Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: 3LkJCNEAELkhQV9tnpX7ouky1tGiLJfYx+/I3vYMrPM=
Subject key identifier: 0B:11:63:7F:73:6C:66:44:8F:92:DC:FE:B4:F9:7A:BC:CC:E0:2A:A1
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 019855A0B172DCBA9322127F2D29F420B7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 131A
Signing time: Tue 29 Jul 2025 10:00:51 +0000
Manifest this update: Tue 29 Jul 2025 10:00:51 +0000
Manifest next update: Wed 30 Jul 2025 10:00:51 +0000
Files and hashes: 1: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
2: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
3: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
4: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
5: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: iiHLxfA0nkQlZbq8fGg7Mu9q3AGuArM95p7BPREBF5c=)
6: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
7: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
8: q4Ah0rWWKTUuQN0kyauP9Xbx4Pc.roa (hash: e3owPYjBi24F74VvYehxFdp8nbf9b8349pzS2VUb1Mo=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:b1:72:dc:ba:93:22:12:7f:2d:29:f4:20:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jul 29 10:00:51 2025 GMT
Not After : Jul 30 10:00:51 2025 GMT
Subject: CN=0b11637f736c66448f92dcfeb4f97abccce02aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:36:73:d2:c3:a4:00:48:1f:57:fa:e0:4f:
9a:0a:fb:32:dc:0b:15:79:4b:ca:ca:23:46:5e:74:
18:9e:3f:5d:19:f1:37:eb:28:b4:8b:30:2a:a7:c8:
d8:40:79:d4:0d:81:30:ed:df:05:1f:02:e4:ef:14:
c5:ff:03:e4:44:55:68:ba:0e:4f:52:f8:c9:c1:0b:
49:28:f0:23:9b:82:68:b9:0e:73:88:15:33:29:93:
15:16:40:1c:34:ed:61:c9:6f:4b:c2:07:c1:cf:bf:
7b:da:64:26:41:d1:00:70:cc:eb:5f:5d:b4:93:26:
ce:ff:ee:33:31:05:e7:39:72:bd:84:81:d4:95:94:
f7:76:de:d4:ff:98:7f:6e:9a:2b:18:4c:1f:38:04:
dd:c5:b2:3d:06:01:9f:a0:28:66:9d:d1:71:96:a7:
e6:a5:e2:aa:99:87:1e:d2:a5:6f:0d:15:bd:f2:26:
46:74:4a:b0:db:78:06:58:b1:cf:37:8f:5a:3e:74:
3c:e7:eb:8b:5d:3d:11:72:92:8f:99:68:34:65:45:
26:8f:43:71:df:bc:69:f8:e0:f1:6f:3b:3c:24:3b:
1f:00:6b:74:ea:4f:aa:ed:ef:3b:19:a8:30:95:c5:
d5:0a:6a:a8:a4:28:bf:3b:e6:70:0d:c0:7b:38:a6:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:63:7F:73:6C:66:44:8F:92:DC:FE:B4:F9:7A:BC:CC:E0:2A:A1
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:2a:17:67:9f:f9:6b:24:90:c3:71:1d:7e:9d:b8:c1:1e:
fb:d9:f4:3e:4f:70:b2:66:81:45:7f:f9:71:a8:74:7d:b5:56:
ab:3f:c8:3e:a0:4e:9f:db:9e:a3:25:5e:10:b5:3f:80:bb:6c:
a7:6c:dc:e7:61:08:79:e6:85:68:f7:b6:f6:90:fb:07:c9:43:
a2:c7:3b:99:50:52:8c:ef:41:fc:c1:65:76:ba:fa:79:7f:e4:
9a:a9:00:ea:25:45:51:02:20:5e:43:a7:25:7e:21:f0:47:d1:
18:0a:f0:57:8f:34:e7:b5:6d:d2:a0:21:e1:f3:4e:87:00:d0:
41:77:66:0a:85:80:43:d0:b9:f7:a7:c4:47:5e:c1:75:c8:98:
c7:ca:eb:50:fa:b1:9a:67:4e:a7:2f:31:b0:bd:f2:10:cd:9e:
b9:10:5a:fa:bc:16:b0:5a:ca:9a:89:7f:2a:83:15:d5:e3:81:
7e:91:f4:db:33:f3:d8:a5:62:ea:73:47:24:9e:e4:5b:a6:96:
6e:e7:eb:a1:38:c0:8d:ca:3f:00:e6:37:e1:df:2e:4b:35:d2:
ae:b3:95:71:7e:80:7f:9f:d0:e4:6d:55:42:a7:64:22:44:f6:
00:2e:36:b3:7e:74:ca:66:3e:58:73:25:2d:2c:fa:98:ce:da:
f8:dc:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:53:10 2025 by rpki-client