Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: Hl+rTMbWdhP0BgDoZ1lTzMPLdfhe5KugtIBVIKoA/0s=
Subject key identifier: C8:11:C4:91:C0:DB:64:CA:85:7A:E1:1F:69:56:B0:C7:A6:B5:26:49
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 0196D4AD2298282800884FE26C566E83843D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 1251
Signing time: Thu 15 May 2025 16:00:38 +0000
Manifest this update: Thu 15 May 2025 16:00:38 +0000
Manifest next update: Fri 16 May 2025 16:00:38 +0000
Files and hashes: 1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: I4pkOPMQxz02Aey10FRe+CZP2QL+PzZA2BpzGRt19aU=)
7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:ad:22:98:28:28:00:88:4f:e2:6c:56:6e:83:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: May 15 16:00:38 2025 GMT
Not After : May 16 16:00:38 2025 GMT
Subject: CN=c811c491c0db64ca857ae11f6956b0c7a6b52649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c1:56:59:b4:b2:fc:f3:9c:72:4c:74:3d:
50:c5:38:3a:1b:10:ce:40:e7:4f:58:10:09:d7:e1:
4c:da:65:c7:38:24:36:7b:1f:0e:1f:cf:82:7e:71:
87:52:12:c1:ba:e4:11:eb:5a:3c:62:ce:a1:0a:ac:
7a:b4:be:2f:5b:53:f1:02:5a:8b:33:2f:6b:e7:ef:
ea:c1:cc:40:0e:6b:9c:de:38:86:87:d6:34:55:d1:
24:ac:5f:0f:fe:2e:f2:bf:9f:70:78:60:b2:63:a4:
bc:e8:ca:41:6f:3a:4e:76:26:af:96:d4:ac:93:72:
08:1c:40:8f:9b:c4:a1:98:40:95:43:89:f2:49:a6:
89:b3:0d:ea:73:89:55:fa:e8:a6:29:cb:95:f1:32:
d0:ac:71:23:f3:79:3e:81:d0:cd:4a:5f:b3:2d:35:
f3:b5:fb:4a:d7:89:2a:60:80:11:32:1e:20:c3:15:
96:bf:ed:84:23:91:13:ea:47:1d:9d:95:06:ec:bb:
9e:41:1f:d7:c8:45:2b:70:05:4b:bf:9c:41:2f:1d:
76:dc:d8:0c:4e:c9:ff:c6:13:68:9b:ff:64:0b:4a:
4c:d0:ae:9b:d1:00:75:2c:ac:5e:ba:40:e0:db:74:
ec:29:7b:78:d9:7c:d0:6a:e1:c6:bc:82:99:b9:40:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:C4:91:C0:DB:64:CA:85:7A:E1:1F:69:56:B0:C7:A6:B5:26:49
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c0:67:f0:0d:40:c7:86:27:a9:3e:e8:f2:a4:c0:89:4c:bb:
63:87:89:7c:ad:f0:46:d1:6b:87:8e:35:27:da:0b:b4:24:11:
fa:9e:ed:ed:4e:93:32:13:dd:0e:77:81:cf:bd:ec:e8:6b:f2:
e1:dd:ab:f2:2e:24:e1:07:4c:59:55:d1:24:a1:c7:81:fb:3d:
ae:43:85:a3:19:8d:4e:b8:14:93:63:a6:c1:3e:2e:13:3a:f9:
dc:46:89:98:93:0f:40:be:a8:f5:d0:c2:45:3d:4d:2b:0e:48:
ba:0d:77:e5:71:6e:7d:30:ac:2d:59:8c:1d:6b:60:ec:82:02:
d9:07:53:c0:c6:19:5b:36:cd:d4:23:cb:ca:ca:70:da:bb:5c:
da:95:3a:13:ad:a7:8d:62:c2:c0:8a:97:08:7d:4b:cb:cd:22:
50:02:7a:0e:6a:7c:f3:3d:08:52:59:89:cb:36:6b:19:f9:fc:
9a:69:8c:65:50:c2:7b:27:11:c6:65:5b:22:f8:76:ec:17:6c:
74:e3:6c:19:da:d5:7d:b0:ec:8e:04:e5:56:76:c0:60:7d:00:
ca:5d:c7:f7:43:cb:f1:ba:04:04:89:e2:0e:62:d1:ab:73:51:
9c:4b:56:1f:1e:91:82:b0:e2:49:b0:50:a0:34:7f:03:d2:1d:
43:c4:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:36:06 2025 by rpki-client