Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: UfpcP4JEJzZ7VmRyV/gR6YFtekXKGSjHbpkebgk5cfQ=
Subject key identifier: F0:78:44:E3:46:43:82:1A:40:C9:C6:45:74:B2:7C:60:7A:01:5B:8D
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 0196786856CE119E52290C9CA5DA2B0430BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 095D
Signing time: Sun 27 Apr 2025 18:00:25 +0000
Manifest this update: Sun 27 Apr 2025 18:00:25 +0000
Manifest next update: Mon 28 Apr 2025 18:00:25 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: qXbgBoAtfWrYKcIhZ1UqIbmC/xNwY++eCJhsB31fEQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:56:ce:11:9e:52:29:0c:9c:a5:da:2b:04:30:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Apr 27 18:00:25 2025 GMT
Not After : Apr 28 18:00:25 2025 GMT
Subject: CN=f07844e34643821a40c9c64574b27c607a015b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:4b:c3:b3:60:f2:b2:dd:f8:fc:76:8e:6b:
75:ea:72:33:82:20:ae:85:e1:fd:6f:d8:63:b6:2f:
04:70:e2:19:66:e7:e1:3b:f2:f0:cb:2b:42:64:25:
2f:9e:9c:28:01:70:76:52:ec:15:7b:6d:00:5a:dd:
41:4c:cf:6f:c8:c5:a1:24:7a:bd:6b:44:7f:ad:c7:
96:27:8a:4a:5a:eb:a9:b1:aa:74:f1:67:d9:13:65:
59:2b:67:33:a5:e6:96:f9:8d:2c:23:b4:b4:73:6e:
02:3e:52:15:13:fb:73:ea:de:6f:12:cf:2d:c8:f8:
8e:ab:90:5d:f7:9c:15:bb:b5:38:5b:82:4a:9f:1d:
dd:8e:ce:72:30:4a:47:bf:0c:8c:3f:ab:c2:cd:13:
d1:b1:c4:ab:43:df:5b:16:2e:4a:84:17:1a:34:3b:
21:c6:cc:cc:07:6b:4e:2c:c8:4b:9a:a8:c3:cb:fb:
33:75:2e:f6:e8:07:37:10:0e:e9:07:02:0d:0b:b3:
03:a6:20:4c:2a:8c:1f:96:9d:99:f6:33:7d:a9:7a:
a5:9a:d4:06:28:5e:d5:31:c9:dc:5c:f4:3e:f0:1d:
52:aa:ee:b3:11:88:90:fa:a9:6c:15:32:e6:e3:50:
fd:d0:7b:1e:6e:86:8f:f6:21:f6:0c:a7:53:38:e1:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:44:E3:46:43:82:1A:40:C9:C6:45:74:B2:7C:60:7A:01:5B:8D
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:e3:72:7d:81:15:3a:bb:e2:8a:ce:6d:04:3a:dc:b0:51:
d0:f1:25:97:00:dc:80:bf:bd:b8:d0:24:0c:55:3c:5e:e6:75:
77:64:86:1e:95:8f:f1:aa:27:d7:3f:8c:77:44:9e:84:47:08:
1a:47:92:38:1a:16:7b:fc:37:80:e8:f2:8b:17:8e:b1:3d:6b:
bc:3e:48:db:e1:b4:59:c7:53:c0:b8:31:61:f6:92:97:50:8a:
0b:13:fc:99:c7:d6:f8:22:5d:26:89:28:0b:d4:91:dc:11:36:
76:4a:10:77:19:a3:6e:84:e7:ed:8f:05:58:6d:86:d4:08:a0:
6e:d6:94:1a:99:59:6f:0e:7a:81:38:e9:7b:a6:7a:07:a1:ae:
6d:a8:1f:7c:f3:af:5f:d9:f9:1c:52:bb:e0:f2:41:9f:e6:fc:
7a:a3:a6:9f:c2:54:6c:07:4c:58:f7:3c:d9:1f:72:b9:5a:fa:
c4:82:95:81:1c:c6:cc:25:22:7e:ae:1c:30:85:49:97:17:b0:
5a:90:56:c3:00:1c:77:cf:a2:06:07:64:57:d2:25:b8:de:ce:
e5:47:8b:f9:9c:c4:ee:b7:12:c8:85:84:d8:05:97:b0:15:88:
cb:72:ef:fc:f1:6d:a0:10:4b:ea:5c:a5:3c:64:06:6f:97:3e:
df:de:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:27:52 2025 by rpki-client