Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json)
Hash identifier: 2fyqD+n608WPgKMmeHbWme9zTQlYZfklCQnG7Abq4rU=
Subject key identifier: 8D:02:B2:19:58:4C:21:76:B8:04:FF:B7:9C:F6:1E:98:35:B9:AF:6C
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 0196B9DAB52C8C3F6305638B8BA2DE6EDBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 11:00:40 +0000
Manifest this update: Sat 10 May 2025 11:00:40 +0000
Manifest next update: Sun 11 May 2025 11:00:40 +0000
Files and hashes: 1: L6UZeUjVK5OZ7-mZGSjtJGUXkeo.roa (hash: zQv0Jn9i8JzxV9AzBkluRvg9IIcuWJrvzIFoMGo/YiA=)
2: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: 3nbueI6AiFeZBhyfgxM+PLhzAMikgW9B8HNMjk7u9u4=)
3: cE9MAqwQ5qMGLkrFZGC06olWNS8.roa (hash: qikuqaUY8ZBatuemuXHDbHFmATqYtKgaMBnCotzhBRQ=)
4: eNulQrWkb7XXGYDw1_7yfQtfyjU.roa (hash: wqv9AveypucRXaFrqiWm0EqnYUR4U6N703H9MjT8w5I=)
5: ebOku8xEI298KvY-nyvK9tWb6FA.roa (hash: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=)
6: nOavIXppWmDFhXdDEZ0V1cMIqeg.roa (hash: uLvOIw0+fU0FW9oyjgIp/2zVisu3plAWDz1d4aRwn60=)
7: s9a3pEKBSyjyYAsrYAxiAEP4mCU.roa (hash: 0FpwdS9NLp08wzi3cGdRZXNNnpCGm190316Q+yHGVNo=)
8: v2JqIJBq3wJphTAbwK0-g33RShA.roa (hash: i1c3+hUzjW7SLy+JaUh7BqmO9B9VdI9iEDnKvNZU/ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:b5:2c:8c:3f:63:05:63:8b:8b:a2:de:6e:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: May 10 11:00:40 2025 GMT
Not After : May 11 11:00:40 2025 GMT
Subject: CN=8d02b219584c2176b804ffb79cf61e9835b9af6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:4c:8e:85:3e:8c:ac:f9:ea:b6:8e:be:a4:
87:ce:69:f4:c4:ec:21:c3:e0:b4:d9:04:94:8f:78:
c6:64:5b:97:c2:67:1f:fc:b7:1e:61:23:3f:01:6c:
cd:e0:31:80:d6:96:22:f8:ae:60:2c:35:96:20:2e:
7a:e7:17:65:32:22:5c:07:96:7c:7b:c6:a4:b2:97:
62:35:72:70:f5:90:c0:87:f3:a2:c8:04:6e:54:17:
c3:33:70:c8:43:18:75:f8:e0:e5:87:55:f6:e5:86:
51:f0:02:30:1e:05:4c:7f:34:1a:f0:b9:26:b7:2a:
5e:d3:82:92:9c:c7:77:35:39:89:0e:f8:3a:9d:65:
41:c9:c2:c9:07:b1:bd:f6:0c:33:b2:ef:66:89:f2:
81:f1:50:ff:31:3f:8b:fa:9b:19:24:4b:08:dc:bc:
6d:f5:b9:7e:45:b7:d6:22:7a:68:37:af:4b:78:2a:
e8:56:e3:be:4e:bf:28:a9:30:3a:12:ea:11:14:43:
18:7c:e1:0f:98:f3:98:d3:70:75:2c:0e:b9:08:be:
41:d6:c5:73:6c:0f:8c:9d:05:7e:59:b3:d0:77:7d:
c4:4c:08:bb:ce:fc:49:3e:77:9b:82:0f:44:dd:ae:
39:3a:c6:93:2a:77:72:34:38:23:f9:16:18:56:64:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:B2:19:58:4C:21:76:B8:04:FF:B7:9C:F6:1E:98:35:B9:AF:6C
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cf:be:2c:d4:1d:ce:d2:b4:c9:2d:b8:ca:6d:a4:2a:11:37:
f2:b1:da:0a:10:01:de:e7:4c:9a:71:16:cb:a4:89:38:cd:18:
b2:5f:fe:19:42:98:b2:76:e3:58:64:cd:f2:03:8b:f9:f0:c6:
52:93:31:42:82:48:55:80:7e:4c:9f:bb:54:5b:88:24:33:28:
7e:27:bd:08:d8:33:6d:d3:75:17:90:43:86:3f:8d:30:34:58:
83:53:3f:19:f8:6c:aa:7f:38:a3:fd:60:6f:1f:80:64:0a:57:
46:d6:a0:22:90:6c:c5:09:3e:85:55:f9:69:cb:e5:03:bd:a2:
fa:0c:71:1b:a7:4e:08:4a:48:56:09:d9:3b:5a:68:f9:dc:ca:
38:ca:fd:d3:e5:5a:f1:37:72:62:6e:17:13:83:e4:9b:cd:76:
5e:8b:69:f2:20:08:86:e5:1b:4e:c6:71:c4:0e:02:59:ac:df:
9f:8b:b4:37:3d:e6:a9:4f:d7:5c:db:34:32:10:81:f5:19:16:
d2:69:a8:40:1c:72:f6:86:93:96:44:a2:e8:a9:05:bc:49:62:
0b:aa:1d:02:d2:33:8d:8c:d1:ba:03:47:f1:19:8f:f0:0b:de:
b9:b6:1d:b6:91:4d:7a:eb:bd:66:20:e9:7a:05:89:10:05:d6:
f9:7a:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:10:12 2025 by rpki-client