Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier: DO1n1LU8fVVuVxJ7gPZcazy1FZHQZ4LUUo1h5TBFE+E=
Subject key identifier: 46:07:31:6D:CB:61:10:8E:94:2A:D7:B1:51:53:A7:9D:01:22:27:F2
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial: 01968EB958EE6566384A52C7AD4B7B950099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number: 1471
Signing time: Fri 02 May 2025 02:00:33 +0000
Manifest this update: Fri 02 May 2025 02:00:33 +0000
Manifest next update: Sat 03 May 2025 02:00:33 +0000
Files and hashes: 1: LgelsY-16hZE8VmZ4UWScnrAkQA.roa (hash: 5MPF2K6ZagDsXMwY0mVJRSAJCcCewM4ZcbU+TqCGJzs=)
2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: pHATazNWa7lwA9yMrwtfA5FJRxv/c4gsVQXojRZrNnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:58:ee:65:66:38:4a:52:c7:ad:4b:7b:95:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Validity
Not Before: May 2 02:00:33 2025 GMT
Not After : May 3 02:00:33 2025 GMT
Subject: CN=4607316dcb61108e942ad7b15153a79d012227f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:fd:e6:a9:0a:1f:4d:e4:b1:fc:3b:97:64:
56:74:d5:51:a3:aa:90:1e:31:e3:77:5f:5e:35:52:
ca:cd:63:5c:55:93:70:aa:0e:60:0a:6a:af:72:54:
10:e4:58:6b:71:8a:0e:08:8b:90:32:7b:fa:84:0f:
86:55:7f:b3:77:ec:b1:46:cf:f8:bb:ec:b3:77:4d:
73:0d:15:f9:26:a8:db:36:be:81:31:ae:a1:4a:f2:
d2:af:43:98:13:16:8c:9e:b0:ed:b2:40:24:d4:05:
10:67:22:79:d4:6c:d4:47:b1:66:08:87:8b:1e:39:
3d:84:38:02:d8:2b:3c:61:8a:a7:58:fe:8e:b9:08:
ca:5f:c0:d2:c6:3a:f7:7b:8e:a6:10:28:1f:84:74:
d8:d4:76:2e:a4:34:dc:5a:75:e9:6b:80:1f:3f:c2:
87:bc:7c:15:e0:0c:d0:aa:f4:55:2a:5c:cd:7e:41:
d7:34:71:6f:60:e0:fe:4f:32:26:9b:66:1f:c8:2a:
87:f6:78:b1:2f:59:0e:29:96:2f:48:0a:60:bf:ea:
dc:34:a7:ef:7f:72:25:24:cc:1d:35:c4:14:c5:ab:
65:a5:75:70:22:4a:eb:46:0b:8a:e1:9e:83:ca:18:
69:08:64:35:73:4d:61:1b:32:ac:2f:a1:72:9b:61:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:31:6D:CB:61:10:8E:94:2A:D7:B1:51:53:A7:9D:01:22:27:F2
X509v3 Authority Key Identifier:
keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7e:e2:90:40:55:db:2e:c1:ae:4b:e9:50:f3:39:f9:19:1e:
49:6e:9e:b1:6d:fe:ca:c9:39:51:80:a3:89:b6:b5:36:d8:f7:
7f:3f:a4:75:1c:21:50:c6:76:3d:36:6e:ae:e7:c3:0e:e3:31:
8b:c3:e9:34:39:1d:1e:6c:29:ff:41:f2:66:13:72:bf:96:fd:
de:08:82:20:f8:6b:68:59:d1:86:f4:df:44:6b:57:f0:85:bb:
c5:2a:b3:b9:bb:23:d9:0d:21:1c:b4:b7:1f:4e:bd:35:d0:b6:
de:f7:4e:d8:d7:de:14:a0:cc:30:c7:0d:30:62:0c:d6:ad:36:
80:60:9d:26:89:08:ff:f2:13:9c:5a:61:79:08:65:f5:d9:ad:
5b:80:56:b1:bc:ef:55:d0:ca:87:53:cf:61:3f:05:5e:0b:d1:
f4:7c:03:95:b3:7d:c9:ad:bd:03:a7:35:af:41:d4:eb:82:7f:
6b:ce:d1:a2:5c:73:35:d0:a9:b8:f2:70:f6:5e:0a:9a:96:85:
a3:b9:5f:1f:61:ec:9e:95:24:7a:38:1a:d0:c0:6c:83:e2:ab:
b2:df:a3:a9:bd:a7:8c:8d:f3:1b:10:00:a3:7b:7b:1c:80:e6:
d9:1a:d8:d9:01:ad:cb:79:9c:04:df:f7:f6:7e:a2:80:d2:10:
4a:c2:38:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:22:56 2025 by rpki-client