Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: /gWLHe0uyuGyAMUzECeKouDv2Z78+DZ4m25+Plb/euU=
Subject key identifier: EF:47:BC:13:EA:E8:E7:8C:64:45:4D:7D:A9:20:26:48:32:E5:CB:47
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 0196790D66A51949F7D8F0BAB3271A073AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 21:00:43 +0000
Manifest this update: Sun 27 Apr 2025 21:00:43 +0000
Manifest next update: Mon 28 Apr 2025 21:00:43 +0000
Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: Qy160lA9IlcVL9YvzdSVBL7SAznG9/yJnlTi1wSVBTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:66:a5:19:49:f7:d8:f0:ba:b3:27:1a:07:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Apr 27 21:00:43 2025 GMT
Not After : Apr 28 21:00:43 2025 GMT
Subject: CN=ef47bc13eae8e78c64454d7da920264832e5cb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:a3:e1:a5:18:ef:42:10:fc:9a:53:6b:aa:
db:80:95:2e:68:d7:d3:1a:2e:69:0e:7f:3e:ea:d1:
ba:7a:d0:62:54:a0:02:c0:11:a0:63:1d:27:83:a5:
ba:eb:28:ca:90:1c:7b:0d:57:ad:fe:62:f5:fd:b5:
2d:88:2e:5b:3d:6a:c0:c4:f8:0b:a9:de:6b:36:25:
9e:c5:b0:b2:52:5c:13:27:d1:63:f8:c8:d0:22:4f:
d4:af:5b:4d:84:2c:66:86:66:55:18:c2:73:cb:b2:
fc:1c:78:3a:cf:51:0f:70:c2:60:6f:79:a4:0d:91:
0d:d7:58:81:22:61:27:58:37:5b:74:ee:98:9e:54:
b1:ad:1b:a1:85:7f:b1:a8:2e:96:2a:61:59:c3:84:
fa:4f:3e:10:5d:4d:af:c3:73:96:5d:75:f5:a7:10:
60:9d:db:85:7c:6e:e9:bd:f9:fc:d8:43:f8:bd:5c:
65:7a:83:3c:b9:f7:ce:3e:9c:45:a1:d0:1d:b1:10:
fe:30:ad:f4:fd:62:c8:55:eb:cc:4e:b9:53:94:12:
14:d6:1f:87:91:b7:a5:1d:ba:ca:62:c4:04:50:91:
e8:30:32:dd:3f:2a:12:20:24:3a:be:ec:30:aa:08:
de:c3:bf:fd:55:77:5b:4c:4d:d7:4d:bf:f2:34:40:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:BC:13:EA:E8:E7:8C:64:45:4D:7D:A9:20:26:48:32:E5:CB:47
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d9:f8:eb:ec:b8:d9:3b:1d:be:1b:e2:4f:ed:d1:71:c3:f9:
3a:aa:ac:a1:21:a3:cb:4b:06:80:aa:25:2b:8d:71:d5:61:17:
92:19:59:ff:dd:12:1b:5a:7a:fd:4a:8d:df:16:a7:95:81:fe:
e6:3c:88:da:65:99:69:b2:db:90:78:6b:30:eb:e3:60:40:77:
71:11:6e:0c:24:2c:b7:4c:6e:02:e5:36:df:96:cc:0d:b4:73:
3e:43:56:2b:06:b5:6a:4b:1d:2c:38:ae:0d:ac:8b:9e:f3:f9:
a5:eb:da:30:34:0b:07:bf:3a:79:62:d4:29:e7:c2:68:3b:38:
9c:99:d7:eb:d1:0f:0c:41:b2:1b:63:d8:35:c2:dd:1c:fe:57:
af:e8:39:e4:e3:c5:ed:15:fc:86:e2:c2:3c:a1:4c:6e:d0:be:
b9:0c:83:9d:4e:7a:98:8a:53:f4:ed:0e:1a:cb:57:a0:44:c8:
1f:ef:23:ed:1f:6c:c2:35:cf:5b:03:9c:65:37:2e:6b:10:0b:
1c:e2:5a:d5:18:e9:44:e6:d4:df:29:46:7b:cb:a8:6e:5c:8b:
15:5b:03:11:68:3d:bb:32:59:76:d6:1c:d3:33:7d:d4:4b:58:
49:80:48:80:be:40:a7:b6:fc:55:a4:e9:e6:ec:8f:67:c3:eb:
c9:1c:b6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:05 2025 by rpki-client