Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: cud0bXwGHJnPJ2NrCJCTh4Hsh2gqQMnOgNpLJNkEXHM=
Subject key identifier: F8:DE:07:84:4D:83:A7:26:3B:69:0A:26:09:D6:06:A3:AA:C8:AF:05
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0196876E66591C58149A084E15E1317D5CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 087F
Signing time: Wed 30 Apr 2025 16:01:21 +0000
Manifest this update: Wed 30 Apr 2025 16:01:21 +0000
Manifest next update: Thu 01 May 2025 16:01:21 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: geDtv9OjfLGyKXtuQO2ihRBiX7K8Sl9KzBZXpeCziSM=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:66:59:1c:58:14:9a:08:4e:15:e1:31:7d:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Apr 30 16:01:21 2025 GMT
Not After : May 1 16:01:21 2025 GMT
Subject: CN=f8de07844d83a7263b690a2609d606a3aac8af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:37:f3:5e:72:13:96:e8:0a:64:b7:16:af:
d8:6b:84:1d:8c:6a:30:63:b5:f1:19:2f:a5:7d:a8:
9a:3f:eb:dd:19:dd:53:ad:a2:59:6b:ba:38:65:3a:
71:29:28:09:31:42:a9:a5:78:fd:62:c1:fb:7c:50:
43:a0:6a:cb:1c:5f:64:2a:a2:ce:46:8e:22:0f:98:
50:99:8b:68:74:a9:45:8e:58:43:4e:74:eb:b6:29:
89:0b:dc:4d:ce:77:01:79:d5:4b:fa:7c:86:8d:fc:
cb:96:1b:56:b1:27:63:49:11:ab:49:ef:03:72:43:
fd:ae:78:ba:b7:5e:29:c5:af:7f:11:7c:45:08:bf:
14:65:6c:9c:ac:da:7a:1c:f6:46:bb:18:a5:4c:97:
2b:e1:17:65:e2:1c:53:2b:35:a2:4c:81:4f:85:36:
04:8c:03:ce:ad:50:a0:db:14:2b:39:f5:d8:33:05:
ea:79:12:35:fc:ae:9b:ff:3f:22:8f:3e:3e:5d:41:
c1:e0:65:36:de:79:ea:f5:79:4e:62:4b:29:d1:81:
c2:8d:70:e7:ac:1e:e1:1c:de:ed:7d:bd:c8:31:2d:
ac:1b:6d:c6:d9:f7:db:91:dc:fa:52:c2:3d:64:a5:
1a:61:36:6c:c7:1f:9d:f9:57:cc:17:42:3f:8f:eb:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:07:84:4D:83:A7:26:3B:69:0A:26:09:D6:06:A3:AA:C8:AF:05
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ab:02:72:c7:f0:7b:fc:eb:9f:e4:f3:31:b3:5c:36:2a:a3:
e9:18:af:21:4a:d8:72:73:e0:db:d6:49:88:b1:ba:82:cb:f9:
3a:af:39:08:33:a6:66:4f:23:90:4f:41:f9:86:b9:30:e0:c4:
82:91:ff:20:47:0b:ad:f8:60:5b:34:cd:85:8b:30:4e:5d:c5:
e5:7d:ad:80:54:67:0c:23:ae:74:f2:34:2c:77:8e:12:c4:09:
4c:44:39:32:2f:31:22:70:bc:30:39:a6:d6:b9:a8:23:e4:98:
de:c3:f3:d4:2d:22:83:ad:95:a0:0b:f7:bc:36:ff:5d:3e:24:
16:65:b8:da:ee:d4:3a:13:b3:b9:2b:b9:4c:45:57:0d:6e:97:
05:d7:c8:44:69:3a:f7:e8:fd:12:f6:91:82:0a:1c:2e:4c:f1:
41:60:93:8e:b3:86:97:6a:3f:5c:d8:02:20:80:05:21:d1:ff:
9b:51:91:8c:31:9a:a3:a7:a9:41:7b:6f:57:f8:93:7a:23:99:
db:d4:67:61:00:3b:77:b4:81:a2:96:aa:9f:18:81:2c:bf:28:
d0:0c:97:87:11:b4:e4:6e:78:b9:b7:a5:ce:eb:d9:1b:7f:4b:
3a:2f:8c:91:30:29:e9:4a:a7:a2:6d:26:06:61:1b:22:22:50:
a2:e4:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:53 2025 by rpki-client