Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: 2cSPWWduF3IdAPVUVDKOGLg20O4uyFzhGYStjcisrRQ=
Subject key identifier: 8A:D7:9B:BB:CF:08:CA:91:11:00:9F:B7:8F:51:C3:8B:46:91:C3:60
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0196C382AD1B4CCA5E02008174D22C08C772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 08:00:43 +0000
Manifest this update: Mon 12 May 2025 08:00:43 +0000
Manifest next update: Tue 13 May 2025 08:00:43 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: x5SMwmtzu3mBS9mWZE+N1pe/WkeUrszETqfOL5NYF3c=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:ad:1b:4c:ca:5e:02:00:81:74:d2:2c:08:c7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: May 12 08:00:43 2025 GMT
Not After : May 13 08:00:43 2025 GMT
Subject: CN=8ad79bbbcf08ca9111009fb78f51c38b4691c360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:79:42:b3:96:60:44:1f:00:b2:89:fd:07:
df:c7:43:5d:b0:04:ef:92:32:b9:3c:66:2e:60:be:
3a:38:2b:3f:82:1c:6e:b9:26:05:24:e3:23:c8:5b:
a4:66:03:3c:71:80:aa:d6:e5:2b:75:44:70:2b:1b:
69:6b:e6:30:12:d4:12:67:d0:f7:de:f3:2c:ab:2e:
5a:67:43:8a:4b:69:af:9e:17:d3:2d:c9:e2:17:46:
3d:7b:ee:93:58:1a:36:6b:ac:78:6f:a6:d8:b0:2b:
17:e3:fd:11:14:ac:0d:2f:7b:ed:39:db:ab:1a:0d:
3f:d8:04:98:35:12:0c:ec:4d:bf:ff:04:00:1b:91:
eb:e3:8d:6b:3d:74:e8:76:2f:06:91:c5:5e:5a:16:
41:5a:22:71:68:b8:e3:be:e6:80:1b:2f:6f:75:7b:
24:37:5c:f3:a3:62:db:e3:55:14:17:c5:a8:9a:8f:
b9:d5:56:4b:39:71:3d:3f:3f:ec:8b:cf:43:70:b3:
79:d4:a9:38:34:4e:38:e0:05:6e:06:46:71:9e:49:
04:17:12:ec:17:1d:ee:df:0e:c3:ce:1a:08:3b:de:
5c:8d:6d:76:f7:06:05:42:56:35:64:3b:30:f9:0c:
69:b3:fa:82:11:b6:a4:83:27:99:96:0c:d1:1b:a6:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:9B:BB:CF:08:CA:91:11:00:9F:B7:8F:51:C3:8B:46:91:C3:60
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:17:e5:f6:94:0f:33:fa:bc:5f:96:f7:02:f8:a3:89:9f:0e:
24:3d:97:7d:1f:7e:9c:3c:4a:8a:45:ec:bc:5c:ca:19:a1:0e:
9e:d8:7c:59:fa:6a:3c:50:db:9c:f1:36:dc:ef:c8:f0:91:b4:
06:63:08:43:7f:27:1f:e8:56:28:57:0b:33:3d:14:f6:0f:d9:
7a:c0:ae:0a:c9:ca:e7:9d:43:8b:71:c7:8f:05:ac:a0:7c:99:
2a:be:0b:92:a8:c8:62:4d:de:6d:ac:38:a7:08:06:f8:a9:df:
84:22:da:05:51:dc:76:18:c5:57:9a:1f:d2:8b:11:f4:e7:56:
9e:95:19:1c:7a:0b:fa:db:49:65:a1:3c:a6:3a:9a:16:8d:ee:
d6:66:2a:c0:6c:62:26:94:16:a8:57:49:ba:f9:69:9e:ed:22:
cc:ba:52:36:81:7b:6c:d0:8f:d5:50:30:e9:11:13:12:df:d6:
ba:be:7e:2e:20:42:a9:a7:e7:68:14:54:42:4e:9c:f1:d9:8c:
9a:82:75:ce:23:df:d2:50:db:66:96:5e:8f:64:2b:86:a2:b5:
44:17:d3:8c:2b:59:f3:ab:38:3a:06:7b:11:ef:79:ba:4f:2f:
32:d1:9f:18:64:0f:40:ab:41:8a:b1:49:1d:29:ca:78:1d:61:
56:93:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:58:32 2025 by rpki-client