Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: hgqpP6bhxxN7gd4UdZUkbo+sPUXOJIEj7Gu70wdTue8=
Subject key identifier: 16:F5:64:15:C4:8D:9D:72:73:40:37:A1:AE:AB:C6:39:2B:A9:53:07
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019699AAE7251CCE792E6B0FBAFECE298C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1531
Signing time: Sun 04 May 2025 05:00:36 +0000
Manifest this update: Sun 04 May 2025 05:00:36 +0000
Manifest next update: Mon 05 May 2025 05:00:36 +0000
Files and hashes: 1: 1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa (hash: kWMYsrVZaVYfP4Ct5LwW7USETz9giRgVCzYAo1+XF/g=)
2: QAnENOV7C6lzH_x8jNRvH6GLqjc.roa (hash: 9SXWdd7rJD88L+XO12WxPTCi0XtVW7lKw0msZqZnedw=)
3: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=)
4: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: iEgK4fSQni4XOK/4Rw6P+sh4Vym8xSMNjt0PVv41VRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:aa:e7:25:1c:ce:79:2e:6b:0f:ba:fe:ce:29:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: May 4 05:00:36 2025 GMT
Not After : May 5 05:00:36 2025 GMT
Subject: CN=16f56415c48d9d72734037a1aeabc6392ba95307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:e2:f6:31:0b:a0:20:6f:c8:64:f9:bf:a5:
62:38:be:c2:a1:e4:ee:a1:3d:99:e0:a9:cc:a5:bb:
55:67:ad:04:6c:b0:e2:73:a0:91:f5:09:1f:e0:ec:
00:2f:a8:d0:f5:38:c6:d8:7b:b9:52:01:02:8b:a9:
ed:9e:35:1d:bd:03:a3:9a:54:6f:71:cc:41:14:be:
94:d6:be:cf:87:e2:7e:bf:1c:8d:ca:99:1f:24:69:
24:cc:1e:1c:d6:c2:b1:8f:37:d3:58:06:19:14:51:
71:41:cc:2c:28:ca:6a:6d:15:f5:7a:c0:b2:90:0d:
bc:bf:7b:86:11:57:31:c2:a0:5f:99:e4:bb:74:e4:
03:29:0b:6f:5e:06:94:eb:53:54:2e:08:73:7b:ed:
2c:b9:43:b5:7d:5c:a2:44:ae:66:77:34:ab:64:02:
a6:e2:ed:94:26:37:5f:a7:52:bd:e2:1c:14:5a:54:
e6:ff:6b:03:ea:db:2c:c7:1c:65:9f:df:f7:6f:af:
56:eb:ac:b3:b6:a4:cb:4d:a7:bd:b5:76:dd:5e:0c:
3c:49:8c:5e:c5:d9:5d:b1:92:d3:46:d0:44:f1:b1:
b0:2d:90:1d:b6:cd:91:ae:22:15:10:7e:63:90:73:
a0:43:00:da:c5:e7:8b:38:f9:73:e7:50:d8:4e:32:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:64:15:C4:8D:9D:72:73:40:37:A1:AE:AB:C6:39:2B:A9:53:07
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:97:08:76:30:5c:07:aa:95:81:f0:5e:29:16:22:39:79:ea:
43:d1:10:5e:fa:02:dc:ac:0f:f5:74:57:ef:49:9e:c2:ce:d6:
df:80:a5:fa:6e:c3:2d:b2:f7:48:63:02:38:34:de:f9:c7:25:
0d:d4:6d:09:97:12:19:d8:b4:a8:13:84:06:ee:62:83:d0:24:
fb:58:2c:fe:c6:fc:f8:3a:ab:6b:8b:4a:85:ee:9f:c1:a7:f4:
9a:54:21:6d:a1:e9:4c:1a:5b:da:6b:f4:29:15:76:94:c0:d4:
44:4b:06:71:9f:94:bc:7d:56:a5:4b:d9:bc:20:9a:2b:6b:5f:
6b:73:49:ea:ef:bd:78:b8:6a:d8:2a:f2:9b:82:77:19:6f:11:
5b:e9:b0:4e:4d:d1:f5:6b:dd:f3:01:56:1b:92:27:64:c4:13:
ff:69:f2:7e:73:04:37:7c:a5:02:e3:a1:ea:5e:91:cd:a0:68:
b9:e0:d1:c5:83:6c:3b:64:b5:ab:0c:7b:20:50:4d:19:cb:58:
f9:b3:48:92:58:f0:21:52:66:ad:86:00:cb:35:6e:3e:2f:f0:
b8:98:37:b1:26:3d:5f:f7:ff:f6:eb:a9:43:ca:94:b9:01:af:
35:5a:5e:c8:ea:7b:89:56:24:4d:91:a0:37:80:f1:42:a1:7e:
cf:e4:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:45:23 2025 by rpki-client