Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: ndqqaWd2oKd4OxSaMY8QxWTEJDQ3hic8YmL7aROtdOw=
Subject key identifier: 61:63:A0:28:33:96:73:1A:D7:32:36:5A:F3:52:5F:8F:25:10:76:3B
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0198D515CCF70725B150E540D6A44E22A4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 135C
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
2: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
3: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
4: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
5: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: mW71w2gAfLgj/a81UEyfG2rV78M8YMyr5GRprOSSzlU=)
6: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
7: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
8: q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa (hash: e3owPYjBi24F74VvYehxFdp8nbf9b8349pzS2VUb1Mo=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cc:f7:07:25:b1:50:e5:40:d6:a4:4e:22:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=6163a0283396731ad732365af3525f8f2510763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:ac:47:7e:84:6f:98:5c:87:d7:b6:5e:69:
fb:71:4f:a4:fa:4c:fb:fe:d7:0b:84:5c:c3:69:51:
ca:83:d4:bb:8d:86:d8:ae:3c:92:18:2a:63:5d:1c:
87:27:3d:94:26:18:e9:92:6f:0d:e1:d8:1b:d6:34:
71:1f:a0:e7:67:f4:d1:e6:5c:a8:df:65:cf:15:1c:
f4:fd:21:19:24:9a:55:2b:10:46:ed:24:c8:07:de:
9e:f5:7a:0f:19:ef:4a:c6:dc:d9:ba:da:5b:75:9c:
92:27:90:d0:eb:7a:1d:04:3e:c7:6d:c2:8d:ae:56:
1e:66:7c:6d:1e:dd:f6:8e:b6:28:96:7b:fb:8b:e6:
8f:a1:92:aa:6a:0d:97:73:dc:b5:2c:d0:79:00:06:
39:86:04:81:12:c8:57:01:7e:e1:a4:65:89:03:a7:
a9:39:f2:76:67:66:9f:8a:25:63:7d:14:fa:8d:aa:
75:f8:ad:47:e1:c9:24:0d:b4:78:14:66:42:2c:16:
de:fa:4f:91:1e:5d:41:ac:a7:66:19:9a:68:59:50:
53:51:db:93:a5:c0:e9:4b:c0:08:48:dc:b1:fe:e5:
49:12:33:84:3b:d5:08:76:91:ee:69:34:ca:48:55:
4f:ec:39:05:b7:ef:d7:43:3c:27:82:d8:8e:c6:2a:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:A0:28:33:96:73:1A:D7:32:36:5A:F3:52:5F:8F:25:10:76:3B
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:38:b2:78:80:41:99:de:ca:ea:95:f6:1e:67:63:1a:26:2e:
54:79:a9:f8:a8:27:24:d0:54:f2:c0:02:29:dc:af:54:03:0a:
f1:d7:5a:3a:80:b9:51:c8:e9:65:4a:f8:64:f4:2a:0d:23:8d:
30:66:00:ae:03:a6:05:ef:aa:32:75:f9:6d:8d:fb:34:df:6f:
e1:02:07:52:3b:a1:6b:de:02:54:71:96:96:4a:e9:b4:12:c9:
64:00:d7:97:ae:27:28:c1:eb:6e:5e:f4:38:3b:5b:8f:c3:c9:
27:82:67:fb:96:76:03:88:ef:57:1e:6a:9c:c2:ff:68:2c:80:
c2:f4:f2:88:1e:b9:f1:e5:83:c9:bb:47:72:e6:f8:71:7a:23:
da:d7:df:0c:47:a7:c1:5f:5e:b7:37:75:e3:9c:fa:9e:bb:23:
69:d0:7b:42:06:61:e5:24:71:01:fc:5c:66:24:d1:a7:8f:97:
27:68:60:8f:13:ac:c5:07:66:24:8e:08:45:75:38:ce:73:09:
5f:f1:b1:79:c3:9c:a2:52:2a:5b:d1:fb:26:39:90:f1:81:39:
16:4a:25:7d:10:14:45:5f:14:6b:46:93:7e:0c:17:28:dd:19:
37:7f:99:80:4c:0c:b7:4e:44:d6:d9:2d:c3:f6:6d:17:25:33:
dc:6b:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:07 2025 by rpki-client