Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: 4z8TApNTIyf9EM/aYt81fYzfSym61jviB1Mfqqb0QKU=
Subject key identifier: CE:74:D8:4B:6F:7C:9D:7C:90:E4:1A:AD:C1:FE:F4:65:38:00:12:D0
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 01964D103ABB2EC2F67D2998FC7902CBFAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 08:00:31 +0000
Manifest this update: Sat 19 Apr 2025 08:00:31 +0000
Manifest next update: Sun 20 Apr 2025 08:00:31 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: uBrhcQVdUqgTyC9eq030bJd/NuBKzm6rrlB9dw+GCaw=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:3a:bb:2e:c2:f6:7d:29:98:fc:79:02:cb:fa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Apr 19 08:00:31 2025 GMT
Not After : Apr 20 08:00:31 2025 GMT
Subject: CN=ce74d84b6f7c9d7c90e41aadc1fef465380012d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:78:5e:62:e9:25:93:e8:3d:a8:b0:a5:36:
a8:2f:9e:fe:c2:a8:d0:21:ba:59:bb:0c:e1:7c:d6:
83:1c:5f:69:ba:4f:7c:0f:ba:fb:05:f4:a5:95:4e:
22:9a:c4:41:25:7e:5a:b7:05:e5:1e:1a:9b:49:38:
4e:2a:c1:05:5a:bf:f6:b9:ab:1c:c2:c7:f8:64:a9:
c7:43:cd:ef:66:de:a4:fc:9b:cb:20:ca:6a:28:2c:
23:be:d5:ae:ee:0a:17:54:0a:88:af:8a:d2:6e:00:
60:14:4c:ad:54:96:42:bc:15:4d:fc:f7:0f:5c:28:
d5:73:eb:42:f6:83:01:13:05:69:d9:88:b8:7d:ef:
0e:7e:9b:e6:3f:8d:ef:f3:cb:1c:df:c0:8c:6d:77:
6c:1a:c7:a6:28:45:81:de:1c:3b:d7:e6:32:e7:22:
df:97:33:f1:d6:45:7e:a2:3a:9a:4b:48:86:7f:0d:
f7:11:9a:89:3b:15:cc:f8:83:14:05:e7:48:ee:52:
53:a8:2c:74:0e:5c:29:05:54:d6:43:21:66:af:ee:
6f:40:bc:18:f4:34:15:a8:83:92:6c:19:a3:d6:4b:
4d:2c:aa:bb:83:75:ff:b9:12:09:2d:4a:08:52:35:
39:12:81:a7:92:0d:a1:4f:24:52:95:77:4c:f2:3b:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:D8:4B:6F:7C:9D:7C:90:E4:1A:AD:C1:FE:F4:65:38:00:12:D0
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b5:d3:21:1f:07:a9:af:50:54:2c:15:12:01:8c:b2:f8:05:
61:4c:3a:cd:c2:db:fa:f0:a3:fd:b5:76:a8:98:f4:b0:bc:ee:
19:08:7a:ec:46:06:0b:d5:84:c9:22:e5:09:35:43:65:86:f7:
dc:96:1a:41:60:e5:1a:ef:55:7a:68:c4:9c:9c:ec:a7:75:d7:
a9:40:37:24:aa:ba:f8:be:a6:02:d0:b6:11:6f:ca:e9:85:72:
33:b2:a8:98:3c:15:e4:33:cf:56:40:87:6f:01:a2:ed:a4:ab:
0a:c8:b9:27:cb:55:a1:34:8c:7d:6c:5f:cd:5b:ca:d9:af:95:
8c:5d:73:a3:a6:93:01:9d:b6:55:72:b0:23:e9:84:47:47:40:
9f:6b:ee:fd:52:95:35:61:df:d5:1c:9c:c3:1b:c8:59:b7:fe:
63:1e:d9:84:23:1a:f4:27:6c:de:f0:c7:89:ef:2a:53:b2:22:
19:36:0b:dc:ae:8f:2c:c8:b1:3f:89:aa:84:c6:89:7f:b7:6d:
32:e4:6a:5a:d3:4e:cc:c5:6f:a8:09:50:1d:15:5d:f1:cf:8e:
ec:78:4a:52:81:66:bb:fb:31:f3:81:42:26:25:00:26:3b:c7:
9f:81:86:43:54:72:33:e9:fa:07:10:1a:9e:5b:50:92:11:5b:
69:5e:57:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:57:39 2025 by rpki-client