Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: AKKaK6GAczo+ZFMTeeZPPTKOHXB76J+6x1thDZjSzqE=
Subject key identifier: 04:5B:04:45:AC:B1:86:D2:62:43:50:E9:D7:8C:D7:74:60:34:9C:80
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0196A2ADFD1002E1DF40D25A930F2EA66186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 03BD
Signing time: Mon 05 May 2025 23:00:33 +0000
Manifest this update: Mon 05 May 2025 23:00:33 +0000
Manifest next update: Tue 06 May 2025 23:00:33 +0000
Files and hashes: 1: Dk8y_Ou1uZWQiNL6yHHBr0s0ttA.roa (hash: R07SZsf5miM7Ul/UJEmVinbpjidx4vC3ZL0OhnTHSlY=)
2: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: jKR0YwvtjInWmrctrnhkgKlZykXF6GXCYscLhlZU0i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:fd:10:02:e1:df:40:d2:5a:93:0f:2e:a6:61:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: May 5 23:00:33 2025 GMT
Not After : May 6 23:00:33 2025 GMT
Subject: CN=045b0445acb186d2624350e9d78cd77460349c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:76:b3:11:4e:56:53:f2:4e:bc:71:ae:a3:
d7:10:d9:58:c5:af:c4:52:88:28:1a:3e:cc:82:f1:
1b:83:b3:dc:c4:3f:88:97:3b:d7:06:f5:cb:10:b0:
4e:cd:17:be:3d:0b:1a:55:8b:16:e6:b5:b6:b9:89:
a7:e3:b9:c5:bd:5f:bb:48:8a:9f:d6:52:86:80:19:
f4:c5:9d:48:ce:e1:84:13:dc:23:0d:50:97:6f:01:
d6:59:6c:9a:6d:28:cf:82:6b:1d:55:55:f2:7a:a4:
59:a4:f1:81:e4:be:96:88:81:a8:a3:a0:ac:4e:14:
2f:67:a2:fc:63:c1:8f:7e:5e:fc:15:b8:f3:0e:0b:
c1:e1:7b:f7:ce:ea:9c:03:ba:2f:f6:fb:74:f6:dd:
fe:40:b1:ac:ae:3f:fe:aa:ba:1e:b7:d7:ac:91:56:
89:7a:de:7a:48:cf:2b:90:3b:91:31:02:14:b5:56:
79:eb:d2:a7:8a:f2:8c:b8:50:d8:a9:df:87:88:fd:
47:fc:d9:dc:cd:e1:33:99:62:49:3c:29:ff:fb:e0:
7f:7e:d8:6c:fe:5b:b8:8f:3c:74:81:92:75:b5:f0:
e7:ff:7e:fb:b7:33:a9:0b:3e:c0:85:93:32:f4:d6:
04:40:85:c9:7e:a4:2c:7b:3d:9e:08:d7:25:e1:06:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:04:45:AC:B1:86:D2:62:43:50:E9:D7:8C:D7:74:60:34:9C:80
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:19:16:d5:7c:14:12:6c:b8:5d:01:04:54:32:be:85:c8:01:
fa:05:1e:c4:6b:23:5c:37:90:a2:06:88:b7:aa:ce:bb:35:bc:
89:2d:cd:4e:76:99:1d:a8:c0:ff:40:0a:ba:5a:ab:24:08:9a:
8f:64:11:e1:40:92:c5:8d:37:0c:62:3d:4e:bf:f2:a8:3c:46:
18:eb:37:67:f2:bc:ad:fb:89:09:0f:97:d4:63:ad:55:45:9b:
33:c1:48:5d:47:e1:00:d0:e0:8a:fc:ef:bf:9a:d3:cb:ad:4b:
ed:67:e0:64:a2:9d:52:95:10:f1:01:c3:e7:b4:93:32:46:b9:
82:df:48:a6:c5:9c:d8:c0:e0:63:71:19:f6:da:06:b0:5f:02:
c2:47:ee:2f:cc:63:2a:fb:6a:e7:60:cd:d9:ad:5b:45:51:e4:
9b:8a:cc:eb:95:7b:7c:b0:a4:b7:f8:ac:b8:53:f1:ee:97:39:
f6:d9:37:1f:90:f9:2f:94:7c:ce:09:f4:74:a8:ba:b8:3b:9a:
64:e1:5c:7f:d0:b1:e6:4e:a5:6f:03:76:9f:9d:2c:46:51:e8:
28:2b:bf:f5:52:e7:45:17:8a:e3:b5:ea:9d:75:c7:eb:32:7f:
ea:bc:96:89:b7:c6:56:42:b5:c7:5d:4a:00:9f:3d:c3:df:f9:
fb:55:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:28:14 2025 by rpki-client