
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: I0Vw13PaIE2NHIxDbD8vIWg4j/sputVcLcItc7wh2CY=
Subject key identifier: 53:BF:F1:BA:00:DF:38:86:60:C4:A4:11:A2:E4:2E:A7:46:38:B3:C4
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0196A19B00D33D8FC04714484FF14F0033B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 0801
Signing time: Mon 05 May 2025 18:00:11 +0000
Manifest this update: Mon 05 May 2025 18:00:11 +0000
Manifest next update: Tue 06 May 2025 18:00:11 +0000
Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: VkEfTF10BgvYpdDLC5YcHSBk7XDVNvFJHzJYoZ8Rlbk=)
3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
4: KRSjlLP_LGaVl43CnNfHf_qcv0Y.roa (hash: T6wpRaMQShfnxACSwpJMZJO4nNVJDFOyvCxB/2y9lh0=)
5: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
6: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
7: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (hash: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=)
8: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:00:d3:3d:8f:c0:47:14:48:4f:f1:4f:00:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: May 5 18:00:11 2025 GMT
Not After : May 6 18:00:11 2025 GMT
Subject: CN=53bff1ba00df388660c4a411a2e42ea74638b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:55:d2:e7:68:64:36:e0:d5:09:a2:24:6e:
c0:d0:aa:72:e2:c3:55:26:be:28:32:5a:2e:9d:3d:
44:a2:11:bc:da:d0:6c:e6:bc:a5:a6:d7:af:41:78:
95:99:38:a4:af:3b:1b:85:ca:45:6d:8a:b6:6a:14:
17:fe:53:cf:ca:18:58:2f:d6:ee:2d:6a:c3:b3:3f:
9e:93:b8:a7:60:3e:c2:32:e1:86:19:d6:2e:ad:ca:
56:bb:ad:24:a5:db:a5:0a:24:09:4f:b8:a8:f0:c3:
f5:5f:db:e8:ae:08:ec:2b:d4:e1:89:d9:33:9f:21:
99:66:d4:76:a2:0d:28:3d:27:41:7f:88:2a:2d:bb:
0e:58:72:0f:6b:4d:6d:2b:46:98:d8:3a:29:c4:b2:
58:ae:a2:48:1d:62:9e:af:a1:6a:6a:45:54:17:1e:
66:52:81:1a:e4:4a:4c:da:87:95:9d:78:fb:c1:ff:
54:44:57:f8:0b:7b:a1:1e:2a:65:c1:34:f0:51:53:
99:f3:47:37:e3:6a:30:a0:af:1e:df:64:5b:d8:d4:
20:9b:e3:b3:10:35:bc:a6:61:38:78:10:27:4b:1d:
41:b7:15:09:e5:ac:6f:09:ab:5b:ee:4d:e8:3b:41:
66:46:98:5c:45:68:a6:27:8b:98:ee:38:8d:36:7c:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:F1:BA:00:DF:38:86:60:C4:A4:11:A2:E4:2E:A7:46:38:B3:C4
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ff:11:24:b3:1e:91:8d:1c:37:27:85:e2:8a:e3:1c:77:84:
26:30:2a:f3:8d:37:64:e2:c0:c1:a5:87:25:59:f7:05:39:88:
00:e3:2a:36:22:39:f1:e8:15:ef:a3:1c:95:69:e6:c3:10:d0:
cf:e0:34:9d:b1:59:98:c4:af:09:a0:d2:ee:8f:78:5a:74:03:
75:f2:65:c5:02:d5:03:9e:2a:e9:53:f4:3a:ba:bb:b8:bd:9a:
20:92:a4:3f:e9:26:62:cb:eb:b4:15:a1:7d:41:03:c1:9f:0d:
f4:53:8a:79:37:90:3c:3b:eb:2d:46:a8:25:ff:8c:a6:8b:ee:
57:1b:51:98:62:d5:d0:75:28:ba:67:08:e7:8d:7a:ed:6e:7a:
00:a8:2c:79:32:ad:62:6c:ba:5f:24:b6:57:1a:97:cb:0b:0d:
58:1d:10:d9:e8:7f:f4:99:41:cf:55:df:3c:72:f3:6a:62:91:
9e:81:19:53:54:07:5a:5b:0a:cd:db:ee:e4:75:c4:b3:e6:fa:
f1:c9:c9:b6:dd:81:3a:23:86:5d:a3:a9:ba:dc:46:be:0d:a7:
1c:06:b6:d1:24:e2:29:dc:15:69:b4:a6:b1:8e:fe:0f:7d:3d:
fc:59:b6:3b:6d:77:cf:6b:16:be:a3:ba:ca:9d:d8:3c:87:e6:
ab:a4:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:06:11 2025 by rpki-client