Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: xUzZz+A1jb5z7vBHOXIWxLr4M1gZfdViMJlZu0iB6n0=
Subject key identifier: C5:0B:4B:A7:8D:EE:65:AA:4D:66:13:D5:E5:93:E2:86:A0:62:75:E6
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0197B6A1A83C232AE66F62258DBFA4AFDB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: XfefnB1/nV9LwoQ3x+EwnuFv11lnIe5j/AxA+C79fWw=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a8:3c:23:2a:e6:6f:62:25:8d:bf:a4:af:db:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=c50b4ba78dee65aa4d6613d5e593e286a06275e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:05:a9:75:21:af:8a:c0:df:a8:de:75:d8:
ac:c9:7d:c9:be:2c:2a:d1:15:a4:5c:fe:f8:e9:7f:
06:b7:74:7d:3b:26:b9:19:12:e6:e2:8a:4b:71:df:
fe:64:1a:24:fa:59:59:4f:dd:7e:b1:db:68:6b:96:
89:dd:26:c5:13:62:7f:5f:69:47:ef:59:6a:4c:e4:
3c:44:d2:7e:b6:e9:bb:a7:13:d1:2a:f8:bc:fc:05:
51:07:d0:34:6a:64:6c:c0:4f:7e:3d:08:f6:8b:73:
6f:c6:3c:f2:3f:68:61:44:0f:7f:bf:68:2b:e1:d6:
34:0c:0d:44:e3:4a:96:b6:96:89:c9:88:05:32:fe:
38:bd:6b:f3:64:d9:ee:0a:91:04:db:8c:b3:0b:1d:
9a:2a:d1:3c:89:bf:aa:96:4d:cb:93:cd:06:db:aa:
f9:db:20:9a:e9:5d:09:81:25:3b:6c:a3:93:26:d2:
b7:b0:a2:73:af:ae:20:3f:26:1f:c1:86:33:61:3a:
ae:b6:b7:ac:b8:15:8e:04:6a:3c:e7:2e:3e:be:8c:
95:46:b4:81:7a:3c:a0:bd:21:28:84:64:a0:2b:98:
ca:37:80:fb:c8:a3:9d:96:94:c9:29:12:28:cb:f5:
ca:4e:ef:63:4d:24:96:af:6f:57:fa:2d:a0:e5:b7:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:4B:A7:8D:EE:65:AA:4D:66:13:D5:E5:93:E2:86:A0:62:75:E6
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:11:03:65:bf:b0:fd:18:a8:69:71:65:ff:a8:af:b9:73:e4:
d7:57:b0:1c:cb:50:87:d6:f8:1d:a7:80:f8:a0:70:06:64:67:
b8:3a:d8:64:4c:05:40:c0:8c:72:b8:3a:fe:c8:68:9d:e8:51:
4e:f6:ec:0f:5b:40:54:15:91:65:7e:db:a8:dc:45:c2:ee:24:
cf:3a:5b:61:70:b3:2e:cc:4d:c2:b6:e1:dd:6b:5f:ec:84:e9:
46:3c:ce:79:28:20:15:a9:fd:d9:44:38:8e:56:9c:e3:6d:60:
7d:c3:d8:2d:f7:45:4b:16:95:c9:5c:43:38:38:50:5e:fc:20:
be:60:6e:95:51:2e:f6:48:3f:43:90:e7:4b:61:75:10:6c:8d:
25:f0:ee:5f:c9:c8:30:ff:10:de:ef:02:1b:27:3f:74:22:35:
22:b2:02:08:18:70:e3:63:ce:21:f2:03:65:e6:6f:53:15:6f:
df:d9:97:bd:a6:08:7f:76:88:c1:8a:a6:f8:3f:5e:eb:17:58:
97:3a:a9:1c:ba:2e:b2:54:be:e8:d5:bd:d4:25:dc:39:15:e5:
eb:4b:26:ff:90:77:47:65:50:88:ce:0a:4c:12:81:e8:f2:fd:
0e:23:c6:57:b6:9a:6a:b1:56:a3:89:d9:92:16:3e:09:b6:7d:
fe:a0:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:26 2025 by rpki-client