Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier: /ivoRWL6zBetEKQEcGscITOuXVYpaX4YbXd0PiZRUpQ=
Subject key identifier: DB:8A:68:9C:04:7B:E0:05:2B:CB:C3:01:F8:D3:F9:99:3F:4F:7A:22
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01975611A46F729310CD21560C571AA0389C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number: 1294
Signing time: Mon 09 Jun 2025 19:01:26 +0000
Manifest this update: Mon 09 Jun 2025 19:01:26 +0000
Manifest next update: Tue 10 Jun 2025 19:01:26 +0000
Files and hashes: 1: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (hash: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=)
2: 6Sl4C2VFrHV3YkBMpUTBrYbdRPQ.roa (hash: 5AVHop3eRwVUj2fel532DKbAjX14xujikEBMf7jBmtg=)
3: MGy78Oba2p5CqMIjAWxf-tTx3Wg.roa (hash: HHniB51Q2oN8QDgD3RvRGMqimxHPcv89UMyJJka1AGI=)
4: RNeOwPvYeOlbGm7WpTJbicYs9fM.roa (hash: ywcq6F9u+XMef+nrYlu5zhadoXZGjE29hoBJ5W1orBU=)
5: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (hash: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=)
6: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: 9mvJL4BWYNSpYLF8GKLk2coP9z+CXhazMLrJOFApBPk=)
7: hHohIOb2CSqEknFi_nDQXoU5ar0.roa (hash: xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=)
8: mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (hash: TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=)
9: wZSP-d8n6hvvOKPvEYxVgr9KV58.roa (hash: OG84bdWk8TRWSqorxHqPGWsP8qqhFg1C5FkQOf2RkJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:a4:6f:72:93:10:cd:21:56:0c:57:1a:a0:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jun 9 19:01:26 2025 GMT
Not After : Jun 10 19:01:26 2025 GMT
Subject: CN=db8a689c047be0052bcbc301f8d3f9993f4f7a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:eb:0a:3c:2f:4c:91:e2:83:66:f0:2c:be:
2a:be:6f:7a:2e:ce:fb:8c:d8:0e:8b:2e:c6:bb:5e:
bd:17:3f:b5:18:c6:94:31:b4:21:90:37:b4:e0:7b:
96:1c:ae:42:3c:77:a3:9f:ed:ad:24:32:65:f2:f0:
3f:37:7c:d5:67:f2:93:8b:0d:b7:d7:10:1f:d6:5a:
f5:53:04:00:f1:90:79:83:61:32:d5:76:cd:56:c9:
65:63:be:28:65:e9:c7:07:43:8a:b7:70:f9:14:41:
ef:bf:d7:8d:1d:32:d7:28:69:8a:80:de:86:70:c3:
54:5b:6b:a4:ed:e3:78:d3:2b:95:fc:f0:ef:3d:e8:
1a:6b:6e:bc:a2:0c:9c:58:c4:22:d2:1a:b0:5e:34:
ef:75:c5:c6:54:b9:6a:29:2d:b7:6f:bf:b3:f1:e6:
73:52:2c:1e:df:bd:b7:af:1b:5e:32:dc:ab:b1:ba:
67:11:0e:89:f6:78:09:b8:00:fc:5c:b8:d7:00:29:
2a:9b:3b:03:ce:78:08:aa:2b:9d:c9:b5:87:2b:99:
f7:2f:60:48:89:88:40:5f:83:47:52:bf:60:14:a8:
ec:a6:21:04:94:bd:34:4f:d4:e2:51:0e:29:01:74:
51:9a:eb:76:40:aa:76:b6:8d:d2:7d:e5:68:be:c0:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:68:9C:04:7B:E0:05:2B:CB:C3:01:F8:D3:F9:99:3F:4F:7A:22
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:6b:5b:8a:ad:cc:ff:97:d9:55:f0:4c:d5:88:10:e0:0f:
0d:68:33:9d:db:40:51:84:77:04:7a:25:3c:09:d1:ff:0c:50:
12:16:09:39:21:7a:d0:a0:06:d7:83:b3:b8:7a:e4:de:15:60:
60:a1:0c:61:4d:b7:28:ab:4d:88:3b:cd:7f:0d:9d:19:41:45:
ac:cd:cc:e0:0c:88:c2:5e:c6:54:c2:c4:7d:c6:5f:d5:7b:cb:
96:8a:d6:a4:7d:9b:6e:1d:50:ee:26:6e:9d:d4:ff:fb:e7:87:
a4:bb:3f:0a:06:07:41:22:bb:be:84:e0:42:6e:1e:72:38:eb:
44:22:54:a3:a1:5b:98:7f:73:85:69:64:0a:0a:b8:5a:e1:a8:
28:1e:a4:34:2a:3a:c3:60:a7:23:10:05:19:d7:5f:06:34:bd:
44:38:ee:ba:0c:f3:f5:5d:9a:8c:59:87:2f:0a:26:22:97:8c:
d2:e0:a1:10:aa:70:4b:86:6f:45:ae:e3:47:51:97:6d:47:14:
85:10:9d:6b:e3:6b:95:5e:ae:03:e3:30:e5:b8:40:5b:fa:8c:
df:51:f8:df:ee:29:bc:ee:49:ff:46:42:e7:0f:50:6f:36:ce:
58:c2:d9:ca:d6:0a:ec:4d:78:13:ae:35:3d:14:43:05:51:db:
f3:d7:f4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:47:44 2025 by rpki-client