Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: zs74vLCEqO7f4tbsLy5vlgGd2BCA4GUW+wIpxEDkY5g=
Subject key identifier: 4B:02:31:AF:36:80:BE:09:93:AB:4F:0D:23:D3:45:23:96:74:6A:B0
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0196CB05F0AF7AC9DFE9839DF8C73D85E767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 1540
Signing time: Tue 13 May 2025 19:01:26 +0000
Manifest this update: Tue 13 May 2025 19:01:26 +0000
Manifest next update: Wed 14 May 2025 19:01:26 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: GmrSucmzr7q817BXmZOWGkG6mL9NRSZwwFhFvlx5dgQ=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:f0:af:7a:c9:df:e9:83:9d:f8:c7:3d:85:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: May 13 19:01:26 2025 GMT
Not After : May 14 19:01:26 2025 GMT
Subject: CN=4b0231af3680be0993ab4f0d23d3452396746ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:2f:ae:c7:f5:5e:25:7d:62:88:6b:c5:4f:
1d:00:e9:7c:fa:6e:77:5a:2d:cf:61:84:2e:9f:f6:
a1:09:f9:20:53:19:a5:83:e8:a5:0d:07:59:a8:13:
ce:cc:9f:b0:2d:65:67:1a:38:4c:86:0d:fb:f1:ae:
14:1b:7e:34:3e:e0:89:fe:96:46:f9:33:87:c5:bc:
03:45:21:91:7e:5f:a1:44:2f:c9:c1:63:de:7c:3d:
2d:9e:e6:2e:69:31:00:c7:24:fc:1f:1b:5c:02:37:
f4:ba:58:c5:a0:93:39:96:8c:64:43:d2:d4:6f:15:
55:cd:b7:13:af:fd:49:28:34:f7:07:55:aa:c2:be:
40:87:0b:e4:19:84:54:00:e0:03:09:83:e0:4a:a3:
85:20:8b:bd:88:a2:98:66:6f:4f:e7:1d:a9:0c:b2:
6e:9e:8f:65:d7:28:ba:f0:62:ef:5f:6b:e3:b8:9f:
17:62:1e:98:6c:bd:5f:3d:81:8f:91:2b:1b:47:ca:
f8:e2:a0:07:4a:ca:de:83:b5:ec:ca:75:1e:9e:9c:
4e:15:41:5d:df:11:43:1e:be:74:21:50:5d:81:50:
7d:fc:0c:ad:18:ab:64:c8:49:ad:23:c8:e1:27:6b:
db:22:23:3d:82:fb:ae:41:05:77:49:53:a9:f0:c7:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:31:AF:36:80:BE:09:93:AB:4F:0D:23:D3:45:23:96:74:6A:B0
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:54:db:8c:8e:b7:18:ec:34:c5:7d:bc:4d:6b:b3:2c:34:99:
20:a0:17:d0:71:fd:b3:6b:b0:c4:37:0d:f3:93:7d:9b:a2:e5:
45:38:1d:59:9c:a1:b6:7a:c8:d4:67:d9:db:85:0b:29:4b:59:
1d:b1:ba:3e:e4:36:a4:3b:a0:7c:fb:0e:d8:bd:be:8e:5b:43:
16:f7:fd:e4:00:60:35:57:1f:52:6d:33:02:a5:74:c3:3d:81:
0d:13:05:dc:76:f5:e3:fb:48:c4:5d:69:6b:45:6f:94:ea:c0:
54:4a:7a:3b:80:7a:9e:aa:39:85:f9:e5:d6:8b:8d:70:c0:fc:
ed:a7:c9:f8:1c:9d:bf:5d:ab:aa:72:ab:ea:d0:39:8c:61:87:
b4:8a:ed:42:73:5d:03:b5:7e:6a:b3:c4:9b:96:49:ec:42:72:
55:db:55:c6:33:4e:2b:f9:a2:da:da:d5:15:cf:30:7d:e6:42:
eb:29:08:55:c6:12:10:e0:25:91:85:90:03:ea:0e:30:0a:45:
3a:93:85:b0:71:91:57:2d:03:43:e6:78:fd:b1:e3:c9:0e:60:
d3:17:aa:1d:b0:15:16:db:4a:67:89:02:bc:18:4f:04:84:07:
de:ba:92:9a:75:41:b6:c6:eb:90:48:7c:08:12:85:71:78:27:
d8:39:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:57:54 2025 by rpki-client