Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: m88HK8jezYyggEPZstW10omczem9+eMzXcOtOAk/ni0=
Subject key identifier: 19:39:B8:ED:B2:32:00:1D:5F:A6:0D:25:63:F2:3C:4F:FE:E9:65:49
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 01967A1F906D492B49235D3B54E38F29BC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 02:00:10 +0000
Manifest this update: Mon 28 Apr 2025 02:00:10 +0000
Manifest next update: Tue 29 Apr 2025 02:00:10 +0000
Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: 1utMkNp0I+PZNCoP829pi1/EhJrUMlB832e6pVkRSro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:90:6d:49:2b:49:23:5d:3b:54:e3:8f:29:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Apr 28 02:00:10 2025 GMT
Not After : Apr 29 02:00:10 2025 GMT
Subject: CN=1939b8edb232001d5fa60d2563f23c4ffee96549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:ec:32:ba:8d:1a:3e:a4:43:c9:74:84:b1:
86:a7:30:a3:55:7f:72:e7:d2:96:7e:5c:dd:60:c5:
69:f0:91:23:da:70:61:0c:f9:83:b0:20:a7:8f:bc:
5e:d2:ed:aa:37:d9:ee:09:1d:32:4c:55:8c:57:3e:
94:a7:79:de:50:16:7f:af:3f:29:bc:e1:00:59:5e:
fa:d8:ac:4e:64:bc:f3:36:b3:5f:87:49:b6:0a:c6:
03:d6:57:61:5c:5d:5c:8f:da:5c:e2:a8:16:16:fc:
78:c7:c7:14:18:32:d9:03:a0:65:c0:dc:9f:2c:ef:
0f:3b:96:b6:ad:ca:ca:6e:bd:3e:ec:ce:da:2b:99:
bd:5a:30:c5:bd:93:b5:09:cd:0e:56:02:47:79:06:
e6:43:26:4c:ba:aa:6c:a0:0f:1e:c9:d2:e7:69:48:
7f:5f:00:da:b7:5b:d9:36:62:73:e3:45:4b:82:f8:
1d:a9:2d:24:1e:84:9e:d7:f4:ce:77:f8:78:1c:50:
9f:22:ce:e8:39:fe:b0:b4:55:aa:2f:cc:02:c2:a0:
d1:dc:b2:ea:2e:fe:04:3b:d4:da:dd:21:52:e3:a7:
ae:f2:63:2b:6e:28:e5:f5:9d:7d:9a:b2:cb:4c:9a:
3d:86:84:14:81:44:eb:71:52:b9:0d:16:d6:d0:e0:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:39:B8:ED:B2:32:00:1D:5F:A6:0D:25:63:F2:3C:4F:FE:E9:65:49
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:cc:0d:e6:37:9f:bb:5b:ac:0e:ff:59:16:c6:30:04:b2:
e9:3d:ae:9c:a7:69:c1:84:47:87:95:f5:5e:90:23:fe:91:d2:
36:ce:f4:88:01:71:29:f0:f9:c0:1b:8e:f9:64:ee:2c:5d:9b:
c9:c9:52:e1:9b:06:30:27:0f:4e:87:d2:7c:a7:36:66:a0:35:
09:46:7c:b0:34:76:6e:d2:9d:8b:b5:22:90:a4:3d:49:21:f0:
fd:29:55:68:a6:9e:19:4e:71:05:0e:e6:0e:96:7d:31:df:e4:
7c:c7:d8:1b:c6:c4:65:6f:7e:d8:d0:18:11:bc:30:e9:05:24:
6f:d2:40:0a:dd:6f:ac:83:b1:c4:05:c0:91:72:f8:2c:da:ee:
6a:21:64:14:56:59:f2:1c:ce:18:18:28:36:c1:68:ba:5f:19:
cf:b3:ac:56:9a:05:e8:42:c2:a0:c7:46:73:6c:0e:9e:ba:74:
de:84:51:3f:35:c4:a9:ab:99:d4:42:22:a6:c8:5b:7a:71:58:
0a:f8:ab:a2:a2:46:de:7d:15:94:f1:ca:e5:79:8b:f6:54:52:
e1:cb:89:8b:cb:46:a0:14:bb:a2:81:e1:7c:74:a5:49:38:1e:
bc:9f:75:b3:4d:bc:bf:ae:bc:2b:6a:cf:59:f8:f2:e9:d1:3d:
74:55:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:04 2025 by rpki-client