Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: LTUMeoozezHTlMKtXV3V/pc8tDq/JGIYIaKdqj5W0ZE=
Subject key identifier: B8:42:B3:9C:2B:51:61:FF:03:82:2C:1F:DB:5E:C0:B0:0F:BE:83:55
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019687DBD078AA4BBCB45F513EDA3FAA5F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 18:00:51 +0000
Manifest this update: Wed 30 Apr 2025 18:00:51 +0000
Manifest next update: Thu 01 May 2025 18:00:51 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: xldfFyeOlx2bAoLI8vYK7NmaqOGHmXvrPozrQdOceoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:d0:78:aa:4b:bc:b4:5f:51:3e:da:3f:aa:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Apr 30 18:00:51 2025 GMT
Not After : May 1 18:00:51 2025 GMT
Subject: CN=b842b39c2b5161ff03822c1fdb5ec0b00fbe8355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:0b:37:0f:14:4b:d1:79:6d:41:d8:f4:85:
e8:20:03:ec:f8:5e:53:db:f2:36:2f:e4:5a:09:85:
ce:06:de:b5:dc:19:f7:03:b7:67:62:24:e6:e8:05:
64:66:93:8d:7f:be:4f:40:c7:98:89:46:a2:6e:78:
46:e3:d9:94:e6:68:0c:7a:63:7b:e0:8e:ed:bc:05:
a6:15:2f:44:53:a4:20:80:7e:20:ae:dc:4d:61:8d:
f3:69:49:e6:5a:d6:3d:e6:7d:76:b9:ec:3b:02:9a:
ab:c4:82:a3:b8:42:f0:c3:d2:25:e7:7b:d2:6d:5a:
61:a3:5b:2c:1c:fc:36:f1:8f:4a:7b:6f:a8:5d:08:
94:af:54:b8:46:89:6c:fd:c9:55:22:1c:a1:45:ba:
cb:a8:7c:0b:e4:3d:1e:ff:c7:6b:4e:c7:f7:ed:07:
ab:fa:18:d6:cc:b2:c0:cb:67:94:9c:fa:a6:fb:94:
a5:ce:c6:ce:a5:6e:69:53:60:05:e5:23:51:ce:9a:
2b:a6:4e:7a:57:50:10:bb:3f:d8:fb:6e:cf:00:cf:
f9:6d:c5:2d:d2:e3:00:8d:a1:a6:3b:2f:ed:46:93:
cc:f6:1e:16:30:43:24:9a:21:25:3a:a2:34:e4:c8:
a0:21:0a:81:5a:4a:27:70:3d:38:e7:ca:d2:55:ef:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:B3:9C:2B:51:61:FF:03:82:2C:1F:DB:5E:C0:B0:0F:BE:83:55
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2f:d8:f9:c5:55:0d:07:98:fd:66:dc:b8:cf:20:c7:32:cf:
c1:c2:f3:4a:28:a3:b7:69:a1:2a:e3:5d:86:f9:47:89:ae:10:
17:4b:7d:86:37:24:db:bd:a6:d2:d0:6e:c2:96:1a:9e:c5:04:
c2:77:f6:6f:71:1e:4b:11:12:fb:d5:65:ca:dc:26:25:e4:35:
79:e2:ae:72:20:5d:d5:0b:51:b9:3c:bf:72:41:83:d5:52:97:
a7:90:cf:1a:18:7a:4f:1a:00:d4:de:7d:57:2a:78:a3:9d:58:
6b:63:0c:9e:cc:b9:f6:13:01:78:ba:10:4a:ca:16:27:a4:b0:
de:3b:a6:6c:94:08:b2:82:bb:64:19:52:1a:e1:4e:d8:54:96:
0c:39:9f:31:22:9a:e3:31:2b:da:38:6f:c4:fe:13:55:54:3c:
a4:f7:e2:7d:fc:d1:bc:0b:9a:64:f8:d7:9d:8c:4b:15:ba:2e:
b1:1f:34:fd:53:85:26:d4:20:36:33:1d:1a:30:61:b8:89:1b:
33:b4:2a:15:2c:cf:08:32:e5:8a:2a:40:ef:78:10:a1:23:ee:
9a:9c:63:cc:cb:1d:1a:6f:e5:05:7c:6c:d9:3b:88:7e:fe:8f:
2d:d8:53:39:13:43:55:a7:d5:da:af:54:50:0d:b4:97:a3:4c:
69:4b:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:08:14 2025 by rpki-client