Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: n3YgHTo4XdqvFWtS8GJ1fdFC1O1fgRuV727qLmy12Pw=
Subject key identifier: CB:0D:73:1D:D6:AE:C4:82:A3:69:4C:EB:B2:2D:51:C1:E1:83:6F:3A
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 019656EEECC5B030E9D2149CD2591FE20F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 0108
Signing time: Mon 21 Apr 2025 06:00:20 +0000
Manifest this update: Mon 21 Apr 2025 06:00:20 +0000
Manifest next update: Tue 22 Apr 2025 06:00:20 +0000
Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: 1cNzoaV5Eoes3Zh2DgwDZWLRIFOaTsJwDjM1rswtGW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:ec:c5:b0:30:e9:d2:14:9c:d2:59:1f:e2:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Apr 21 06:00:20 2025 GMT
Not After : Apr 22 06:00:20 2025 GMT
Subject: CN=cb0d731dd6aec482a3694cebb22d51c1e1836f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:49:ef:8f:ec:04:73:72:44:c2:22:4e:b9:
90:e6:ef:3e:bc:bd:27:e4:5f:25:eb:95:c9:8f:1e:
2c:62:db:68:48:a5:ba:42:4a:05:4d:22:4e:a9:c0:
4e:96:5a:21:52:cd:39:da:f7:94:a5:7f:12:7a:cd:
38:52:d3:74:89:e2:1b:18:1a:23:0a:15:e8:a0:1c:
3a:9f:21:20:2f:a7:71:6b:6e:35:76:bb:69:2e:ce:
90:5b:ab:e5:85:8e:86:eb:06:1a:3d:1e:5b:93:b9:
f7:e4:9d:1c:32:32:ed:82:31:e1:1a:a2:b0:e6:02:
a6:59:4b:cf:e6:c0:15:2d:a3:9d:80:17:6f:27:b6:
14:99:c0:d8:c0:fa:26:d2:35:45:04:f3:aa:3c:69:
43:21:74:d5:d5:21:75:17:8e:0f:9f:f4:22:7b:ee:
c7:b6:05:30:03:88:3f:bf:6b:73:d8:ae:cb:df:21:
b8:75:f8:d0:9a:91:20:cb:3f:bb:8f:5c:74:23:67:
49:4e:c3:b1:05:e3:02:22:76:66:00:ff:20:ae:e1:
bc:72:12:a1:26:e1:7a:3f:c1:fe:d6:1a:45:c5:65:
71:0a:ab:b3:26:35:b5:dc:31:cb:a7:61:aa:bd:b5:
91:23:ca:fe:89:a8:7d:91:96:ed:30:a0:d5:07:9b:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:73:1D:D6:AE:C4:82:A3:69:4C:EB:B2:2D:51:C1:E1:83:6F:3A
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1a:22:43:c4:8c:3e:4a:b2:8f:3f:6b:e8:93:fa:da:56:28:
b3:8e:c4:12:be:68:89:12:0f:0d:53:f7:32:fe:82:8a:5e:b2:
1b:25:50:5a:e6:08:69:20:78:17:2c:85:cb:39:1f:c6:5f:c5:
b6:cd:13:78:ad:6e:1e:93:a6:34:71:69:37:f8:3f:1c:22:87:
ca:43:a6:6d:7d:45:33:b8:4a:e0:be:1d:09:b8:be:e6:cf:8c:
2c:3d:3f:9d:42:dc:f3:a2:23:ab:bc:18:63:16:69:ea:98:79:
e9:6d:fb:86:16:72:45:3b:95:39:da:bd:35:c8:9a:43:5b:6f:
29:7d:0f:d5:b2:01:b8:d6:b1:2c:01:74:2c:02:29:82:39:4c:
dd:79:2d:1b:60:3c:c1:50:76:7b:e9:ce:dc:cb:ca:86:c3:23:
e0:7c:7b:b3:20:d9:ea:a4:87:2e:12:7a:36:e9:e8:33:f9:bc:
a6:ab:13:c1:d3:ca:8d:46:71:c8:46:a7:18:67:56:45:84:4a:
eb:60:8f:a0:d2:eb:d7:bb:5a:1f:50:85:ab:c0:64:5c:c9:1e:
2a:3a:73:c0:61:12:df:1e:00:c0:01:32:53:3d:fe:a5:ad:67:
bc:4a:b4:d9:fa:f2:62:36:87:fc:7c:5c:65:3b:60:cc:77:e3:
82:38:ac:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:46:49 2025 by rpki-client