5:26:57:
18:79:42:0c:d1:4b:7f:7f:2c:12:39:37:ff:fa:40:
53:06:3c:e3:1d:34:4e:1d:71:fa:54:06:c8:70:fe:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:CE:D2:7E:23:3F:46:78:E9:E9:8D:27:01:E7:C8:81:F5:29:9D
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:23:78:72:ae:9c:b0:6e:db:4e:5a:7f:6d:1b:3b:74:62:e7:
cc:59:eb:27:52:10:3d:7e:36:e9:ed:6d:9e:ac:e0:ee:2f:21:
ee:2c:9c:0d:b2:11:7d:88:31:11:50:41:1a:34:19:8c:19:3c:
15:f5:83:4b:8b:53:6c:ba:9c:8b:a2:37:d6:d9:11:9c:ab:32:
91:2a:38:96:e4:8c:af:4a:9a:35:3d:b6:d7:e4:8a:89:1f:d4:
ca:cc:6d:d7:21:9a:6d:7f:65:db:d4:c8:5c:bd:78:4b:8f:e9:
7c:1b:6a:0e:46:87:23:b1:66:9b:cb:5c:c4:31:a9:96:7c:34:
51:18:21:1f:9e:f4:8b:0b:6a:7b:aa:5a:9b:5b:3a:76:44:e8:
10:fe:2f:ec:e6:d9:39:e9:72:ba:03:11:19:b4:69:4d:b2:0d:
04:ae:d9:c1:a4:0e:47:9a:20:e5:7b:56:aa:52:98:a7:68:23:
08:d5:cb:7e:8d:f3:06:48:34:9e:1f:f0:e9:ce:a3:c8:95:a6:
33:fd:27:f2:c6:bd:b2:3e:ab:e6:75:0e:ca:b3:ae:cd:e7:d2:
5e:e1:1a:7f:18:9e:57:20:7b:97:f3:ef:98:cb:b1:ee:c4:5e:
5d:69:b8:fa:aa:ef:2b:db:16:03:6c:a3:d9:f9:1f:e7:5a:c2:
e2:16:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:50:17 2025 by rpki-client