Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: gmQsxwFENMoCTpdxBONgsonw4BMUnJF8ccMaU8m2c34=
Subject key identifier: 4B:71:42:4C:55:3A:1D:2C:EB:66:7E:84:D9:35:94:33:8C:DF:AD:F7
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 0196767AAB90E69EE4CB0B01F9C9B2A18E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 09:01:12 +0000
Manifest this update: Sun 27 Apr 2025 09:01:12 +0000
Manifest next update: Mon 28 Apr 2025 09:01:12 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: CNrMsJUh1GLvtCSKe/VYbWCK59ownWCawodijTxPE5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:ab:90:e6:9e:e4:cb:0b:01:f9:c9:b2:a1:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Apr 27 09:01:12 2025 GMT
Not After : Apr 28 09:01:12 2025 GMT
Subject: CN=4b71424c553a1d2ceb667e84d93594338cdfadf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:fe:f0:2c:00:04:15:e1:ec:46:16:33:d5:
61:47:2f:a1:0e:d6:c0:cd:dd:97:87:29:2a:fc:33:
e8:b8:2a:14:44:4a:cb:ed:17:ef:4d:64:17:f6:b8:
29:0f:fe:3b:d2:6f:b8:5b:2a:fb:73:93:1d:ed:66:
56:22:75:05:96:ab:ba:fb:39:00:19:fd:b6:16:8a:
96:8a:2f:b1:ee:a0:25:a8:97:71:d3:cc:39:7d:ce:
66:a0:9d:f8:49:1a:0c:5b:00:b6:18:f9:cc:4a:70:
81:d5:9f:50:23:da:c4:72:0f:ee:70:aa:b7:bd:ea:
d1:b3:13:ac:e8:b3:52:60:0b:ba:8c:18:6f:d6:3b:
f9:fb:04:05:64:9b:a2:d0:61:a2:34:e2:b7:45:6c:
07:49:03:40:4c:06:f0:9e:d8:77:b8:f5:5f:8c:ea:
27:c2:ed:93:ce:07:17:60:2e:33:89:c2:5f:86:9b:
18:71:e5:3a:ee:7b:76:17:78:f7:c4:0b:c7:72:d6:
df:ba:64:51:8c:53:58:61:08:41:9e:f2:76:67:4a:
3b:55:cc:f1:ec:47:11:14:b6:97:54:70:db:86:92:
1e:95:ec:0b:35:ff:24:fd:af:35:19:7e:a0:ee:4a:
9c:44:27:86:29:93:7c:cd:31:f9:b8:b0:f9:32:d4:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:42:4C:55:3A:1D:2C:EB:66:7E:84:D9:35:94:33:8C:DF:AD:F7
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:3f:44:1d:45:7e:89:65:d3:10:56:10:51:3b:a8:b1:8f:
6d:53:37:cf:32:b1:e1:7a:81:fb:f7:9c:e5:b7:d9:f0:cf:50:
2e:97:eb:29:4a:fd:d9:6a:17:6b:6a:cb:69:7e:e7:fc:39:4b:
dd:da:33:85:7a:4d:a3:fc:79:48:54:b5:29:d5:f5:0a:03:e6:
51:34:01:3b:9f:cb:34:4b:54:80:d2:a7:4e:99:3a:c9:05:aa:
b6:17:e2:90:de:51:a3:d9:c8:db:71:d5:22:65:6f:4b:c4:6c:
16:3b:67:1f:cd:04:07:e0:85:0e:91:33:8e:48:0e:ca:2f:82:
55:1b:e4:8c:b8:0a:9f:e0:09:50:35:12:fa:4c:f8:50:cd:62:
aa:bb:45:d7:ee:34:c6:20:8f:53:e1:26:31:d6:7e:23:cd:43:
bf:08:46:4b:0d:20:ac:a6:45:72:e9:a9:ee:5f:97:ca:dc:92:
52:bf:cd:c1:5d:db:d8:29:60:18:e0:d9:0c:f1:72:74:78:a1:
63:36:bb:b1:3e:0f:94:f9:16:bd:f7:04:b1:09:8a:80:cd:2c:
ae:51:ad:61:54:d9:0b:d9:2e:7b:a6:14:e4:e2:9f:a2:3b:9f:
10:68:ec:f5:fc:7e:9d:4e:26:65:52:c3:5c:9e:fc:f3:c4:8f:
ac:c0:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:28 2025 by rpki-client