Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: 4+Hqg/84RQHd2MW11auKYE1zqkA9k45amfMv4kJRnao=
Subject key identifier: 27:FF:D6:F5:72:FF:31:C8:9B:78:1D:1D:06:83:5D:B9:9A:94:5C:88
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 01974A0C832BE3907CA663F02A7D7DDC9A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 0222
Signing time: Sat 07 Jun 2025 11:00:23 +0000
Manifest this update: Sat 07 Jun 2025 11:00:23 +0000
Manifest next update: Sun 08 Jun 2025 11:00:23 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: 3peyNFWsc9/h2Fw27XTsHfq+OD5zBh4NzsnrGpVTX9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:83:2b:e3:90:7c:a6:63:f0:2a:7d:7d:dc:9a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jun 7 11:00:23 2025 GMT
Not After : Jun 8 11:00:23 2025 GMT
Subject: CN=27ffd6f572ff31c89b781d1d06835db99a945c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:6c:ff:c9:58:2b:11:e7:3b:ea:66:55:64:
e1:6b:f3:9f:d5:5f:28:0f:97:57:94:21:d0:7d:9d:
5f:ac:2d:7d:13:5c:ad:10:19:24:9e:2c:c4:b8:57:
c8:16:a5:68:16:56:62:21:42:8d:5b:e1:70:ca:33:
86:29:74:2b:c1:fa:8d:01:36:e1:04:ee:29:12:02:
03:64:66:cb:e1:64:68:55:95:c0:bf:e6:5d:fb:3a:
92:9b:f7:7f:f8:09:8e:45:d5:2d:e1:f6:b7:6c:ff:
e8:c8:0f:43:ae:91:1a:10:e3:45:1a:fd:f5:55:ed:
86:8f:84:be:e5:91:4f:92:af:ab:b0:d5:fe:10:93:
c2:4c:c6:d4:a6:38:62:0a:ca:ce:01:47:d5:ad:e8:
cf:9d:bd:de:0c:56:ed:68:a5:37:5a:71:d9:56:da:
b7:28:4c:36:70:91:93:2a:37:9c:29:39:52:2b:18:
4e:d2:a1:b4:10:0b:07:67:e1:bb:8a:44:4d:71:07:
11:6e:c6:61:fc:00:c5:cf:70:12:15:36:8c:cb:56:
ee:38:a0:33:c7:84:23:be:c8:fd:f6:de:60:e9:4d:
46:ea:bf:c9:67:55:5f:b0:e5:0c:46:19:67:67:75:
fc:71:ab:61:18:96:b6:46:3d:cb:e7:4f:b3:88:fd:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:D6:F5:72:FF:31:C8:9B:78:1D:1D:06:83:5D:B9:9A:94:5C:88
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cf:bc:fd:fd:7d:a6:90:5c:84:04:2c:a7:70:de:5e:33:10:
36:bf:3a:36:71:57:00:7f:18:60:9e:e8:36:db:80:90:67:65:
72:17:81:52:49:d1:e0:1e:4b:80:62:ff:46:8c:af:6d:f0:44:
06:46:62:63:68:77:a9:de:de:f7:f8:51:2e:ba:bc:37:b3:e2:
7e:ba:59:34:d3:05:be:76:4e:3f:2b:84:c4:42:ee:72:7c:2e:
35:0c:c3:fa:99:fe:b1:b6:f1:17:f8:8b:6c:24:1d:99:fc:c7:
3b:63:25:6d:5a:67:77:47:2d:52:21:44:05:b4:e0:b2:f9:56:
9e:06:08:91:a6:ad:36:0b:fb:57:93:4e:1e:88:89:57:b8:20:
13:d1:10:5d:5e:e5:18:4e:54:bb:5b:35:ed:8e:35:4b:ee:99:
e2:1b:ac:82:56:b7:21:81:1a:3a:dd:46:7e:48:e2:fa:be:2d:
6d:7e:c5:68:81:b3:94:6f:5e:31:9f:ce:93:d5:e6:54:4c:da:
e0:32:72:98:6d:17:ae:ea:9c:6d:80:75:65:77:ef:cd:29:6f:
a6:25:9f:3e:16:2b:b6:23:6b:b9:8a:aa:b9:cf:d1:96:0b:f1:
1a:58:60:c6:23:81:bd:5a:3c:3a:89:34:16:fd:c5:89:3c:be:
93:05:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:22 2025 by rpki-client