Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: ZmKTP0rp76iw/+GEuT2sZrLOAiKQEnU69akNXESfxtM=
Subject key identifier: 53:4D:AA:7A:B7:95:81:6E:BF:9A:03:AE:04:BB:B0:1B:D5:21:EE:8A
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 01978B47E133FB094B0A2390EC0F810B26F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: AC
Signing time: Fri 20 Jun 2025 03:00:33 +0000
Manifest this update: Fri 20 Jun 2025 03:00:33 +0000
Manifest next update: Sat 21 Jun 2025 03:00:33 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: NcCCEZ3YaxOavyqBsgCYnfKd/65wpQxdoFvU84kgIc4=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:e1:33:fb:09:4b:0a:23:90:ec:0f:81:0b:26:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Jun 20 03:00:33 2025 GMT
Not After : Jun 21 03:00:33 2025 GMT
Subject: CN=534daa7ab795816ebf9a03ae04bbb01bd521ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:5a:8d:0a:e3:1a:40:d3:1b:f9:72:63:f6:
d5:6c:a0:ad:45:d1:c7:fb:e3:5d:9c:8e:75:ca:67:
9c:d6:d1:57:43:85:a0:75:da:4a:41:a8:8d:2e:32:
28:5a:b7:15:53:03:c6:8f:97:ff:9f:00:0e:e9:cd:
83:fb:0d:52:8e:0c:6e:8e:c9:13:32:17:1c:19:a4:
cd:69:a4:95:8a:64:90:c9:5f:54:a2:54:38:ec:c3:
2c:72:e5:d1:28:16:b5:1f:57:87:2d:df:62:ff:16:
86:9b:9f:c5:d1:4d:12:1c:8f:ae:46:d9:d3:6b:80:
83:06:bc:82:51:c5:46:22:94:cc:9a:25:ef:0a:b2:
05:3c:2c:8c:8f:da:c1:fc:8f:bb:33:bd:49:a8:11:
50:fb:ee:b0:bc:1b:6c:8d:e3:a6:af:92:b1:d7:3e:
50:df:43:c0:74:8d:fc:e7:20:2c:1e:bb:39:ed:4b:
f3:92:ee:f1:dd:91:9a:41:c7:16:dc:9e:f0:21:7b:
e6:53:49:6e:ec:af:82:61:b3:85:4a:d2:36:ce:bd:
52:b9:b4:ae:46:90:fa:1d:f0:d8:9a:5c:ab:84:5e:
56:bf:d0:7f:03:64:db:db:45:2e:b0:ac:6b:a1:28:
ce:74:f3:75:01:6d:6f:8b:60:79:cd:2a:58:43:8b:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4D:AA:7A:B7:95:81:6E:BF:9A:03:AE:04:BB:B0:1B:D5:21:EE:8A
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e9:c2:8c:da:34:20:6f:99:8b:81:aa:d9:d5:50:4f:1d:7a:
d0:44:e3:e0:38:a5:18:42:39:a9:8e:e7:17:d2:89:96:86:f7:
7a:47:6d:0c:1f:b5:76:57:5b:ea:ce:f4:9d:a3:e6:da:86:f2:
44:e1:61:d3:26:d1:56:9d:21:b1:af:95:34:6f:f9:73:b4:2a:
d7:6e:f8:ec:fa:08:fd:97:41:fd:08:84:ef:f3:d5:76:9f:26:
46:9c:01:54:1f:43:b7:7b:34:15:65:63:97:d8:e0:16:eb:d2:
d3:66:11:be:3d:e9:ca:bf:e5:38:ed:7c:24:dd:59:5b:47:e1:
fe:be:23:ab:90:33:31:4a:0e:b3:a4:ef:a8:b5:94:35:71:50:
a5:eb:1a:8e:c5:00:f5:10:fa:cb:09:80:65:72:08:c7:d1:8d:
c2:c0:a5:2d:09:5c:93:4e:c6:52:d6:87:3f:95:85:a4:af:bb:
6e:bf:8a:82:05:82:49:41:a3:11:e1:f2:9a:77:2e:6e:00:a0:
52:71:5e:8d:76:c0:e9:14:7d:89:1b:ae:8f:52:53:a2:ca:e6:
37:ab:17:ee:91:bc:c6:db:87:4a:ae:2d:e9:50:dd:ad:2b:20:
27:57:a9:2a:8b:e8:74:86:57:9f:e4:c8:54:f7:15:1d:00:8e:
8f:90:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:19:55 2025 by rpki-client