Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: CPtzfznaYsWY4OpsBADy4PxFJWzvcdpMZ8AoZb5c7hg=
Subject key identifier: 79:CB:63:48:48:5D:B1:F1:57:B9:61:EB:FB:EF:E7:A9:5B:29:28:88
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019655A5F710721FE3FA57979159B15ED10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0EA1
Signing time: Mon 21 Apr 2025 00:01:02 +0000
Manifest this update: Mon 21 Apr 2025 00:01:02 +0000
Manifest next update: Tue 22 Apr 2025 00:01:02 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: 5fc+8XwhMcEewzCxgILoOv2wVs1cieUA08XbbMFm+Io=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:f7:10:72:1f:e3:fa:57:97:91:59:b1:5e:d1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Apr 21 00:01:02 2025 GMT
Not After : Apr 22 00:01:02 2025 GMT
Subject: CN=79cb6348485db1f157b961ebfbefe7a95b292888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:78:10:b2:9a:de:09:20:ca:08:32:57:d6:
25:59:66:b2:c2:e6:fe:02:2e:a2:2e:fd:d9:50:5e:
28:d8:69:e3:db:8a:d7:b4:34:92:38:c0:2d:1a:78:
29:21:6c:91:4f:d1:ef:a1:ba:91:92:b4:bc:03:ef:
69:56:d6:07:af:79:74:4b:ed:72:57:1a:61:48:a6:
6d:0c:64:6f:87:3d:c6:9d:c6:a0:3f:09:43:bd:b1:
f7:87:a8:ba:a9:ab:81:28:38:ba:8e:c2:be:f3:ae:
fe:19:77:94:3d:e0:5a:f9:68:0f:a8:55:46:dd:bb:
cc:b2:76:79:95:47:40:93:4a:36:5a:ff:cd:c3:d3:
ec:00:db:ab:10:ac:7b:8b:0d:d1:ce:8a:bc:6d:4c:
c0:a7:62:a5:1f:6d:e1:ba:80:20:20:da:15:95:13:
62:d8:cf:13:6f:75:19:18:45:6c:c1:68:02:e5:bc:
18:7c:12:f7:a3:5d:b4:05:43:4e:af:cc:02:5d:34:
1b:03:2f:38:47:91:ca:04:55:13:25:df:47:b6:c9:
dd:6f:da:8d:1a:ea:85:11:e0:bf:77:02:f8:88:e2:
0d:f6:36:4e:72:69:e8:98:7e:82:38:05:70:d1:68:
b6:b4:36:5e:bc:8b:95:10:c0:d2:a0:be:1e:24:47:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:63:48:48:5D:B1:F1:57:B9:61:EB:FB:EF:E7:A9:5B:29:28:88
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:17:16:97:aa:b5:37:4e:8d:af:3b:64:61:bf:0a:38:38:bf:
af:8d:b7:26:79:a7:64:bc:e2:20:7c:68:ea:6d:a4:97:3f:6f:
52:3e:61:45:53:af:26:33:96:af:18:8c:09:aa:69:fc:82:80:
30:05:bc:d0:05:8a:d1:f4:3a:72:43:97:9b:8c:33:9a:5e:d1:
22:dc:b9:7e:67:f5:48:05:5b:fe:70:af:b0:c8:04:8e:e3:97:
1e:c1:89:25:c7:41:5f:ee:5e:85:a9:23:67:cb:4f:10:b1:37:
9f:8e:91:be:53:aa:bb:13:fa:c4:07:34:1a:24:87:05:1b:17:
eb:2f:d2:80:68:45:1f:0a:cd:7f:17:c9:d7:93:10:ec:e6:07:
18:cd:a3:c9:50:58:6d:9d:e4:a4:92:3a:67:ef:f2:1f:e5:54:
90:d9:42:39:b6:6b:0c:a2:a8:c7:df:0a:33:16:a1:23:8d:ca:
08:7b:04:a6:08:9d:37:88:30:9b:1e:f0:b7:b6:f7:22:a9:23:
f2:49:2d:e9:8b:d8:95:7c:73:22:86:4a:8c:9b:d1:3f:6e:b7:
15:13:52:d0:79:bc:4f:01:79:ef:7c:9b:07:68:af:f1:81:eb:
31:d9:d1:11:6e:13:83:a3:62:5d:21:80:15:a8:25:9b:f0:4d:
49:03:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:33:53 2025 by rpki-client