Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: 5H67/GFnx8KbUPEVnHTY9Q6As+Up+pOjv3TbitUYIzM=
Subject key identifier: 30:43:25:1C:F0:4A:CC:AD:E8:58:8D:4D:60:78:13:88:10:A8:41:EA
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01963E0AD62A86F9AF1813E37505D1755286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 1203
Signing time: Wed 16 Apr 2025 10:00:19 +0000
Manifest this update: Wed 16 Apr 2025 10:00:19 +0000
Manifest next update: Thu 17 Apr 2025 10:00:19 +0000
Files and hashes: 1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: UhLyQ2w0VTNYaonWL+CDZ/w/SdOvzcD7rWkG28+yYHc=)
7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0a:d6:2a:86:f9:af:18:13:e3:75:05:d1:75:52:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Apr 16 10:00:19 2025 GMT
Not After : Apr 17 10:00:19 2025 GMT
Subject: CN=3043251cf04accade8588d4d6078138810a841ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:14:88:b7:ee:b6:1f:08:f1:53:9e:22:a6:
bf:18:f8:eb:75:69:f9:17:ae:f4:9c:83:ca:27:15:
3b:6f:3c:93:81:a5:f6:08:52:c8:0d:4c:e3:b2:57:
14:93:9c:7b:e6:8f:29:70:8b:e8:f9:1e:96:2e:4b:
d2:7c:44:e2:08:cc:5a:3f:6b:f7:e5:b1:43:ba:85:
82:c4:7f:d0:c0:bd:1e:9a:59:36:08:ea:75:00:b6:
db:36:c2:39:1f:90:d4:45:8a:6a:6c:72:b3:71:9e:
a7:a9:14:3d:4f:07:ae:17:2c:86:2c:b1:14:c1:bc:
de:e4:03:9c:6b:f6:b1:3b:84:ae:27:c9:65:95:d1:
ff:93:31:f2:a9:26:44:f5:bb:d9:fa:b4:fd:7f:a1:
2d:2e:50:22:ee:94:d7:09:d5:d8:07:1d:62:38:91:
f7:66:11:7b:71:98:91:3a:d2:a5:36:c8:4e:90:cc:
ad:b4:87:89:58:99:cf:05:7c:d5:97:47:e4:28:8a:
03:3b:08:2a:56:0f:31:7a:8b:f6:e1:98:c6:cb:95:
6f:90:b0:5a:20:52:33:81:35:cf:f0:41:37:7c:a0:
d5:13:a8:ee:73:14:16:01:a4:40:8d:d1:4c:d5:42:
c3:7c:c0:7f:ae:88:5c:a3:d9:e6:8f:88:63:a9:1b:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:25:1C:F0:4A:CC:AD:E8:58:8D:4D:60:78:13:88:10:A8:41:EA
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1f:cf:fe:2d:3c:49:49:79:66:9e:d3:34:02:bd:0a:39:bb:
3d:9f:65:5b:4f:e1:c0:fb:6e:4a:ae:02:64:22:06:e6:f0:7e:
99:4b:09:a6:54:33:6c:c3:2a:4b:2d:f4:e7:fb:1b:d2:9f:1d:
8d:9c:b5:34:96:fa:96:5a:03:2e:5c:4d:7d:d5:c5:66:fc:3c:
75:c6:b2:d0:52:bc:43:b0:fd:80:b7:68:d3:6e:a0:c5:fe:cb:
de:21:6a:58:7f:11:ee:77:70:75:87:58:59:cc:6c:8d:d0:1f:
bc:b9:95:bb:0a:81:8d:8d:75:6f:39:7b:a4:e9:dc:4d:98:32:
3a:43:ce:02:83:42:71:32:c4:65:bf:82:05:8e:52:5e:11:ee:
ee:0d:f2:9a:04:62:63:83:51:73:3a:3f:c0:ee:dc:c8:f0:2a:
86:bd:53:46:9e:6b:a0:85:b4:62:75:5b:72:88:05:c2:35:ec:
9b:92:50:a6:35:0c:00:d5:f4:cd:7a:32:32:a6:2d:0f:d1:5e:
e6:80:96:ba:f5:24:95:13:49:67:29:47:b8:c7:1d:87:5b:12:
07:78:60:84:47:f2:4a:d2:fa:5e:be:cc:25:88:d5:6c:4d:29:
60:71:a3:38:71:9a:b9:70:e8:13:36:76:9d:52:04:8a:33:0c:
37:cb:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:09:51 2025 by rpki-client