Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier: cFsSdd9hqLB5LvPuSzFn1bLbDeYsMN7PgesPaIu8qRQ=
Subject key identifier: 85:5C:6B:97:38:D2:1C:AE:A7:34:CA:2B:AC:D8:E3:08:A8:06:12:09
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019657267CB0D55DB18C29F8EF4B7A6B2CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number: 0122
Signing time: Mon 21 Apr 2025 07:01:02 +0000
Manifest this update: Mon 21 Apr 2025 07:01:02 +0000
Manifest next update: Tue 22 Apr 2025 07:01:02 +0000
Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: 8+cRaBgDIEqWk15zMOsV+C7Kb2FTZwdsaxFIIB39ckA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:7c:b0:d5:5d:b1:8c:29:f8:ef:4b:7a:6b:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Apr 21 07:01:02 2025 GMT
Not After : Apr 22 07:01:02 2025 GMT
Subject: CN=855c6b9738d21caea734ca2bacd8e308a8061209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:59:e6:bb:b7:43:0f:50:09:83:33:3a:43:
7d:ef:d0:6e:10:5e:3e:0f:d3:fe:1a:b5:8c:5c:56:
14:cc:51:ac:f7:ce:56:a4:a1:a4:04:bd:2f:7e:5e:
29:f3:ef:8b:7e:01:a7:05:cc:f9:53:59:5c:a3:94:
6d:ea:98:ce:ec:ad:e4:f6:a6:8d:26:19:2e:74:e8:
c1:e6:8e:21:ec:52:e5:34:e6:c1:56:8f:77:11:cf:
7a:d4:0c:e4:8c:4c:f2:2f:40:af:f3:87:23:d5:a2:
5e:c9:4c:f3:21:8f:ef:0a:82:65:cb:05:09:a8:51:
f6:8f:db:5b:24:c3:9e:93:ab:1d:fd:14:19:d2:3a:
20:b8:96:48:4e:c3:e2:d5:5f:0d:82:f7:92:26:80:
51:fd:4d:90:4c:1b:7b:42:dc:f0:6a:fe:9d:fe:f0:
3c:e4:e7:0a:d4:c5:b9:e9:bd:38:43:95:73:15:05:
21:97:64:34:79:59:fa:62:ff:a5:79:05:ec:42:93:
47:ed:3f:4e:b4:72:45:e6:28:d5:96:64:4e:ca:ac:
a0:30:9e:2e:ce:23:1b:2a:87:76:44:4b:43:c4:2f:
4a:fb:12:8f:7d:e9:31:1f:96:f5:c4:17:b0:60:a4:
0f:d5:f6:59:ae:c9:14:c1:9f:1b:4a:0b:c6:2f:86:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5C:6B:97:38:D2:1C:AE:A7:34:CA:2B:AC:D8:E3:08:A8:06:12:09
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:4d:cc:e1:9c:ea:d7:e0:7f:37:65:84:7c:03:0c:bf:e1:
3a:dd:da:ac:c5:f2:52:de:4b:a9:fc:4c:a8:6a:1a:93:c4:97:
55:28:81:52:e4:0f:dc:8b:b0:81:85:81:aa:65:ca:73:dc:6f:
ae:a3:54:61:9f:fa:60:8a:c2:83:cd:68:b5:f2:93:e4:f8:3f:
07:80:14:35:14:c6:00:74:31:ae:14:61:1e:fe:07:3a:2e:6b:
1b:e3:04:6d:f9:c6:8f:13:85:28:4e:ef:7d:c1:39:56:df:a3:
3e:74:78:f2:fa:89:9e:b4:4a:64:5b:c3:0c:d8:59:ae:0f:6e:
ac:c0:cb:ab:12:03:8c:31:77:6c:09:aa:e2:9b:94:c2:10:10:
57:55:ef:31:ec:fd:09:b2:99:96:da:1d:70:9a:c8:53:57:ee:
75:ec:89:f7:60:14:c9:25:b4:19:83:7a:b8:f6:3f:ca:63:21:
93:45:ef:5a:72:2f:0f:5c:21:c2:28:ba:45:ec:a1:bb:1b:cf:
75:e1:36:3f:5a:d8:eb:d7:c2:41:b2:00:3f:9d:5e:a9:60:40:
a2:db:11:da:fd:8d:21:a0:aa:21:39:12:6e:07:1e:2b:9b:09:
ab:a1:96:34:23:a5:cb:b3:b0:8e:85:1e:e7:82:e4:7a:ca:22:
69:b6:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:16 2025 by rpki-client