Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: 7rZR/E4QWpuY37Go0rqUATODjkjendSX74vEw/OxZA4=
Subject key identifier: 20:08:20:5B:3C:D6:43:B4:C5:52:53:B2:5D:77:40:EE:D1:0E:3B:53
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 01965A5E4ADD4FF2626069B0B5892E1C1D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 22:00:51 +0000
Manifest this update: Mon 21 Apr 2025 22:00:51 +0000
Manifest next update: Tue 22 Apr 2025 22:00:51 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: QXe5HqGWLgRn0tP5jMKh2J+vWtaiwM2u8rrGRqMJiic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:4a:dd:4f:f2:62:60:69:b0:b5:89:2e:1c:1d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Apr 21 22:00:51 2025 GMT
Not After : Apr 22 22:00:51 2025 GMT
Subject: CN=2008205b3cd643b4c55253b25d7740eed10e3b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:bf:da:26:52:6b:13:f4:a3:57:18:69:c5:
54:ce:10:95:55:b6:f0:b1:6a:33:58:77:3c:d1:f5:
2d:9e:3d:fa:c8:49:3d:4b:ee:a6:af:bd:fe:2a:e6:
3d:81:4d:7f:b1:e1:1d:45:fd:bc:dd:66:cd:52:14:
89:89:59:6e:29:c7:7e:18:1b:39:44:24:ce:66:03:
eb:b4:a9:bc:67:c6:45:36:3a:04:95:7b:ef:b5:d5:
3c:ac:a3:e9:91:ba:74:9e:fa:53:5f:91:91:57:e2:
0b:8e:2e:77:e1:a9:e5:1d:c1:f5:23:98:88:5f:83:
d3:93:16:52:71:f7:85:21:d4:7c:7d:83:76:b0:96:
7e:9a:4e:6d:47:00:bd:15:e1:14:d3:01:aa:68:3f:
1b:09:fb:c4:fd:3d:aa:ad:b4:1c:dc:71:a8:4a:f9:
af:8f:3d:c7:ba:4a:56:f9:05:9e:9d:20:6d:c5:a4:
76:5b:5a:ab:24:ef:a7:91:3b:d5:74:75:33:1f:09:
ed:a1:ea:c0:c3:2c:34:ca:3d:8b:b9:6e:f9:84:92:
61:1a:27:49:29:48:38:67:ac:f4:b1:43:7a:6d:d9:
99:87:0d:d6:c3:3d:49:2a:e8:66:c3:bb:75:0b:10:
c6:12:54:73:f1:20:fa:ff:cb:09:d4:3d:38:d7:22:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:20:5B:3C:D6:43:B4:C5:52:53:B2:5D:77:40:EE:D1:0E:3B:53
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3b:47:8b:21:8e:1f:5f:45:4c:58:2e:fc:32:a9:fb:f2:d4:
88:01:c1:45:46:63:60:31:5e:16:14:f4:41:32:29:34:50:23:
54:de:0a:5d:02:f9:11:72:3e:c4:77:2c:5f:22:4e:5a:c3:3b:
37:ab:05:de:d3:af:53:fa:69:a6:85:ae:00:8d:1d:6f:d6:84:
fe:b5:61:55:d1:e6:b6:ab:66:6c:eb:7c:67:64:f1:69:2d:a8:
e8:f7:ba:d5:5e:1d:9e:db:b2:ed:e3:8a:9f:1b:33:a3:95:4b:
dc:f7:45:8f:9f:d7:d8:b9:7e:ad:22:ac:46:20:9a:c7:dc:12:
71:95:6d:ae:73:3c:e4:74:44:f1:18:8b:32:20:72:3b:da:1f:
7c:35:9d:4d:7f:d9:52:05:4b:81:d4:0a:bb:97:7d:81:7b:ca:
c7:1e:77:0e:2a:4c:d3:c4:8b:bf:22:75:90:ed:03:9c:3d:42:
71:5a:3f:30:04:50:53:06:01:5b:d6:11:b3:96:ae:dd:22:c2:
03:54:55:31:0b:a0:e8:86:80:87:c3:e8:2a:84:3d:03:dd:0d:
05:fe:b2:7a:fe:27:a6:9f:61:2f:17:c1:4a:b3:64:0d:ea:25:
fc:44:21:1f:0e:e1:19:9b:94:91:e6:71:c2:b0:32:f6:72:88:
48:c7:52:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXkrdT/JiYGmwtYkuHB06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmM2ZTA5YzE5MmM1NTgwYTRhMWQyOTQxNTBkNjIzN2Fi
ODkyNWQwHhcNMjUwNDIxMjIwMDUxWhcNMjUwNDIyMjIwMDUxWjAzMTEwLwYDVQQD
EygyMDA4MjA1YjNjZDY0M2I0YzU1MjUzYjI1ZDc3NDBlZWQxMGUzYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEC/2iZSaxP0o1cYacVUzhCVVbbw
sWozWHc80fUtnj36yEk9S+6mr73+KuY9gU1/seEdRf283WbNUhSJiVluKcd+GBs5
RCTOZgPrtKm8Z8ZFNjoElXvvtdU8rKPpkbp0nvpTX5GRV+ILji534anlHcH1I5iI
X4PTkxZScfeFIdR8fYN2sJZ+mk5tRwC9FeEU0wGqaD8bCfvE/T2qrbQc3HGoSvmv
jz3HukpW+QWenSBtxaR2W1qrJO+nkTvVdHUzHwntoerAwyw0yj2LuW75hJJhGidJ
KUg4Z6z0sUN6bdmZhw3Wwz1JKuhmw7t1CxDGElRz8SD6/8sJ1D041yIHsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAIIFs81kO0xVJTsl13QO7RDjtTMB8GA1UdIwQY
MBaAFJksbgnBksVYCkodKUFQ1iN6uJJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzIt
MmMxODkxY2FjYWM3LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85M2RkNDMtOTkzMy00MmNhLWFmYzItMmMxODkxY2FjYWM3
LzEvbVN4dUNjR1N4VmdLU2gwcFFWRFdJM3E0a2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTtHiyGO
H19FTFgu/DKp+/LUiAHBRUZjYDFeFhT0QTIpNFAjVN4KXQL5EXI+xHcsXyJOWsM7
N6sF3tOvU/pppoWuAI0db9aE/rVhVdHmtqtmbOt8Z2TxaS2o6Pe61V4dntuy7eOK
nxszo5VL3PdFj5/X2Ll+rSKsRiCax9wScZVtrnM85HRE8RiLMiByO9offDWdTX/Z
UgVLgdQKu5d9gXvKxx53DipM08SLvyJ1kO0DnD1CcVo/MARQUwYBW9YRs5au3SLC
A1RVMQug6IaAh8PoKoQ9A90NBf6yev4npp9hLxfBSrNkDeol/EQhHw7hGZuUkeZx
wrAy9nKISMdS+w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:48:25 2025 by rpki-client