Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier: tpEN1btuHezPn+bLriYPZDY6HN6m9SIAGvDCV7QO9eI=
Subject key identifier: 86:BA:A5:74:D3:18:2D:5D:CE:8F:BC:29:3B:FC:C3:0B:AF:BC:41:06
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial: 01964DEBCD91B7154108FF9BA5540F6AA3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 12:00:21 +0000
Manifest this update: Sat 19 Apr 2025 12:00:21 +0000
Manifest next update: Sun 20 Apr 2025 12:00:21 +0000
Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: UasskKImMcq+odMN6596KImcmATflH18M39rkJfbGmk=)
2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:cd:91:b7:15:41:08:ff:9b:a5:54:0f:6a:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Validity
Not Before: Apr 19 12:00:21 2025 GMT
Not After : Apr 20 12:00:21 2025 GMT
Subject: CN=86baa574d3182d5dce8fbc293bfcc30bafbc4106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:6b:09:46:f9:43:5b:be:85:51:96:25:9a:
cc:bc:5a:b7:31:90:6f:ab:28:d5:48:c4:29:43:47:
5f:d8:f0:b4:ff:98:f4:d2:4c:da:46:5f:f2:d2:0c:
fb:2b:4b:28:ed:9f:3d:29:dc:a7:fd:e4:54:7b:53:
7f:93:cd:d1:80:77:14:a6:ff:47:25:2e:3d:d3:07:
a8:1e:2c:1f:9e:dc:1a:69:da:4e:c6:90:b9:35:15:
9f:c2:fd:ab:b1:c7:6e:7c:b3:8d:91:47:6a:2b:bb:
ae:b6:60:28:d9:28:65:38:a1:09:e1:2d:7f:c9:8c:
ea:bf:bb:df:d5:e9:57:44:04:e7:4c:5b:5c:a6:38:
4e:69:ef:87:8c:81:9c:47:68:55:df:f9:57:3c:e3:
fd:bc:f4:67:5d:df:3f:9d:a4:a1:13:e5:93:c0:44:
98:8a:76:d3:da:e5:3b:f3:56:c5:05:bf:1d:3a:a3:
54:fe:2b:19:6c:73:2d:81:ae:25:c8:08:05:c5:d5:
d9:0a:b5:f6:c6:e6:c3:bc:32:a8:3c:cd:4c:c5:36:
2e:39:46:9c:56:8c:81:7b:d8:4f:b8:0e:56:cd:54:
f8:5a:7c:3e:d9:c4:09:4b:25:db:43:33:c7:88:21:
14:cd:d7:00:87:34:5c:6c:b0:ef:d0:9d:68:66:51:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:A5:74:D3:18:2D:5D:CE:8F:BC:29:3B:FC:C3:0B:AF:BC:41:06
X509v3 Authority Key Identifier:
keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:a6:e2:2a:d9:32:45:fd:55:ca:c1:4a:a7:5d:1e:00:ea:
f9:df:b4:61:40:27:99:a5:df:16:f8:61:30:0b:8f:77:ea:3a:
56:8b:9c:4e:14:db:f1:21:99:c1:7a:e9:81:ac:fc:26:6a:c8:
e9:ff:79:38:96:b9:c8:dd:78:cc:5e:eb:52:60:8f:90:06:b9:
3e:13:fa:6c:2e:e8:2d:1a:92:4d:0e:fd:11:5d:da:40:4e:34:
59:f3:0f:85:3b:37:4c:e1:87:05:bd:f5:61:f6:8b:9b:b5:cd:
c5:29:b7:8f:f3:58:38:23:fc:2c:86:16:c3:4c:a6:f7:ea:07:
f6:fd:d3:ba:2d:3b:11:eb:50:24:1b:52:57:1a:78:fe:5f:6a:
c3:9d:74:0d:2b:85:92:2a:99:03:14:57:15:69:3e:15:4c:71:
2c:d9:2f:bd:45:5b:66:06:8d:27:23:24:49:39:06:07:af:7a:
13:81:58:68:2c:cf:01:dc:8c:0a:91:9f:41:3e:9a:56:b4:42:
cd:51:3b:b8:fc:9b:b6:58:a2:4f:f0:79:7a:b4:a2:9b:c9:cf:
a6:18:8c:7a:be:53:f2:ce:11:63:f0:49:20:4b:7c:d5:d8:c1:
8b:81:eb:30:30:ea:34:4e:37:1b:0c:6b:0e:e8:3a:e0:1d:04:
af:79:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:08 2025 by rpki-client