Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: mF12bITDx27jaLQL64gMLUQ8X9FPkfDbTusEHa+y38s=
Subject key identifier: B5:13:BE:C7:B3:1E:65:8A:74:1F:06:81:22:A4:73:A0:5C:72:7F:17
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 01969E2C188D126719CD5D107AA19FA46037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 02:00:11 +0000
Manifest this update: Mon 05 May 2025 02:00:11 +0000
Manifest next update: Tue 06 May 2025 02:00:11 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: 0XZlfYbKPVAb7Skpn1aOtrOeMIKN838wjFeNFS+Oc2I=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:18:8d:12:67:19:cd:5d:10:7a:a1:9f:a4:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: May 5 02:00:11 2025 GMT
Not After : May 6 02:00:11 2025 GMT
Subject: CN=b513bec7b31e658a741f068122a473a05c727f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:e0:56:3f:02:49:a9:00:02:29:6f:6f:44:
9e:2e:06:9b:5a:96:b2:97:96:25:9f:c3:2b:be:06:
76:de:3b:a0:46:9a:e8:05:b2:80:d5:53:fb:3e:39:
e0:fb:04:b5:76:7e:3f:f1:89:f3:5b:07:19:7f:8b:
c8:10:e1:74:14:4f:7c:3b:39:45:fc:b3:f8:64:04:
42:4f:6c:af:41:67:b1:1a:59:7e:11:42:4a:e5:46:
f4:10:37:89:b8:48:37:f1:de:3c:e5:94:50:11:5c:
93:76:7f:11:d3:26:9b:3d:2b:03:6c:8b:9c:d8:5e:
8e:9d:db:28:b6:fc:b4:6c:08:71:d8:e7:64:29:b1:
78:ff:16:74:b7:22:ce:71:d6:b1:15:eb:fb:a9:46:
ca:9d:8e:40:d7:59:cf:55:6a:15:02:57:38:0b:f6:
61:40:5c:11:b5:f2:eb:a7:82:c0:3f:5d:ee:c9:a5:
0a:08:3f:4d:c9:6e:d1:6e:5b:88:2d:bc:a4:fe:c3:
5e:56:69:f9:b4:02:c8:0c:cb:c2:98:5d:2c:07:b0:
e5:22:42:5d:22:3e:e8:10:52:40:18:65:21:b8:a5:
02:f6:de:f6:9c:f9:88:38:bd:db:9e:f2:cb:2c:fa:
c8:27:ff:d6:bc:b2:16:29:1f:e0:22:08:fe:70:90:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:BE:C7:B3:1E:65:8A:74:1F:06:81:22:A4:73:A0:5C:72:7F:17
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b9:21:41:a1:2c:b6:bd:8c:e2:2f:21:4c:c8:de:bb:37:b0:
49:1a:0a:7d:ec:74:23:a7:23:d8:9b:78:bf:c5:44:61:92:a0:
e8:27:e6:f7:f6:6c:87:02:90:c2:2e:b7:ab:35:25:0a:4e:21:
8b:05:ac:bf:16:11:2e:3b:98:61:61:ee:c4:45:42:ec:98:86:
0f:08:b1:76:6a:7a:10:38:c1:3f:78:b0:73:14:5c:28:67:9e:
8f:fe:b0:ba:70:a7:69:36:12:be:5b:18:e1:98:da:cc:8e:d5:
7b:28:89:3c:42:44:f0:a0:aa:7a:0c:39:94:55:82:87:2a:05:
18:11:21:5a:f0:0e:fe:88:db:3e:a0:95:e2:52:ba:7f:03:c5:
8e:7a:5f:e8:be:ef:c0:a1:28:a7:82:fa:89:36:c0:76:34:54:
ec:8a:05:d5:c5:b7:5d:70:19:c6:ba:6f:b1:e4:f0:25:7c:d8:
d0:ea:88:ac:59:01:41:19:e8:14:0c:0f:7e:6e:3a:18:95:98:
b4:41:66:39:79:0a:a3:21:dc:86:63:cc:d0:9e:19:6c:ae:79:
d9:93:91:ff:10:c6:94:76:8a:6e:c1:8d:28:77:f9:d2:ab:58:
1e:50:bf:a1:f6:1c:2d:69:b8:05:c9:eb:17:f7:2e:da:cd:19:
75:fb:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:17:04 2025 by rpki-client