Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: 2QrOukh3tMd3lyUal5tx+vSotfDCuR2uJ2lb6Ji+ulM=
Subject key identifier: 9B:03:48:E1:3C:A5:60:98:11:A2:B4:3B:5E:0D:FC:A0:E9:67:34:40
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019693044AAC44B763CFA3D7BCC69BC5C39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 122F
Signing time: Fri 02 May 2025 22:00:53 +0000
Manifest this update: Fri 02 May 2025 22:00:53 +0000
Manifest next update: Sat 03 May 2025 22:00:53 +0000
Files and hashes: 1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: vP4JRPIFMFWHj+d6Y9xqMbuujmDGW35hU2BOvdYJi70=)
7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:4a:ac:44:b7:63:cf:a3:d7:bc:c6:9b:c5:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: May 2 22:00:53 2025 GMT
Not After : May 3 22:00:53 2025 GMT
Subject: CN=9b0348e13ca5609811a2b43b5e0dfca0e9673440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:da:7a:32:b8:e5:9a:7a:e6:37:be:1a:93:
5d:a5:c8:6d:71:9d:58:f0:75:c4:a4:38:a2:de:74:
b4:c2:c4:8d:f8:f2:d3:6e:e7:93:48:14:07:6f:6f:
91:2a:2e:9b:eb:42:9e:b2:db:99:61:5b:17:15:a7:
7a:07:ae:96:53:96:30:79:91:57:b1:d1:4a:70:e2:
3a:16:1e:9d:c7:08:95:ee:fe:6e:f6:80:4f:2b:de:
a2:e5:d1:f0:4a:9c:e3:dd:be:2e:a1:6c:55:74:b3:
8c:15:7b:de:03:72:eb:f1:9e:e0:ef:15:1b:87:9d:
62:26:44:09:b6:95:7e:71:29:ca:d7:eb:40:ab:1c:
89:13:cb:fd:05:54:70:81:94:58:b3:46:69:01:0f:
77:66:92:bd:cb:46:d7:da:73:a9:21:b7:f6:cc:0d:
26:59:56:6d:66:70:20:ba:dd:43:ec:a7:86:db:ee:
f1:36:6c:f0:44:5a:b0:1c:e7:89:0b:ed:41:cc:38:
a2:4c:8a:b6:c5:55:2d:8c:91:30:b1:f9:e0:86:35:
cb:d5:e3:d6:63:6f:a9:3b:c2:3a:fc:c4:68:8e:c7:
cd:8f:bd:5e:49:36:b5:bc:9b:f7:84:90:56:1c:82:
0e:fa:2a:1d:82:b7:65:88:37:39:e9:0f:18:1a:36:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:03:48:E1:3C:A5:60:98:11:A2:B4:3B:5E:0D:FC:A0:E9:67:34:40
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:19:d6:7e:1b:3f:52:b5:19:57:87:d9:7f:cb:dc:bc:f1:
d8:63:67:6c:99:19:5b:b3:a0:2d:2a:d8:dd:7d:56:7e:63:3d:
bc:19:37:bb:a7:cc:e0:64:9b:c5:e9:93:f1:44:2a:70:ef:78:
ab:14:db:d6:06:b1:09:c5:32:82:89:c0:36:57:59:9d:3d:2d:
b0:32:3d:71:79:3f:1c:4f:e2:d1:07:05:d8:bf:93:a7:db:ec:
d2:ed:76:9d:90:3a:45:be:f7:89:28:7b:c0:f6:04:ec:b5:00:
41:4b:18:7c:6b:49:cc:29:42:e1:ed:b5:a9:8e:0f:27:fa:93:
7d:9f:a3:c5:6f:77:45:f0:cc:7d:17:35:fa:39:ba:70:7a:4c:
d7:15:15:2c:22:2c:ef:ca:d5:8c:8d:91:5e:a9:38:dd:b9:7d:
26:1f:17:7b:dc:1a:97:90:99:c8:0d:82:10:f2:26:e6:d3:ee:
04:8b:cb:92:1e:80:73:87:c0:a0:81:4c:e9:5d:71:d4:93:c1:
dd:88:5d:e6:af:ae:8c:ed:d3:e1:9a:7a:96:1d:f3:3d:99:1c:
f2:83:a1:50:ad:42:aa:a5:11:c5:4a:2d:2c:af:98:31:e7:d5:
32:0f:d1:28:8a:c3:ea:91:51:16:27:a4:60:b7:96:6a:da:5c:
4b:d4:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:06:22 2025 by rpki-client