Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: JVUzhp2V72Ly/YKUt2sebESwvunFPFG6OrqWCFLxSYU=
Subject key identifier: 6A:8F:8A:3F:FF:F1:58:F0:F9:EC:E9:CF:C4:A8:4C:57:C7:24:4A:88
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 0196BD129C5BD3D87CE19D51054247C91924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 052A
Signing time: Sun 11 May 2025 02:00:35 +0000
Manifest this update: Sun 11 May 2025 02:00:35 +0000
Manifest next update: Mon 12 May 2025 02:00:35 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: WMJENIsIWlN4ESl91Z+kueAY3p+Y5TT3X9xhXKZoHZw=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:9c:5b:d3:d8:7c:e1:9d:51:05:42:47:c9:19:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: May 11 02:00:35 2025 GMT
Not After : May 12 02:00:35 2025 GMT
Subject: CN=6a8f8a3ffff158f0f9ece9cfc4a84c57c7244a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:ef:82:2b:37:da:d2:8b:71:e1:93:43:7e:
3a:82:88:f5:e9:76:9e:a6:88:3b:b7:cc:8e:0a:19:
e8:09:88:8d:03:5b:88:31:c5:d2:73:14:90:25:78:
35:ee:c2:b4:b5:be:58:ea:6a:ea:df:fc:f1:93:d3:
9f:c2:34:92:0f:61:70:d6:01:28:0d:85:ea:f8:1a:
4c:0d:90:2d:28:50:c4:d5:32:21:6d:4d:ad:f7:42:
99:5e:0d:f4:18:6e:f9:de:0e:c3:e3:ad:c9:e3:5a:
94:9a:17:8b:90:0b:27:5d:9e:d5:d1:5e:2a:9b:7c:
d7:e3:ae:0e:c9:30:3f:e1:97:3e:88:48:11:a3:30:
3c:bd:5b:25:75:31:64:5b:75:7a:b8:81:48:67:2d:
87:3e:95:0e:3e:be:de:dc:25:b5:d8:6f:ba:2d:8c:
db:64:59:6b:dd:2f:50:c1:a5:ba:7a:14:c8:d0:c8:
b3:67:e3:b4:c3:bb:ca:bd:63:d1:89:fa:2d:de:69:
1c:d8:07:24:d5:45:1a:19:b7:3a:15:a4:7d:77:91:
67:31:27:08:ef:2c:9a:8f:06:e2:91:db:e4:22:98:
d2:61:ab:23:3b:c9:ee:37:a4:ea:bb:d9:d0:40:6a:
2d:d9:70:a4:5b:ad:66:61:b7:dd:2b:c9:16:67:57:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:8A:3F:FF:F1:58:F0:F9:EC:E9:CF:C4:A8:4C:57:C7:24:4A:88
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d3:14:9b:05:6a:e0:76:f0:d6:6f:da:15:26:31:1c:28:de:
c7:de:cb:6e:62:03:d1:61:7d:4a:f5:e1:7e:f2:58:95:26:2a:
6b:fa:e3:e8:f1:e8:91:df:e1:02:1a:9d:37:4b:9d:9f:e7:49:
c6:0a:43:5d:0d:e5:f9:fd:97:92:50:b9:c2:83:48:4e:d5:ff:
3e:86:13:e8:76:b5:57:63:e8:be:f7:5e:b0:f5:87:9f:c7:00:
0f:f9:13:f2:43:b4:09:39:8e:ba:de:60:bb:98:a8:39:19:14:
8d:d4:f6:a8:e5:f0:01:ea:64:47:64:d3:e6:b2:23:e4:64:65:
95:f1:ff:81:67:24:70:7c:8f:38:5a:92:dc:4e:12:48:63:be:
28:e3:d7:d1:d7:d7:a7:4b:18:25:1d:c5:b4:b5:00:39:70:98:
da:c2:2f:4d:e4:b7:5e:53:df:e8:93:3a:a0:a7:c9:a7:82:09:
13:7d:c2:69:a5:b9:b5:7a:aa:9a:5d:97:0c:01:93:c5:42:b6:
36:8d:1a:c8:b5:92:2e:c7:6d:60:1f:b9:cc:73:80:fd:d3:4e:
82:fa:c9:a3:0c:4a:ee:85:c7:08:8f:fb:fc:7e:4b:c7:7c:76:
e5:3a:3f:49:01:45:ec:c4:96:76:79:1b:bf:d7:fe:4b:47:22:
7a:e3:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:41:52 2025 by rpki-client