Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: 9kTSnuAeRauiWYJuBlpO5vbyqJRsFWW9UJoNFOodd4A=
Subject key identifier: C6:6F:CF:23:A3:93:9E:24:75:B3:C3:27:8C:40:5D:11:76:B8:E5:B8
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019686FFA680093C4BCFF7C30F8BA50BD8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 050E
Signing time: Wed 30 Apr 2025 14:00:23 +0000
Manifest this update: Wed 30 Apr 2025 14:00:23 +0000
Manifest next update: Thu 01 May 2025 14:00:23 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: DffM7sV4UHrspXquRj5z2dp1EmWZXjwSUfsT4UthJtA=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:a6:80:09:3c:4b:cf:f7:c3:0f:8b:a5:0b:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Apr 30 14:00:23 2025 GMT
Not After : May 1 14:00:23 2025 GMT
Subject: CN=c66fcf23a3939e2475b3c3278c405d1176b8e5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:0b:8f:6d:c9:6e:2b:24:f7:ea:23:09:b0:
09:12:e3:6c:44:4b:44:47:35:9b:f5:66:57:13:de:
c2:9f:23:9c:7e:53:a0:da:5d:e2:8b:7a:f5:c7:78:
d2:ee:c0:e9:77:8b:1e:47:a5:63:1b:48:95:9c:4b:
4f:fb:03:13:e5:d9:cf:71:c9:ef:c6:1e:97:2a:f1:
38:59:ef:2a:7b:91:de:83:12:02:b2:86:6e:f3:9b:
71:fd:03:a5:90:9f:7d:fc:7b:cf:2f:32:1a:9d:7a:
6c:79:72:81:21:e1:74:ac:02:21:a2:6a:0b:41:3b:
3f:12:f6:c5:46:67:6e:a5:38:6b:7a:05:e3:20:df:
82:6a:dc:82:2a:37:85:81:11:14:6a:56:a5:f4:91:
f6:35:7e:2e:4a:85:2f:61:cb:7e:46:71:a8:42:fb:
a1:84:83:64:51:c1:50:f8:88:7c:af:17:16:d6:97:
75:0c:47:69:05:5b:45:4f:04:fd:be:c8:b3:12:c3:
68:0f:81:85:52:f0:1b:6b:78:7d:ff:c0:1b:fb:d8:
2a:52:a7:70:29:70:71:95:81:9d:2c:ec:5e:9d:69:
03:c5:28:4c:0b:2d:d5:72:84:d5:3b:8c:cf:ba:cb:
16:0a:13:40:df:0e:ee:f3:b9:f0:be:05:14:ad:dd:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6F:CF:23:A3:93:9E:24:75:B3:C3:27:8C:40:5D:11:76:B8:E5:B8
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:05:52:9d:39:5d:07:0e:6f:f8:4d:f4:f4:24:0f:2c:63:
df:f7:8b:3e:d4:c1:68:fb:f6:44:24:b2:48:2f:93:00:81:28:
d3:8d:85:ed:b1:4c:5e:4c:7a:45:27:51:a9:1f:70:5f:ba:34:
5a:95:fa:7c:b9:87:fa:36:76:61:71:f2:49:ff:1d:24:59:e4:
d6:d4:42:2f:f9:69:d6:a9:5a:10:9f:dc:b7:94:97:ec:d3:38:
05:52:67:40:b4:b9:f0:68:d2:f8:ec:19:31:1a:89:dc:e6:1e:
82:09:3f:75:58:c0:c8:40:5e:7d:9c:aa:72:7f:08:86:53:c6:
49:ea:61:0e:2d:3b:ae:94:2d:51:29:31:65:4b:93:3f:c4:01:
2a:2a:e2:67:98:49:64:39:21:86:aa:ad:d1:fd:64:6c:42:e7:
df:48:26:e7:2e:75:d7:75:36:6a:ed:48:b1:b4:d4:68:9b:46:
14:52:9f:69:78:3b:22:6b:d5:59:86:04:c0:2a:98:62:7e:29:
ba:71:ff:ac:78:83:a2:84:c5:83:88:76:81:4a:df:72:af:ea:
e6:55:f4:b6:b5:ce:37:98:31:18:9d:34:bc:66:6c:c4:67:8d:
69:6d:c8:b5:ec:70:eb:a8:d3:f7:48:20:a7:5c:ad:fb:97:1f:
64:9e:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:13:53 2025 by rpki-client