Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File: McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier: 2329Pzmt8pKoOd9iuwQkpSb1hDqFJwQDM5YvTT8Hn+Q=
Subject key identifier: 39:9D:98:AD:D1:FF:9E:25:49:0E:28:78:4A:92:1A:E2:E6:E3:3F:E0
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 0196CA60646F4724F6C63D21A8D3DF00AA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number: 04BE
Signing time: Tue 13 May 2025 16:00:36 +0000
Manifest this update: Tue 13 May 2025 16:00:36 +0000
Manifest next update: Wed 14 May 2025 16:00:36 +0000
Files and hashes: 1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: 5A5/khUIuaXkecyboSQt4RIbfOwMjP1sDxzdgYXhME8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:64:6f:47:24:f6:c6:3d:21:a8:d3:df:00:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: May 13 16:00:36 2025 GMT
Not After : May 14 16:00:36 2025 GMT
Subject: CN=399d98add1ff9e25490e28784a921ae2e6e33fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:43:4a:38:44:0c:86:f1:51:f0:5d:b1:b7:
0a:14:63:c1:7d:39:30:44:41:16:f3:ec:d0:9a:c1:
c7:de:39:31:85:2e:3e:66:e3:ef:85:88:3b:53:1f:
f9:a0:86:9b:a0:79:92:42:7d:15:69:71:1d:ce:04:
1f:57:d9:82:18:2a:bc:4d:6a:07:f5:a1:9a:09:a3:
0d:74:e6:35:1e:ba:d3:82:3c:a9:a4:6f:4b:23:45:
3d:ca:c4:2a:d8:b5:86:b3:b5:2f:94:50:5f:91:e1:
64:2f:a6:0d:30:98:b4:5c:88:eb:2f:ad:69:94:bb:
bd:b3:49:e2:ce:42:99:0c:80:5d:1e:d6:71:5b:a8:
b0:84:5b:e9:4f:a3:db:9a:12:ae:41:bc:d6:32:b7:
fc:8e:35:d5:a0:38:a1:e8:5e:43:ca:73:12:fc:24:
e6:11:03:63:49:80:8e:e1:9a:b7:07:13:97:e3:09:
04:db:3d:61:3e:d1:30:0a:88:8e:b9:55:c7:8a:9c:
3c:20:a2:ec:b5:32:e4:2e:7a:9a:93:9a:d1:d8:a3:
bb:9c:a5:53:d5:c3:e8:e0:98:40:60:90:b6:30:b5:
06:9c:c7:c4:6c:de:34:81:4f:e1:65:15:48:dd:70:
41:da:ef:1f:cd:91:d2:d1:68:39:94:d4:54:7c:05:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9D:98:AD:D1:FF:9E:25:49:0E:28:78:4A:92:1A:E2:E6:E3:3F:E0
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9e:a1:7b:35:3b:6f:d6:aa:8e:40:81:7b:3d:0b:3b:59:4b:
86:4f:fd:eb:0e:68:73:e0:e1:ae:0c:aa:99:c7:ed:1a:8a:d8:
f3:41:f9:fb:e4:8e:17:ea:10:a7:e8:dc:67:50:61:ef:0b:1c:
68:2a:9f:5d:d1:9f:a9:cf:3a:05:50:b7:b7:d2:bf:b8:0e:e6:
97:fe:41:ff:21:1c:1d:e4:66:35:f3:8a:bd:17:25:7c:1a:fa:
54:a6:31:d1:54:cf:d2:1f:8f:4f:29:d1:ca:99:a4:65:0c:a1:
28:33:8a:a8:e5:49:59:22:34:58:ce:16:c8:00:c3:a0:f4:c0:
3d:08:23:07:49:23:13:77:79:69:3d:ec:fc:2d:f8:0b:22:d2:
90:f2:a0:19:e8:4e:d3:ec:e3:e4:52:c1:3b:9a:c8:c6:43:45:
79:7f:01:18:4d:fd:a3:e2:d4:2d:c0:d1:d1:03:4e:b0:04:67:
37:ca:4e:7a:a1:63:d3:28:b4:92:5a:a8:c1:b5:fb:c6:38:ce:
11:6f:7f:a5:d3:ae:da:dd:10:5c:e4:74:71:e4:87:9d:eb:a8:
b5:6a:8e:a2:f2:3a:22:70:81:81:20:7c:83:14:1e:ce:20:7b:
7e:b1:ee:33:5e:46:20:61:35:7e:b1:7c:80:3d:52:59:6f:8f:
4d:ce:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:50:35 2025 by rpki-client