Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: iWhHZeAehlu8dtIynZD+fByGh0cekjtfji+lOtrmjy4=
Subject key identifier: C4:E8:87:47:80:95:E6:27:89:03:4A:F6:6E:2B:A5:63:B4:50:DD:BB
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019654C9B1E035E93E6D39122EDF33F767C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 01A3
Signing time: Sun 20 Apr 2025 20:00:26 +0000
Manifest this update: Sun 20 Apr 2025 20:00:26 +0000
Manifest next update: Mon 21 Apr 2025 20:00:26 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: Y0feBSPHP1a0bRyL03jVwo00uVBq8XjjE6LxtiuBSb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:b1:e0:35:e9:3e:6d:39:12:2e:df:33:f7:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Apr 20 20:00:26 2025 GMT
Not After : Apr 21 20:00:26 2025 GMT
Subject: CN=c4e887478095e62789034af66e2ba563b450ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:66:0b:db:99:a1:27:66:f7:42:24:fc:5a:
72:73:79:a0:6e:91:60:61:16:dc:a2:9e:3a:3f:a3:
5c:21:0c:3d:bc:5f:f2:7c:16:15:7f:bd:4c:23:a5:
cb:5b:4a:73:8e:1d:85:67:45:82:0c:88:0f:18:e5:
04:b3:5e:67:02:e6:c7:1e:b9:81:61:f7:16:b3:d4:
f2:e5:f0:ab:30:bb:30:25:ae:07:0b:3c:a0:00:e7:
c7:c9:41:b5:c7:bc:e3:aa:85:ca:e5:d0:2f:96:8f:
89:e2:f8:54:9e:82:b7:45:83:28:04:04:7b:a8:a9:
09:06:92:55:63:01:bd:4c:ea:f4:c7:56:ba:eb:e7:
55:d0:42:8c:d4:2f:dd:70:cb:a8:46:5b:70:58:f5:
74:52:75:14:c7:6f:f3:35:05:89:f5:27:23:57:ac:
8e:f1:69:03:8d:93:87:df:3c:eb:82:81:67:31:df:
e5:42:c5:fb:ab:2b:90:85:c2:f9:fd:e3:87:1c:14:
1c:85:43:92:4a:f6:56:5f:e4:a9:04:e5:71:fe:38:
29:e3:78:ea:5c:c1:2d:1a:8b:8d:b5:cf:60:8e:94:
32:1d:60:c3:98:11:fd:ec:d7:eb:19:da:e2:a8:7d:
be:7d:20:f9:b4:6d:ac:e5:25:3b:30:87:20:43:33:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:87:47:80:95:E6:27:89:03:4A:F6:6E:2B:A5:63:B4:50:DD:BB
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d1:57:9a:71:7a:71:86:ac:b6:ec:39:eb:21:0b:b8:a0:f7:
de:d0:5b:4c:53:48:78:41:69:05:bd:8a:76:de:4d:f4:21:9a:
4a:3d:63:1f:6d:3e:a2:2e:86:c5:25:21:80:a2:0d:39:3d:c4:
4f:ad:ae:90:ce:ae:27:1f:43:32:80:70:59:ae:81:45:c6:cb:
02:e5:1b:ec:db:75:d1:cb:96:ba:32:a7:2b:e6:c7:24:4a:d7:
5d:45:a8:46:3e:79:e0:1a:36:1c:7a:59:32:c7:63:24:d7:38:
e4:17:7c:b2:ef:d4:d2:bd:9a:b4:81:84:c9:85:01:0d:95:97:
e4:12:8b:22:2c:f7:8c:b9:ef:a8:8b:53:18:c0:7d:64:f0:3b:
b0:e6:7f:92:97:98:3b:63:68:d7:f4:5d:6b:b1:32:1b:75:21:
71:cf:44:46:31:70:dd:ef:83:6c:e0:4b:2b:7b:e8:31:88:f2:
c9:cf:87:a4:f6:c3:fc:86:39:3e:12:77:cb:99:a7:72:e1:52:
99:f3:15:3a:50:ac:98:b2:e8:9e:dd:d1:6b:19:17:e0:bb:dc:
23:4d:35:c7:19:ba:27:b2:85:d9:ed:df:c0:c9:d3:0e:ed:36:
d5:86:51:2e:91:a5:35:c0:9a:77:23:e1:f4:fe:c6:ad:38:74:
da:d0:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:27:39 2025 by rpki-client