Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: ooAPRxOFzQ/xGm6zN1CeWrnbIWtxtL4oCrj8NUbiu10=
Subject key identifier: DA:A4:80:B3:C5:E4:80:B1:CC:39:FA:79:0C:D3:43:F8:48:7A:9B:C2
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 0196767A51252D2CED3DC052CA4BFBFFC645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0EB2
Signing time: Sun 27 Apr 2025 09:00:49 +0000
Manifest this update: Sun 27 Apr 2025 09:00:49 +0000
Manifest next update: Mon 28 Apr 2025 09:00:49 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: K62tTUDwyUhA9BzeF0fbv7FRGchrv8a9wt9ggj4eDns=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:51:25:2d:2c:ed:3d:c0:52:ca:4b:fb:ff:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Apr 27 09:00:49 2025 GMT
Not After : Apr 28 09:00:49 2025 GMT
Subject: CN=daa480b3c5e480b1cc39fa790cd343f8487a9bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:fd:32:4b:56:62:fb:55:97:9c:bd:58:4e:
fe:6b:8c:86:34:89:8a:5a:88:77:17:ae:8b:0d:9e:
65:b5:58:87:79:b5:c0:34:4c:52:db:20:e3:9f:b4:
3a:b1:27:20:ba:c6:e3:6d:d2:f9:2d:30:7e:a1:0a:
0d:fe:39:5a:e9:90:13:21:95:b9:b8:d4:a7:1c:49:
51:fd:40:6b:28:3e:1c:e4:7f:a5:38:20:52:8f:7d:
7e:0b:bc:17:80:c3:53:b8:9d:ca:bb:dc:36:af:09:
e3:ad:5c:82:91:c1:a3:24:8d:8a:4f:b7:fb:95:71:
65:41:66:33:8e:c8:b7:17:0d:39:1d:4e:10:37:ad:
0f:5c:5e:87:7a:dc:f4:3d:9a:ac:d7:98:c7:90:52:
8c:03:f8:32:6a:31:3d:07:58:94:f8:51:ac:81:b1:
d2:97:0b:ba:af:e0:a2:39:10:cd:cb:71:a3:22:37:
77:e5:14:c0:fc:35:06:f1:16:5d:66:d4:1f:7a:19:
21:29:e1:43:31:f4:b7:b6:97:f6:f5:21:b3:f9:ea:
7c:1e:f2:9b:1f:9d:6b:34:c5:b9:ed:be:cf:9e:1b:
43:b8:80:b8:0b:16:7d:a0:09:ff:a1:0a:04:4d:cf:
e2:21:70:e3:f2:6d:b9:92:08:de:f9:af:c2:4e:34:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A4:80:B3:C5:E4:80:B1:CC:39:FA:79:0C:D3:43:F8:48:7A:9B:C2
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:b8:06:94:44:61:a9:53:ed:63:c0:e0:13:27:b5:56:12:
2e:9a:25:e4:67:c3:2b:27:1a:07:de:94:fa:64:96:34:9d:9d:
9b:68:b2:6e:d6:09:15:9e:03:62:c1:6d:ff:a1:a3:33:4e:e0:
1b:c5:1a:e9:8a:96:77:8c:19:d2:2d:1a:b3:25:90:c6:cf:41:
c3:4f:b5:ea:6a:fd:c4:e0:07:b3:e1:ea:89:cf:8b:02:65:29:
e5:a0:64:60:a1:84:2a:9f:18:7b:26:46:03:c4:78:08:fe:ab:
64:fc:c4:f2:b8:c7:14:03:3c:69:23:cb:29:1c:97:0a:c1:b9:
73:f0:0c:ce:f2:e5:cb:c0:bd:59:76:1d:4a:5f:5d:7a:9a:5f:
83:10:b6:89:92:5b:20:43:e2:89:80:1c:75:fd:fe:1b:42:d0:
1e:c0:72:64:91:f4:6f:ce:e7:e2:c5:99:3a:a5:9b:a7:a3:99:
3e:3f:8d:19:53:66:46:ed:fc:a5:e3:77:33:d0:63:10:6c:23:
39:4f:c1:52:78:4c:c9:a7:97:16:f7:03:dc:74:3e:0b:f9:25:
bb:d5:51:b6:34:2f:25:bc:51:f8:87:a7:65:53:47:e7:af:c3:
01:c0:61:b0:a4:cf:03:a5:ec:3d:75:85:8c:21:be:9f:e7:ac:
ea:d1:64:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2elElLSztPcBSykv7/8ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjUwNDI3MDkwMDQ5WhcNMjUwNDI4MDkwMDQ5WjAzMTEwLwYDVQQD
EyhkYWE0ODBiM2M1ZTQ4MGIxY2MzOWZhNzkwY2QzNDNmODQ4N2E5YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/T9MktWYvtVl5y9WE7+a4yGNImK
Woh3F66LDZ5ltViHebXANExS2yDjn7Q6sScgusbjbdL5LTB+oQoN/jla6ZATIZW5
uNSnHElR/UBrKD4c5H+lOCBSj31+C7wXgMNTuJ3Ku9w2rwnjrVyCkcGjJI2KT7f7
lXFlQWYzjsi3Fw05HU4QN60PXF6Hetz0PZqs15jHkFKMA/gyajE9B1iU+FGsgbHS
lwu6r+CiORDNy3GjIjd35RTA/DUG8RZdZtQfehkhKeFDMfS3tpf29SGz+ep8HvKb
H51rNMW57b7PnhtDuIC4CxZ9oAn/oQoETc/iIXDj8m25kgje+a/CTjSjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqkgLPF5ICxzDn6eQzTQ/hIepvCMB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsq4BpRE
YalT7WPA4BMntVYSLpol5GfDKycaB96U+mSWNJ2dm2iybtYJFZ4DYsFt/6GjM07g
G8Ua6YqWd4wZ0i0asyWQxs9Bw0+16mr9xOAHs+Hqic+LAmUp5aBkYKGEKp8YeyZG
A8R4CP6rZPzE8rjHFAM8aSPLKRyXCsG5c/AMzvLly8C9WXYdSl9deppfgxC2iZJb
IEPiiYAcdf3+G0LQHsByZJH0b87n4sWZOqWbp6OZPj+NGVNmRu38peN3M9BjEGwj
OU/BUnhMyaeXFvcD3HQ+C/klu9VRtjQvJbxR+IenZVNH56/DAcBhsKTPA6XsPXWF
jCG+n+es6tFk3w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:55 2025 by rpki-client