Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: Wa7dfNBHU8GILUBk3tLUZIpO3Clene8H4Zj+lYZIEq4=
Subject key identifier: 47:3A:06:A3:9C:2B:32:5F:78:02:F6:57:AA:7F:1E:F6:35:38:CC:86
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0196760CDEA9C17ACDC8DDE86D30669864E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 07:01:16 +0000
Manifest this update: Sun 27 Apr 2025 07:01:16 +0000
Manifest next update: Mon 28 Apr 2025 07:01:16 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: 92PaisvFGeQQx5O+RMsOyeV/YSIf4eDCdFl8vpOeVKY=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:de:a9:c1:7a:cd:c8:dd:e8:6d:30:66:98:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Apr 27 07:01:16 2025 GMT
Not After : Apr 28 07:01:16 2025 GMT
Subject: CN=473a06a39c2b325f7802f657aa7f1ef63538cc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:ca:4a:ef:01:63:ac:f3:67:4d:a1:d9:47:
59:cc:1e:69:37:b8:bc:dd:a7:d2:6f:5e:66:2d:4b:
2a:a3:f8:b2:33:42:0b:34:db:50:4e:36:3d:22:29:
45:39:77:a8:dc:a5:10:17:98:cf:1f:ba:9c:11:c7:
16:ed:01:fc:04:ca:c4:63:9c:8e:3f:d2:c6:de:e3:
55:48:d4:48:07:77:5f:9a:87:b0:84:ea:0d:90:a9:
5e:04:af:29:49:e4:d6:4d:48:c2:10:ae:8a:85:ff:
db:15:a3:d1:10:e6:55:68:92:c9:2b:cb:ac:2b:27:
e1:d2:2e:3a:af:f6:24:db:1c:b3:46:c0:8d:25:2d:
23:d0:f4:77:56:2f:ea:17:8c:6a:08:ae:8f:f9:56:
2c:fd:fa:42:da:ea:9c:6e:87:14:1d:39:94:a4:88:
2b:f8:d6:4e:4d:df:7d:24:c3:84:01:c6:eb:46:d4:
3a:23:b0:09:af:b2:79:a1:c6:a1:2f:ad:e5:9a:f6:
10:29:0a:b1:b7:49:60:2e:cb:97:c6:1d:d5:07:0f:
dc:59:c1:d7:40:ba:75:02:8a:25:ba:7a:73:da:0f:
60:43:3a:d4:99:a2:e1:71:f7:93:1f:9f:e6:05:b5:
c6:62:f4:76:3f:fd:70:71:54:c0:10:da:58:02:bf:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:06:A3:9C:2B:32:5F:78:02:F6:57:AA:7F:1E:F6:35:38:CC:86
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:6e:f1:0d:ef:9b:e9:37:62:a2:3f:71:6d:e7:d7:bd:8e:
75:06:3b:9f:bd:89:53:3b:ff:6e:b4:5a:8f:37:1f:3e:3f:d1:
d5:29:90:17:7c:8d:ba:a1:39:8c:88:18:f1:3c:90:c4:ed:e9:
b4:1b:b7:6f:84:e0:e5:e6:a3:e5:16:13:3f:c2:23:19:13:b3:
fa:ec:3b:6d:fb:51:64:84:af:51:88:e0:ce:a5:87:ec:fe:e2:
fc:e2:ab:6b:1a:83:e0:c7:70:83:21:3d:f2:1d:0c:bf:be:c2:
6a:55:d1:3a:56:21:9c:33:de:59:82:a7:8c:57:7e:eb:2b:6f:
de:0e:ec:d8:55:72:91:a1:30:00:ff:72:a6:7e:4c:cb:2b:5a:
d8:8c:db:60:81:ba:0a:51:7c:15:7e:71:55:7d:8a:d6:04:93:
1b:06:dd:44:98:77:f2:65:a4:5f:cd:32:ef:ce:4a:88:17:ed:
f0:54:be:ae:62:a8:53:48:df:c6:0e:94:39:2d:5e:f6:c2:fa:
ac:ff:00:a7:5c:d8:12:e8:2a:92:d0:5f:a1:38:2e:d5:c0:5d:
0c:58:86:97:67:0f:7f:bc:36:b0:c9:0c:9f:52:76:4d:3f:cd:
53:31:0b:26:74:2b:d3:70:a0:f7:e6:cc:da:e2:08:f5:5a:af:
54:2b:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:49 2025 by rpki-client