Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: vpsE22vkrulHod/S9plDNSFiVeuLf0eDOpzmFu5xea0=
Subject key identifier: C1:80:A7:9F:D8:29:9D:6A:06:19:05:5F:72:66:F5:44:30:03:94:4D
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 0196789F55653866D8E82B11746488A3E444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 03D7
Signing time: Sun 27 Apr 2025 19:00:30 +0000
Manifest this update: Sun 27 Apr 2025 19:00:30 +0000
Manifest next update: Mon 28 Apr 2025 19:00:30 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: Ea2Wlr8Z7+vFpJRA8rDAe0p3H008i6/Qjg+nJojcNWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:55:65:38:66:d8:e8:2b:11:74:64:88:a3:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Apr 27 19:00:30 2025 GMT
Not After : Apr 28 19:00:30 2025 GMT
Subject: CN=c180a79fd8299d6a0619055f7266f5443003944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:30:62:50:80:b2:31:8f:5a:2e:bd:a7:ec:
95:0a:51:6b:23:44:e7:f6:98:5f:da:c1:08:85:eb:
ff:1c:d6:c6:c2:65:a7:f9:57:b4:4c:1e:4e:77:65:
f2:ca:d0:e9:1e:d5:9d:16:5e:8d:75:2e:5b:c1:87:
da:8d:ab:1a:a1:91:71:cb:a5:02:e9:b7:84:7c:37:
c8:9d:01:a2:ee:3d:9d:03:02:9b:19:7d:2c:ed:b7:
df:37:88:3a:f0:7e:0c:4c:fd:aa:d2:db:39:0e:ce:
45:7b:78:1f:7e:77:69:77:de:cf:c9:5a:ed:35:cb:
b7:9f:71:25:da:88:5d:e6:83:b0:41:a6:cd:2e:5b:
e9:3c:25:19:c7:f3:df:59:62:83:df:57:91:84:3d:
57:5b:15:f5:53:2d:95:ec:ec:e3:09:64:21:89:e3:
ee:e9:5b:a9:8d:2c:a7:84:f2:81:a9:49:96:b0:a5:
9d:f9:a5:ec:6a:f3:8e:ce:5d:11:76:8d:84:fc:77:
15:03:22:a4:2c:e4:5d:43:b4:16:ee:82:1c:3a:67:
96:bb:a0:87:a3:4a:7b:74:b0:f0:f3:1b:42:90:d0:
3b:23:f3:54:c7:fd:35:8c:74:83:45:0d:b8:44:20:
d5:08:8b:bd:73:6d:a8:1b:8f:33:ca:8d:78:fa:b1:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:A7:9F:D8:29:9D:6A:06:19:05:5F:72:66:F5:44:30:03:94:4D
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:eb:64:7a:73:de:3e:ed:3a:e2:93:54:57:c5:dc:e4:3b:f9:
75:61:bf:00:ab:67:c1:52:90:b9:98:42:47:b4:fb:11:0b:35:
59:57:ee:a1:87:c7:d1:a0:a6:0a:f5:77:a1:64:66:eb:53:75:
7c:00:d0:16:4d:6e:07:68:4a:c0:ff:50:43:17:3a:4e:d5:f6:
0c:b7:da:2a:f4:e2:4c:d4:7b:be:bc:37:59:84:2d:02:b3:b1:
5c:10:62:71:02:ba:00:c8:5f:84:36:43:b8:7a:56:19:3d:1b:
5e:a6:b7:24:af:7d:8c:90:0b:71:2f:fa:0d:fa:b5:f4:06:b1:
0f:72:3f:49:29:44:a0:08:c5:1f:0a:ac:8f:29:cc:b6:cd:3e:
1e:67:71:26:a1:a3:f3:30:70:1c:59:6a:1e:4a:ae:c8:7f:25:
22:10:5b:eb:d2:bb:ca:93:f6:c6:40:35:a5:5a:28:a8:ce:e0:
88:d2:bb:75:54:6e:37:76:86:3d:8c:d8:6e:75:58:65:c1:4a:
b0:43:1f:94:7e:96:a3:b6:41:55:d0:10:bf:65:77:0b:cc:e1:
1b:dc:8b:9b:91:f6:ff:35:aa:22:41:9a:9b:99:bd:fe:71:36:
9b:fd:fa:75:0b:be:71:c2:cc:f9:43:97:c9:16:04:b5:62:13:
2f:e9:91:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n1VlOGbY6CsRdGSIo+REMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjUwNDI3MTkwMDMwWhcNMjUwNDI4MTkwMDMwWjAzMTEwLwYDVQQD
EyhjMTgwYTc5ZmQ4Mjk5ZDZhMDYxOTA1NWY3MjY2ZjU0NDMwMDM5NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZkwYlCAsjGPWi69p+yVClFrI0Tn
9phf2sEIhev/HNbGwmWn+Ve0TB5Od2XyytDpHtWdFl6NdS5bwYfajasaoZFxy6UC
6beEfDfInQGi7j2dAwKbGX0s7bffN4g68H4MTP2q0ts5Ds5Fe3gffndpd97PyVrt
Ncu3n3El2ohd5oOwQabNLlvpPCUZx/PfWWKD31eRhD1XWxX1Uy2V7OzjCWQhiePu
6VupjSynhPKBqUmWsKWd+aXsavOOzl0Rdo2E/HcVAyKkLORdQ7QW7oIcOmeWu6CH
o0p7dLDw8xtCkNA7I/NUx/01jHSDRQ24RCDVCIu9c22oG48zyo14+rF4DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGAp5/YKZ1qBhkFX3Jm9UQwA5RNMB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcutkenPe
Pu064pNUV8Xc5Dv5dWG/AKtnwVKQuZhCR7T7EQs1WVfuoYfH0aCmCvV3oWRm61N1
fADQFk1uB2hKwP9QQxc6TtX2DLfaKvTiTNR7vrw3WYQtArOxXBBicQK6AMhfhDZD
uHpWGT0bXqa3JK99jJALcS/6Dfq19AaxD3I/SSlEoAjFHwqsjynMts0+HmdxJqGj
8zBwHFlqHkquyH8lIhBb69K7ypP2xkA1pVooqM7giNK7dVRuN3aGPYzYbnVYZcFK
sEMflH6Wo7ZBVdAQv2V3C8zhG9yLm5H2/zWqIkGam5m9/nE2m/36dQu+ccLM+UOX
yRYEtWITL+mRUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:09:28 2025 by rpki-client