Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: oi7dEma7g+o4slbQ0Da9/RTHO5REa5t+qTzxBTkl5y4=
Subject key identifier: 17:E5:0A:DD:EA:06:24:C5:E4:7F:FD:55:D8:F7:6A:45:DB:B9:2F:C9
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 0197D2BC7867D13BC93F4B7DEA587FD98C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: D1
Signing time: Fri 04 Jul 2025 00:00:56 +0000
Manifest this update: Fri 04 Jul 2025 00:00:56 +0000
Manifest next update: Sat 05 Jul 2025 00:00:56 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: tWcoZnlOtDqNB207J50xfysDL007NHHcdJkfVnHW1Ao=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:78:67:d1:3b:c9:3f:4b:7d:ea:58:7f:d9:8c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Jul 4 00:00:56 2025 GMT
Not After : Jul 5 00:00:56 2025 GMT
Subject: CN=17e50addea0624c5e47ffd55d8f76a45dbb92fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:0f:b5:b0:9d:40:dd:7e:de:93:35:b1:3e:
68:36:a5:53:b8:e9:74:54:3e:a4:64:44:98:f9:32:
49:c1:ed:1a:bb:53:89:ed:fb:60:5c:08:c4:f8:08:
44:47:55:41:3d:b7:36:a9:74:df:3a:fa:a5:d6:63:
3d:14:01:a9:8f:ae:1b:c4:56:0d:38:1d:f8:e8:af:
2a:f7:8b:53:e2:94:eb:c7:49:2d:d5:0d:67:cb:69:
e3:de:e5:32:1e:4e:44:7d:8f:96:f0:4d:cc:9c:01:
75:b3:8b:d3:c4:69:10:a8:9d:73:39:32:35:2b:7e:
d5:16:6d:7a:03:c9:9e:7e:39:76:f2:c0:ab:2b:c9:
12:d6:01:fe:45:44:72:74:8c:79:3a:c6:a4:92:ad:
f0:e7:d7:14:75:0d:63:76:bc:06:e6:07:d2:d4:b8:
d1:bf:76:9f:da:f8:7a:b3:30:8a:b2:3d:df:1d:30:
3e:cb:f3:ae:42:83:a0:a1:ba:69:79:2a:86:78:d5:
ca:dd:b9:92:2e:e0:56:cb:2e:58:64:d6:12:46:5c:
d8:88:8c:ee:6a:52:f3:69:73:ff:86:82:d1:40:4e:
14:53:48:54:4f:7a:6c:0c:6d:96:5a:60:8a:cb:15:
65:7c:c0:27:78:ad:93:d9:34:52:b2:1a:4d:5f:af:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:0A:DD:EA:06:24:C5:E4:7F:FD:55:D8:F7:6A:45:DB:B9:2F:C9
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1a:c8:92:21:81:16:77:8d:69:d6:30:22:38:e3:84:2c:52:
49:92:c8:9f:94:69:37:a3:1e:59:cb:e1:f5:26:02:a3:97:fc:
ca:9b:2d:b2:8a:8b:7b:75:52:91:27:0f:a0:e9:16:96:26:a5:
01:d4:a8:42:c2:cc:9b:90:a7:02:a9:34:f4:c1:be:67:dd:73:
37:0b:2e:2e:db:1a:19:50:3f:ba:d5:23:82:f2:f5:ea:21:89:
e7:a5:52:e6:80:6d:2a:cf:e2:e4:19:54:62:b1:2a:b2:04:61:
12:ba:ab:44:f6:5f:ff:c0:e2:51:fa:62:dc:8f:3b:84:6b:6b:
6a:b6:79:ec:31:cb:a3:1d:97:0f:f4:6d:d9:32:cb:40:2f:b0:
bb:d8:60:8b:9c:16:eb:30:c7:3b:11:3d:c3:8d:ed:24:7b:0f:
7f:7c:ec:1c:39:5f:9c:94:7f:f8:6e:09:19:13:f7:93:9a:b7:
2b:a8:9c:35:12:67:9e:24:9d:e3:a0:c8:40:09:91:58:15:7f:
fc:e7:f7:43:cf:33:50:6e:a3:28:d6:b7:1c:1c:2b:a6:4e:dd:
6a:48:8f:3c:47:40:dc:8f:00:00:45:a4:56:88:2e:dd:e6:5d:
e6:ce:fa:e7:e6:f7:30:9b:2d:eb:3f:75:be:07:6a:82:de:c1:
2c:8c:f3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:46:26 2025 by rpki-client