Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: vLNfXbGtEM39eKDUZ81+p9PNGnWIpXJtafmlOtbhkXA=
Subject key identifier: 3E:66:C3:66:6E:DA:68:34:97:1E:AD:6E:9D:D6:0F:FE:7D:C4:8E:BA
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 0196A2400574FD0595DC81FFACE3A6A488D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 61
Signing time: Mon 05 May 2025 21:00:26 +0000
Manifest this update: Mon 05 May 2025 21:00:26 +0000
Manifest next update: Tue 06 May 2025 21:00:26 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: HwLG5LV0rxoTyrwvW3dbZfSmpTOrhBfmDCsYXElQkmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:05:74:fd:05:95:dc:81:ff:ac:e3:a6:a4:88:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: May 5 21:00:26 2025 GMT
Not After : May 6 21:00:26 2025 GMT
Subject: CN=3e66c3666eda6834971ead6e9dd60ffe7dc48eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:70:6f:17:47:42:ea:65:7f:e2:9f:eb:91:
9d:55:26:df:a4:06:9e:ad:67:07:84:c0:8d:0e:77:
d1:a9:ae:9e:c5:bb:8c:6b:6d:4a:d1:3d:78:c7:60:
20:fa:45:e0:8a:84:2d:d5:f3:fb:c6:37:0e:e3:aa:
f3:da:c3:75:8a:98:87:3f:d2:53:16:55:e2:57:1c:
74:e0:f0:ad:14:3e:84:b7:6d:a3:d4:37:b1:fd:c2:
bb:dc:7a:9a:aa:ca:49:4b:48:5b:a1:52:79:e1:3c:
6b:42:2a:3e:c6:4a:81:6d:c6:cc:5a:cd:43:cb:5c:
3e:1a:2e:80:5b:30:3b:d8:e8:f4:3a:fb:a6:2e:12:
3d:c8:21:4c:68:44:68:1b:c1:dd:68:13:bb:38:62:
25:92:b0:9a:e3:88:7e:c9:a0:12:1b:68:58:af:ef:
5a:e8:15:8c:20:70:37:10:f1:b1:45:cf:a6:90:36:
69:d8:f9:47:77:8d:74:a4:ae:8b:47:3c:a8:6f:6d:
f6:c1:b7:f4:a2:3a:8e:ce:17:d5:43:2d:e0:3a:95:
ae:e9:d5:51:77:77:34:5f:f7:c3:b4:16:7b:7e:ca:
42:d1:07:f6:6c:4a:97:1a:2f:10:df:ed:c2:56:d3:
bd:8f:16:82:84:2b:0d:d1:b0:60:66:27:2d:f7:4a:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:C3:66:6E:DA:68:34:97:1E:AD:6E:9D:D6:0F:FE:7D:C4:8E:BA
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:a2:a2:a1:e0:a0:97:1e:75:7d:16:1d:21:63:84:97:8d:
da:8b:b0:9d:dc:a2:e4:b9:b3:18:44:ee:e2:36:d8:2b:fd:e0:
6a:2e:c8:08:20:be:dd:8e:1a:1f:bd:f7:f2:0b:13:39:af:e1:
4b:e5:8c:21:c0:50:2d:88:66:c0:c8:3b:89:5a:a3:ed:23:4f:
05:f2:50:f8:27:cd:62:73:1b:d5:88:c8:00:38:c6:de:1e:1e:
98:f7:84:8a:01:82:26:7e:8a:6a:3f:61:04:17:e8:ca:97:38:
81:1f:1b:f2:94:74:8c:e7:59:45:00:a3:25:13:ef:65:b0:97:
1a:0c:39:56:b3:5a:bc:13:27:4a:8b:a9:35:f4:cf:d3:ec:c4:
cd:ce:cc:b7:f2:12:8f:d8:75:29:e5:1e:99:d0:1c:6f:53:12:
0b:47:42:62:61:77:01:67:ed:f8:f0:29:8d:9a:8d:01:53:86:
a8:41:89:49:06:e5:37:fc:b5:2f:cd:4c:46:28:99:8a:63:81:
b3:14:74:13:44:3e:80:03:d3:82:5d:61:37:c3:09:ae:b3:4f:
b2:a5:a6:e2:85:1c:29:48:4b:01:70:c0:cd:d3:b2:7c:d2:bd:
08:ba:55:3a:1f:61:17:ab:69:64:67:d8:78:bc:6b:b7:d6:2c:
5f:22:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:38:26 2025 by rpki-client