
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: mGRODXCm32CIDWIaSUajJ+GwBdYHuCsK9j6qgpYHEl8=
Subject key identifier: 7D:32:60:85:36:51:77:E8:2E:A0:E2:CA:5C:5D:2D:EA:C1:F4:CE:07
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 0196CE063137C1D4384C610189A7025286E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 4A
Signing time: Wed 14 May 2025 09:00:34 +0000
Manifest this update: Wed 14 May 2025 09:00:34 +0000
Manifest next update: Thu 15 May 2025 09:00:34 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: yIB8pKMRgFqRjIriPYWnE3YftHPFTJnmDHqiO8rU5CA=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:31:37:c1:d4:38:4c:61:01:89:a7:02:52:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: May 14 09:00:34 2025 GMT
Not After : May 15 09:00:34 2025 GMT
Subject: CN=7d326085365177e82ea0e2ca5c5d2deac1f4ce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:ea:9d:aa:71:cd:db:2b:9c:c1:f3:50:3a:
db:a6:b6:20:14:2f:44:9b:3a:12:a4:bd:d8:0e:69:
4d:e3:30:0f:2d:da:4e:85:e7:5d:ce:81:10:52:8f:
5b:6a:92:f7:12:0e:57:77:b0:cd:25:1e:36:c5:75:
4a:15:18:67:64:ff:88:49:6b:33:ca:f6:6b:9f:db:
7e:f7:e9:10:17:37:8f:b0:1d:35:8d:e2:40:50:a4:
9e:49:6e:ce:7a:da:27:ab:ee:aa:d5:e8:de:1a:2f:
24:40:96:36:4e:f3:54:ac:aa:31:3e:91:ec:a4:7d:
26:97:1a:f7:66:06:13:21:61:89:5c:73:78:88:ff:
c3:b9:37:b5:c8:f7:fc:b8:64:90:24:98:da:b7:ad:
76:ab:0a:0e:24:d9:4b:1c:f9:7c:e2:3b:2a:a7:94:
e9:a3:34:c0:8a:c9:40:44:cc:a3:6d:b7:b2:de:02:
b3:0f:d4:db:e8:73:19:10:ac:64:71:11:5b:31:f0:
e4:a7:ca:5c:d6:75:c5:d1:f2:f4:32:ca:fc:ce:4d:
ea:90:9b:b5:27:4a:35:1a:68:3a:9a:6e:1f:95:7f:
96:58:4c:36:68:61:26:b7:76:3a:3f:7e:28:63:c9:
ba:15:59:a3:51:06:00:e9:9f:b7:a7:a0:7d:67:d7:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:60:85:36:51:77:E8:2E:A0:E2:CA:5C:5D:2D:EA:C1:F4:CE:07
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:0f:81:cd:67:2c:22:05:fb:2b:80:2a:9c:71:75:c5:11:
61:e2:cf:e7:ea:6c:5c:74:a8:1e:f6:5d:69:d7:16:77:5b:03:
87:5a:2a:51:40:4f:d8:d2:cf:97:b1:90:c0:c6:8e:17:a6:11:
7c:e2:32:1b:8a:f9:29:f7:30:2f:c5:8d:36:a0:2b:bd:c4:c4:
3a:2d:3b:69:93:f8:37:7f:ee:8f:b5:fc:6e:d0:fa:72:36:e5:
09:c6:d8:8c:11:a4:72:fa:bc:21:a2:c7:fe:14:61:9e:a3:19:
3b:67:da:0b:aa:34:ce:39:2e:e9:a4:0e:5e:a3:df:c5:07:ca:
31:29:77:8e:79:99:af:fa:c4:dc:e4:4c:da:b0:58:0c:3c:a8:
60:c0:5f:f6:69:58:fb:0f:0e:42:66:4a:cf:e7:f2:7c:35:57:
88:88:74:9e:8e:41:68:9a:ee:7a:29:12:62:56:c5:eb:42:e1:
05:a3:b5:45:8a:40:39:40:22:ac:6e:5d:8d:16:37:e5:71:f1:
9e:65:43:b3:22:82:5d:9a:dc:8d:6c:f1:7b:73:da:f6:54:93:
ac:24:20:1b:5c:f5:a2:f2:cb:3d:41:88:d1:c8:c7:45:36:36:
a8:3f:88:b2:09:47:26:82:46:7e:e9:eb:18:75:a9:68:75:ce:
35:ca:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:26:23 2025 by rpki-client