Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: P0io5V8njnDOeuvELv9T4VqULHjEtWpe8AbwrHjl9Vs=
Subject key identifier: 76:D4:91:E6:0B:62:58:82:46:AA:5B:FB:39:C2:F8:73:86:35:81:BD
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01967A8DCEAFB9B27E8BDCD19D1227E66078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1539
Signing time: Mon 28 Apr 2025 04:00:35 +0000
Manifest this update: Mon 28 Apr 2025 04:00:35 +0000
Manifest next update: Tue 29 Apr 2025 04:00:35 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: J7aiGKqWZD+R7weRI7DhlF81NFkObwlfvajlLUGHIqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:ce:af:b9:b2:7e:8b:dc:d1:9d:12:27:e6:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Apr 28 04:00:35 2025 GMT
Not After : Apr 29 04:00:35 2025 GMT
Subject: CN=76d491e60b62588246aa5bfb39c2f873863581bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:05:37:4a:fe:15:28:f0:c3:52:47:09:80:
00:d5:ac:95:91:f3:82:7d:21:01:c6:ca:7e:f5:d2:
0f:f6:de:c0:74:30:05:aa:ad:d1:23:7a:a2:02:fe:
79:2e:9e:d9:31:b6:99:93:a3:40:6b:b4:d4:53:bd:
22:c2:f2:18:8a:0d:1d:55:03:de:24:73:0a:b9:66:
c4:a2:a3:32:8d:68:59:06:34:5f:7a:aa:c9:2c:27:
90:2d:ca:ea:e1:5e:6e:4c:a3:af:72:65:08:df:47:
16:9e:a1:d8:a5:8e:30:78:22:b0:90:39:e2:e4:33:
e6:94:f5:a4:91:11:77:b1:71:2e:cb:dd:80:f9:75:
77:69:02:d7:50:37:46:f1:1e:16:9b:35:a7:88:5a:
98:82:71:44:19:87:66:36:e3:db:2f:fa:a4:58:3d:
e9:cd:49:c1:80:18:44:e2:82:e8:4a:c9:21:63:be:
b5:fd:f8:5e:c1:da:be:c9:ef:b5:97:63:78:4a:ad:
95:c2:2c:d2:cf:7f:49:e7:e0:bb:9f:4b:b1:12:e2:
6f:2c:5c:3e:fb:b0:59:0d:e8:c6:24:fc:af:5a:f2:
67:30:c1:89:d3:ec:fd:79:27:db:80:2e:54:b6:8a:
d5:1d:9c:40:fe:d0:bc:a1:7f:8f:2b:08:d2:b0:2f:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:91:E6:0B:62:58:82:46:AA:5B:FB:39:C2:F8:73:86:35:81:BD
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:55:97:81:42:53:10:3c:12:3e:6b:f1:a1:93:01:5e:39:
bd:40:c7:55:5c:c1:26:98:df:d1:1e:7e:d9:aa:f5:17:70:dc:
f8:6d:f0:a6:b4:9b:0c:7a:0f:b4:3a:24:82:90:6c:02:f4:11:
3c:49:5c:2f:95:fc:60:61:cc:be:7a:e7:46:1d:af:31:1c:5f:
fe:0b:f4:96:b0:a4:cd:d0:05:29:97:5a:f1:1a:8e:f8:c9:31:
88:21:05:c0:9f:75:c1:01:d1:c3:26:04:9c:73:36:23:13:9d:
d3:24:71:da:bd:30:2e:25:5f:73:ac:c6:4f:10:b1:1e:bc:5a:
8d:0d:18:70:cc:36:13:43:7f:ca:09:5b:42:39:d4:b9:74:c3:
c4:ae:d1:8f:f0:df:d3:d5:81:6a:6e:5f:b0:38:09:49:dd:e7:
7a:95:b3:32:00:07:cb:fd:c5:42:a3:df:1e:7e:56:41:35:1c:
17:11:c9:68:da:65:49:ec:c5:4f:5a:fc:ec:b9:c7:c9:e5:3d:
e1:f4:15:d5:e2:6b:c2:5d:00:fe:ba:9b:50:23:03:cf:5e:be:
53:ec:88:8a:70:8a:d7:04:29:7a:7a:6a:d2:66:05:74:16:77:
aa:ea:36:25:8e:c7:50:9d:ec:58:7d:88:84:37:90:ce:f1:0a:
b2:55:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:45 2025 by rpki-client