Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
File: MQsFJRN4mUz6gIjSO27u1Onmqwg.mft (raw, json)
Hash identifier: xQjCXq66XJUmxsxEiBCZ4TfMNRD7xxqT25ifIpfu1k8=
Subject key identifier: D0:71:40:2C:8F:CB:07:E2:71:68:D2:DE:77:C0:45:9B:31:0D:51:FA
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 019683230ACAF4D3E9B20A381A76408DE3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
Manifest number: 0C5D
Signing time: Tue 29 Apr 2025 20:00:33 +0000
Manifest this update: Tue 29 Apr 2025 20:00:33 +0000
Manifest next update: Wed 30 Apr 2025 20:00:33 +0000
Files and hashes: 1: 59d3PdJCULjs4_4j0Pq3kDdHdgk.roa (hash: WpHyMpfUDziVYZlQft4BRU7sTsf5P29/Ozm59gpC8kc=)
2: 6LDl214tdgRqDXeipMWDYC6MczE.roa (hash: 6iTRq4SWdTYbbcVZs0aR+/CjpsQmsoJjLSF+hCyuqqc=)
3: 9lN7dlDX3E71wSCMtnCUL3i762k.roa (hash: PK7Bs+uxjjNwmQbjd0qP17GmCFFEEyTI74qIrN4mbzY=)
4: MQsFJRN4mUz6gIjSO27u1Onmqwg.crl (hash: HcPI+sd4+9SUDZ7kfGxeYPmVYIuZxcV2th02RpRNuWM=)
5: V1aKAeRzKiAfxQwmZqLiwau1Afc.roa (hash: uOqJXqZXJEKHIgf9RgAP09YH0XSJp9FEPHY/lnYPqVM=)
6: q1YDJvj7Veync8vosdT5MgsSZK0.roa (hash: 3i7G+FQ5wobaoWNPIaIt6Bd7iYj+i/vaW405OFJl0NM=)
7: vUXe4UE-m7T7Sv0xaYMUGHgE4MA.roa (hash: AdPCGM3ei+LC18k21pNOI6XK3Lgk8ww7/9XnwjRZjhk=)
8: wLfgq7vWp70i39_Nke8_uk9eElU.roa (hash: GZCR54lUGsKlHowA+Af3twHi7OaaWDsnjL5oscSHw5o=)
9: x02wwRJLWXkhho02hs7In5F9tAw.roa (hash: tCAs80Mhnn5ZbsqK3yFV+a3nsSOqYzSlvn1Cj5qDFLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:0a:ca:f4:d3:e9:b2:0a:38:1a:76:40:8d:e3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Apr 29 20:00:33 2025 GMT
Not After : Apr 30 20:00:33 2025 GMT
Subject: CN=d071402c8fcb07e27168d2de77c0459b310d51fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:26:fd:38:af:3f:34:54:e5:0d:b8:f6:41:
00:c7:a4:30:b2:8e:d6:e0:3f:5b:1e:19:10:35:72:
0c:79:83:ad:c8:2c:ca:01:26:f3:97:1a:6e:da:36:
8a:fa:e4:53:f4:dd:ab:c3:d4:e1:66:87:ad:42:3f:
47:2b:dc:a0:ac:3a:04:e6:9a:bf:79:35:6f:9c:56:
53:02:4c:0a:ce:29:01:ef:8f:0b:d8:82:f6:4b:c5:
be:d8:ba:b6:9e:a0:18:0e:bb:a1:ab:65:d6:52:1b:
f1:6f:4b:a2:9b:c4:29:36:bb:c4:78:fe:cb:09:45:
8d:f4:4f:42:9f:20:f5:45:70:c5:7f:c1:bf:cd:49:
ef:ea:6a:98:d0:bf:56:68:25:7c:82:e9:d7:21:a8:
f8:49:6a:80:1a:38:cc:20:ae:37:c1:c1:90:6c:5b:
46:82:58:be:80:8c:75:e9:73:38:83:71:17:73:ea:
22:20:f8:7c:64:97:fa:2b:d1:69:75:64:69:26:9e:
dc:ef:67:bc:c2:bf:a5:fb:71:a4:f7:b8:66:b1:91:
fc:b7:2a:cf:af:8c:30:14:c5:12:f6:21:af:cd:29:
58:9a:d6:9d:5e:7d:b8:2a:e5:93:2d:2a:18:1a:c8:
4f:b4:3d:92:97:5f:da:aa:4c:2c:90:41:a0:8d:b1:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:40:2C:8F:CB:07:E2:71:68:D2:DE:77:C0:45:9B:31:0D:51:FA
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2c:29:ea:f1:ca:96:2c:5d:2b:fb:bc:be:4d:46:0d:2b:37:
d8:45:9f:65:b1:2a:1e:52:57:ce:80:df:a5:6a:de:55:c6:dc:
5b:8a:b8:e1:1c:5b:6c:06:2e:72:e7:ce:78:0d:30:99:b1:30:
4c:34:3e:e4:8a:40:66:a1:73:bb:60:f7:4d:b7:ab:ee:2e:7d:
66:c4:26:0b:c2:db:d7:64:02:d5:e5:e4:b6:1b:02:87:d1:ca:
c9:0a:42:79:90:fc:83:51:95:c1:c0:09:92:4a:da:cd:91:d8:
86:9a:3b:20:64:d3:51:a2:7d:50:1a:24:f0:d6:89:7f:2e:67:
e4:ed:6f:34:02:6e:e9:d0:a1:03:1c:83:75:68:3f:10:71:7e:
88:4e:f1:a3:f8:ec:da:ed:b8:09:c0:50:ea:4f:8c:58:73:d3:
85:4e:7d:3a:d5:33:fd:83:ed:3d:1f:3a:24:4b:3f:ac:4a:a1:
12:c9:16:cc:0e:a1:b4:9b:9b:a3:d3:24:fa:59:fb:26:3f:17:
9c:97:bc:50:41:05:80:5b:f2:72:e9:5a:fd:d2:87:25:10:5c:
56:19:32:8d:c6:e1:a3:65:ec:bd:e0:ed:09:14:c2:b3:07:96:
47:6b:07:d8:0b:76:de:9c:fb:35:00:44:9d:9f:5a:f2:20:d6:
bd:db:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:59 2025 by rpki-client