Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json)
Hash identifier: kHrG3LIiKPfzWugYCakcPTNpzIaBWNeQVBKAAqHsQ+A=
Subject key identifier: FF:47:08:42:24:11:50:C3:E5:A5:A2:84:F8:AF:3C:CE:AC:AE:E2:60
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 019832A75C0A7322A2BCA0580B4479C661C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
Manifest number: 0582
Signing time: Tue 22 Jul 2025 15:01:25 +0000
Manifest this update: Tue 22 Jul 2025 15:01:25 +0000
Manifest next update: Wed 23 Jul 2025 15:01:25 +0000
Files and hashes: 1: 4Knn2Ld5egn1camg9bhppId4Qlo.roa (hash: A8w1HB94c5M9H4eQOiI6lWSCTjnLMlfowVXvZM3dO6s=)
2: 5bwrov9Q4TKzJTBo9upY3XK0THU.roa (hash: TYWC6rWZltrX891RQlcpPW39DIbNZYI93ECjvUJPd18=)
3: S_FCvdfbH_ZK63a0stUMhU8oaw8.roa (hash: eXZV7SJ3ck6L3XgOeiX3iX+u0/ekcILrG+TMmUo1bYY=)
4: UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa (hash: hvtnqOC4PJ7xkfHCQl1PdGQcbPT0pkEqxG9iEFd/GZI=)
5: YsXyfEzn_ZKBLDMzG1UU4GMwlcI.roa (hash: +hKZsJUinqgBcHuQ7dq/U5cKUb4tJ0uT1WCFtVOANwo=)
6: gOWYAyjzxIKRFcUZmXLFPZZQLAE.roa (hash: uorrOksjaGfolUbfcHF+KBKk6xKRTaR+l4ir2v0cUaI=)
7: g_ElxkrC5OfOyHZzsFQIM1AuuFQ.roa (hash: s9+zwcgiFmScc9IvVxtLII47fLB+BQdFtBCLqfaDxwU=)
8: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: +VIUsgc7OFqm7px3PqnMwYdRbj79gLZdnrTf1fKEupY=)
9: zvXh2JmULYTuuJGfZa88vbAc7K8.roa (hash: XQvzCYYY2c/DWeWDz/HVl73sGmFpwXBX4BVFr0eF6dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:a7:5c:0a:73:22:a2:bc:a0:58:0b:44:79:c6:61:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Jul 22 15:01:25 2025 GMT
Not After : Jul 23 15:01:25 2025 GMT
Subject: CN=ff470842241150c3e5a5a284f8af3cceacaee260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8e:31:f1:c7:0e:b0:14:d2:df:81:da:c5:85:
40:fe:fb:6c:66:3b:ee:5e:3d:d1:07:ed:24:e9:be:
69:43:9d:a1:96:37:70:b8:3f:d8:ef:32:94:81:6f:
c4:8c:ad:e3:20:99:08:37:c2:a4:63:26:3d:c5:57:
e9:4a:d0:2d:6c:4e:76:e6:34:a8:9a:91:fe:ad:ee:
fd:23:8a:c0:c3:41:62:f5:d0:d4:6d:c2:85:ce:a5:
a1:8c:ea:5e:cd:04:90:d6:d0:bb:e1:3d:ce:ab:cf:
e8:38:fd:f0:50:13:7c:94:1b:28:c8:52:26:12:33:
8b:7a:5b:6f:06:0a:2c:d6:89:b5:b8:23:96:74:95:
1b:56:69:3f:62:08:98:89:c0:c3:dc:b1:05:1e:e0:
ad:1b:25:4f:e1:2f:21:46:4a:0c:d1:52:4a:7c:c9:
00:47:3b:0d:32:4f:ec:0a:6f:81:a2:fa:6b:80:ab:
60:41:cf:d9:74:7d:e9:9e:dd:ca:3a:9e:c0:f3:98:
fb:8d:ac:bd:94:ca:f9:39:c8:73:34:45:82:9e:80:
02:3b:9e:23:b7:4d:76:a6:7a:0d:2c:c6:93:49:48:
7e:40:a9:3f:f0:de:9a:00:48:a4:91:f3:1e:f5:64:
1c:bf:d9:df:7b:be:31:57:f0:a3:65:24:38:39:e6:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:08:42:24:11:50:C3:E5:A5:A2:84:F8:AF:3C:CE:AC:AE:E2:60
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ff:1f:1d:32:3c:30:75:ec:da:71:c6:18:24:40:90:65:ec:
87:c3:1b:cd:1e:55:df:f1:12:e8:3a:84:4f:5e:99:04:07:55:
9e:59:99:76:00:e2:91:a8:ce:a0:ec:f6:f5:db:a3:36:18:16:
cd:f3:92:86:a8:a0:e3:32:ce:9a:f2:0e:8c:f0:f7:1a:7b:d7:
67:f5:e7:d3:d7:27:c1:aa:de:0d:c0:7b:8b:da:74:4e:a3:15:
35:af:9d:1c:af:e1:8d:f6:4f:da:02:a8:92:6c:cb:8b:4a:e3:
c3:66:2e:c9:9c:61:04:17:50:25:29:a6:42:ee:80:f7:fc:86:
48:6d:8b:03:b2:69:18:f5:c4:07:9c:49:d2:c7:32:6c:d5:c0:
a8:a0:99:b0:fb:3a:91:f8:96:f2:16:02:1c:91:13:91:f9:a5:
38:b4:10:b1:db:f4:16:22:b8:d6:e8:b4:df:ed:f9:ed:e1:1b:
28:23:9c:6d:64:ed:1b:67:61:b3:d6:18:98:69:42:d2:c7:e3:
4e:6e:e8:96:da:9e:4c:58:9b:b5:8d:7e:49:82:1f:dd:66:0b:
9f:c7:72:ed:2f:5f:cb:4d:b5:cf:09:2e:b1:4d:07:42:8d:f0:
d5:67:f2:2f:6e:ff:12:81:e3:46:93:f3:23:0b:9b:d2:d5:e4:
4a:96:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:37:32 2025 by rpki-client