Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: jmcdIptKbiVbulbuuOCLtSBjKnS51QF3WNYCVimkOj0=
Subject key identifier: 85:05:E0:8B:20:3C:81:51:81:FF:3A:D8:45:9E:46:4A:72:9E:57:C7
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 0196AC8CCBCC4ED223444244555280F847BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0ECE
Signing time: Wed 07 May 2025 21:00:30 +0000
Manifest this update: Wed 07 May 2025 21:00:30 +0000
Manifest next update: Thu 08 May 2025 21:00:30 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: wd/XlDORUrTWjOyFEmVBsenEUtUpzVtAlnd60mjK4Co=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:cb:cc:4e:d2:23:44:42:44:55:52:80:f8:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: May 7 21:00:30 2025 GMT
Not After : May 8 21:00:30 2025 GMT
Subject: CN=8505e08b203c815181ff3ad8459e464a729e57c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:92:30:be:bb:31:e0:0b:d8:23:9d:f1:4e:
d0:ff:da:0e:f5:67:45:f2:34:ab:61:7b:0a:7b:b4:
d2:de:3d:79:b8:95:76:65:e5:72:0f:95:c9:bb:3d:
be:4a:bf:21:a7:bf:d6:a5:29:dd:42:ac:40:91:8c:
1a:d2:ef:c0:95:bf:7c:ed:93:38:a4:53:15:ef:05:
c3:35:05:ef:2c:c5:b9:7a:11:fc:d0:1b:cf:43:7e:
05:d1:02:eb:43:83:ac:1c:45:47:b9:14:31:93:e3:
a4:66:83:ef:a1:8b:44:dc:7e:36:08:9c:65:83:21:
b1:e8:de:1a:56:97:e7:9b:ca:68:78:94:c1:bc:b8:
5a:d3:63:43:61:10:b1:db:63:eb:ee:6e:2a:29:5d:
d6:bc:22:aa:b1:6c:7e:9c:08:31:c5:59:99:01:01:
cb:9f:09:f9:22:83:c4:06:fa:d4:a1:d0:89:29:d3:
31:f6:52:78:f5:e7:e6:f6:5d:c3:4e:2d:44:ff:ec:
5b:43:87:34:09:90:f9:79:3e:25:e7:ce:c4:29:0b:
b1:33:50:53:fd:30:ca:14:f5:65:03:22:c7:ef:89:
b3:36:d4:0b:10:05:25:12:d8:c0:2a:e0:b6:f3:cb:
b7:a6:87:92:3a:87:97:63:73:6c:48:bb:a7:3e:ce:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:05:E0:8B:20:3C:81:51:81:FF:3A:D8:45:9E:46:4A:72:9E:57:C7
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f9:54:dd:4a:07:0a:3a:2a:c6:fa:d0:88:fa:63:0a:90:91:
58:31:bb:d1:0e:94:58:8a:76:2a:fd:c5:bd:fb:1b:53:31:38:
06:8f:bd:eb:d1:43:52:7e:09:82:96:f6:dd:d8:66:45:0d:8f:
00:d1:fc:d1:0d:3b:f6:8f:4a:b5:15:63:16:70:c4:bf:3f:5c:
1f:82:93:d0:d6:e2:11:2c:da:2d:58:07:e8:25:3e:52:a1:fc:
b0:df:2e:25:0c:bb:d6:e1:0b:61:ca:7d:2b:63:e7:c7:1e:75:
99:c1:8d:31:ed:f3:7d:cd:e6:d4:e8:09:3b:c2:1b:9e:31:1b:
d8:57:16:e3:fb:22:78:e2:9c:09:74:7d:4a:4b:a2:75:d9:de:
7e:24:15:47:28:ee:8b:55:e9:a3:25:33:de:71:9c:db:23:a4:
d5:ab:cc:9b:b7:bf:c4:01:77:60:ba:de:61:34:29:62:50:e4:
3a:3f:11:f4:cc:2c:a1:92:30:17:75:cc:91:6b:94:4f:5f:38:
26:85:90:09:74:bb:1d:a0:21:54:cf:30:8d:cc:c7:2b:55:cb:
70:fc:c8:48:49:ad:38:97:4d:a8:7e:1b:4d:b7:2b:62:77:1e:
36:c6:1b:5d:21:67:be:7d:14:83:d0:76:42:17:9d:49:fd:76:
e3:c9:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:42:00 2025 by rpki-client