Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: JoafUB+bB4s4s6Hu0j9RpHwnTJGM6HXYkI/92PKtZ0U=
Subject key identifier: 66:26:72:E3:70:21:56:DB:03:52:CA:55:1F:47:28:93:99:F6:E1:C9
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0197CDCE4223CD315B24963A0ABB3AC46FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 12D2
Signing time: Thu 03 Jul 2025 01:02:15 +0000
Manifest this update: Thu 03 Jul 2025 01:02:15 +0000
Manifest next update: Fri 04 Jul 2025 01:02:15 +0000
Files and hashes: 1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: PD4vPqcg6N/kTXQTBVGq3l7xX+OKBiDbcemDj42NHoE=)
7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:42:23:cd:31:5b:24:96:3a:0a:bb:3a:c4:6f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jul 3 01:02:15 2025 GMT
Not After : Jul 4 01:02:15 2025 GMT
Subject: CN=662672e3702156db0352ca551f47289399f6e1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:67:c3:13:07:d9:34:51:75:36:d3:79:30:
d5:fd:74:dc:05:86:f3:b6:82:c1:14:28:34:95:d7:
07:b5:c9:7c:a3:3f:e6:80:ce:21:00:06:80:93:48:
f7:0f:39:11:5d:6a:6a:b9:b0:6d:4a:a1:f5:e4:63:
6a:ab:4b:96:28:ae:8c:cb:52:ca:18:45:48:ca:fc:
97:40:cb:3f:64:84:96:f2:b4:9e:86:f6:85:5e:42:
08:59:42:64:22:73:00:5c:9f:32:93:2d:37:a6:5b:
1c:62:c2:7a:50:dc:be:a9:b2:5c:e0:37:6e:2c:96:
54:3c:ca:0a:d9:4a:41:76:d9:9b:3b:47:93:60:79:
ae:b3:54:dc:bb:2c:eb:82:ee:57:65:f9:31:e1:b8:
b4:bf:45:d9:d3:91:a1:bc:31:97:94:27:cb:33:67:
e2:f1:2b:62:00:43:da:8a:41:5c:5c:40:fe:e9:8f:
f8:a2:15:03:d6:ff:ee:77:d6:6a:6e:3b:45:91:e5:
58:b5:25:64:33:a7:23:2d:4c:6a:89:e8:25:9e:7b:
f4:b5:9d:32:e9:d4:8a:58:3d:a5:7a:ae:a0:98:82:
23:a3:a1:fd:a0:70:1e:41:cd:6d:5e:75:77:a3:3c:
0d:f2:3d:5f:3a:cf:74:ca:13:76:5b:09:cc:ea:ea:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:72:E3:70:21:56:DB:03:52:CA:55:1F:47:28:93:99:F6:E1:C9
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fa:5e:49:a1:2c:ab:0b:33:d9:21:0f:b8:42:de:34:d3:3c:
19:6b:a4:51:e6:b9:5b:2e:82:9a:c4:8f:22:ba:9c:be:ef:a1:
d5:79:f5:41:87:b5:a2:5b:6e:8c:ba:6f:21:0d:f2:1f:0c:a6:
29:b9:12:47:a9:0e:b6:06:38:9c:02:96:b2:62:1f:7a:50:29:
2e:7e:fa:7d:be:25:07:6e:06:88:f8:88:92:28:ac:e7:61:1f:
77:40:dc:27:74:7b:0a:14:1c:5b:3f:31:2e:8c:b7:04:28:d8:
e8:ae:64:21:52:e7:72:cc:27:e4:56:16:d4:94:6a:f6:b3:2d:
80:4a:48:bd:2b:f9:e7:8b:d0:99:b2:c3:a1:d4:0b:98:5b:ac:
55:1f:d4:d3:4b:77:ee:06:85:ad:19:ea:9d:3d:77:b5:66:93:
a9:2e:25:a4:cb:a3:c7:72:b2:68:e3:84:2c:98:63:57:77:9d:
6c:55:54:34:33:52:cf:e2:3e:d6:9a:fa:96:06:2d:a8:01:aa:
14:bf:e5:ea:a4:72:ae:31:ec:1a:86:95:33:4e:5a:23:bb:ed:
75:bb:2e:60:4d:fc:c5:23:7e:11:05:14:d7:de:ba:d3:e7:af:
25:32:ce:85:09:9d:a7:d4:12:55:ab:00:07:ef:3e:79:f7:47:
a6:c0:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:05:35 2025 by rpki-client