Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: wILbNTX1rlCH79L7omMsZoIZtXY5qnWyjCFmO1RyuZ0=
Subject key identifier: D8:5C:88:53:46:50:C7:14:D7:5B:AA:2E:1D:02:28:14:75:F3:D2:48
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019673B01FFDC88ED2D4E1EBA76E4D1FD098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 01B3
Signing time: Sat 26 Apr 2025 20:00:44 +0000
Manifest this update: Sat 26 Apr 2025 20:00:44 +0000
Manifest next update: Sun 27 Apr 2025 20:00:44 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: BUemfDGLEbVQx9Mfrz1Vh09kbK0ecjFfFFjJszL0oXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:1f:fd:c8:8e:d2:d4:e1:eb:a7:6e:4d:1f:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Apr 26 20:00:44 2025 GMT
Not After : Apr 27 20:00:44 2025 GMT
Subject: CN=d85c88534650c714d75baa2e1d02281475f3d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:f9:41:1f:11:7f:5c:a3:5b:93:e8:79:a6:
3d:74:ac:48:29:25:02:23:be:f9:89:4d:49:ee:2f:
86:2e:8f:aa:08:ae:9b:53:71:4b:7c:b1:81:27:28:
9f:9a:33:23:34:ed:2b:de:06:f6:ba:c5:8f:5e:45:
d1:9d:c8:37:1e:90:99:cc:d1:fe:cc:0b:a4:90:9b:
c2:89:34:cb:95:9b:85:2d:03:93:21:de:27:05:b8:
ed:88:64:2e:a1:16:9f:71:36:d9:99:24:0a:1a:04:
f8:0d:e0:6e:03:a0:48:eb:c4:3f:40:8a:23:2d:ba:
3e:e1:85:13:cb:ab:85:59:29:a5:f5:4f:4d:b6:55:
79:81:cd:35:ca:a2:36:03:87:74:b7:0f:f1:a5:4e:
e8:0a:3c:e9:24:ad:d1:b0:95:46:af:14:f2:1d:b0:
b9:6a:4f:b0:5c:02:23:4c:53:f1:52:94:11:2b:4a:
8d:1c:71:1d:62:3d:d3:ef:86:cd:13:28:9b:e9:45:
56:18:6c:3f:87:6b:38:51:60:8e:4b:77:01:15:56:
de:f5:50:97:2b:61:fd:d8:75:4f:47:03:e9:7a:d6:
e1:7d:e8:dd:39:42:d0:72:7f:bc:77:a9:7d:32:51:
a9:35:d3:e9:10:10:16:21:80:5e:23:14:53:b4:77:
56:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5C:88:53:46:50:C7:14:D7:5B:AA:2E:1D:02:28:14:75:F3:D2:48
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bf:39:c1:0a:87:58:a7:88:1b:5d:29:9c:d8:45:05:1b:08:
8c:9b:28:08:7f:74:87:8b:f4:3f:3b:99:48:18:6c:79:c1:b2:
d8:2b:73:31:a3:54:c9:10:03:f8:32:14:41:d2:af:0c:fa:e0:
5a:3c:55:46:f6:62:b0:9a:e0:1a:7c:6e:da:39:a0:e0:d6:7c:
8d:87:d0:b6:aa:04:6e:de:b6:33:d4:0e:ca:8d:75:0c:d2:19:
5c:5e:48:85:fe:93:17:08:8b:8e:86:66:65:37:ac:5c:b5:f2:
69:18:d8:bd:5f:c6:6b:93:9e:c2:10:9f:f4:c0:12:30:43:39:
b5:db:dc:12:73:b7:82:ff:9d:31:05:6d:6e:83:2e:e0:9f:c9:
0d:27:92:3f:36:ee:3d:75:c1:30:b6:85:b1:65:3e:19:30:03:
b7:68:70:d7:2e:81:d8:92:a1:71:40:00:37:63:bf:1d:23:4d:
9d:c4:9b:85:3a:11:96:e9:3c:97:83:83:ef:91:23:20:08:45:
8a:55:ab:6a:aa:af:4a:39:35:14:10:42:d8:cb:79:94:3b:96:
3f:23:38:33:71:c8:77:32:3c:2d:74:ca:53:27:18:cd:6e:ab:
8c:44:ee:03:4b:18:e3:af:6b:4a:08:ac:9c:3d:9f:09:b0:c1:
f4:79:99:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzsB/9yI7S1OHrp25NH9CYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm
MTllZTAwHhcNMjUwNDI2MjAwMDQ0WhcNMjUwNDI3MjAwMDQ0WjAzMTEwLwYDVQQD
EyhkODVjODg1MzQ2NTBjNzE0ZDc1YmFhMmUxZDAyMjgxNDc1ZjNkMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5H5QR8Rf1yjW5PoeaY9dKxIKSUC
I775iU1J7i+GLo+qCK6bU3FLfLGBJyifmjMjNO0r3gb2usWPXkXRncg3HpCZzNH+
zAukkJvCiTTLlZuFLQOTId4nBbjtiGQuoRafcTbZmSQKGgT4DeBuA6BI68Q/QIoj
Lbo+4YUTy6uFWSml9U9NtlV5gc01yqI2A4d0tw/xpU7oCjzpJK3RsJVGrxTyHbC5
ak+wXAIjTFPxUpQRK0qNHHEdYj3T74bNEyib6UVWGGw/h2s4UWCOS3cBFVbe9VCX
K2H92HVPRwPpetbhfejdOULQcn+8d6l9MlGpNdPpEBAWIYBeIxRTtHdWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhciFNGUMcU11uqLh0CKBR189JIMB8GA1UdIwQY
MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt
NDM2MGVlMDZhMjJjLzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj
LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApr85wQqH
WKeIG10pnNhFBRsIjJsoCH90h4v0PzuZSBhsecGy2CtzMaNUyRAD+DIUQdKvDPrg
WjxVRvZisJrgGnxu2jmg4NZ8jYfQtqoEbt62M9QOyo11DNIZXF5Ihf6TFwiLjoZm
ZTesXLXyaRjYvV/Ga5OewhCf9MASMEM5tdvcEnO3gv+dMQVtboMu4J/JDSeSPzbu
PXXBMLaFsWU+GTADt2hw1y6B2JKhcUAAN2O/HSNNncSbhToRluk8l4OD75EjIAhF
ilWraqqvSjk1FBBC2Mt5lDuWPyM4M3HIdzI8LXTKUycYzW6rjETuA0sY469rSgis
nD2fCbDB9HmZMQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:51 2025 by rpki-client