Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier: keO8yVVbhSCGy0NsQJzYCDoYgl5puxDb48CU1Tj3nEg=
Subject key identifier: 77:BD:23:90:B3:06:38:DB:C2:67:F8:B5:DB:90:32:E3:07:FC:7E:77
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 01965914AA42B33BCA50B44F5D7E7E9823F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 16:00:48 +0000
Manifest this update: Mon 21 Apr 2025 16:00:48 +0000
Manifest next update: Tue 22 Apr 2025 16:00:48 +0000
Files and hashes: 1: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (hash: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=)
2: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
3: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: BVmL210glA0hxI9vWVs+92PKSZrZbfxpRgAzyQAImvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:aa:42:b3:3b:ca:50:b4:4f:5d:7e:7e:98:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Apr 21 16:00:48 2025 GMT
Not After : Apr 22 16:00:48 2025 GMT
Subject: CN=77bd2390b30638dbc267f8b5db9032e307fc7e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:0c:b2:8b:af:f5:86:62:de:30:57:d6:68:
37:39:14:a7:13:10:c3:32:59:95:37:dc:77:d4:d2:
2f:f8:2e:02:42:9c:e0:39:f0:91:0d:e8:c7:be:c8:
d3:95:3d:42:2d:07:10:5e:ea:3a:25:28:54:cf:81:
83:ac:f0:10:0b:65:57:a1:ea:e0:e6:d4:f0:e7:d0:
fa:f4:f2:ff:bc:61:ff:d3:77:70:52:47:78:ed:1a:
be:4a:95:50:be:1f:da:5b:5a:95:87:2f:81:20:55:
11:91:73:c4:95:42:18:e9:73:b3:5b:5f:b4:1b:91:
43:d0:96:b5:a9:31:9b:86:6a:56:de:a9:3e:f2:54:
5f:25:d3:da:7c:99:cb:6f:b3:ea:0e:da:ca:df:dc:
98:19:43:55:09:01:c7:30:14:a1:05:98:5a:de:61:
9f:2d:26:67:58:d1:c9:b0:b5:49:94:0f:f9:06:1e:
20:04:7d:fc:3f:c1:b9:3f:94:43:11:32:20:3c:6f:
47:14:57:bc:8c:d8:25:c3:fc:f2:ec:13:06:d2:3c:
35:4a:b3:7c:56:11:88:35:c5:7d:54:4f:60:74:c8:
26:99:4d:de:8b:e1:bb:e7:c3:c0:91:0a:41:f9:69:
7b:e3:58:fc:cb:a7:6d:32:5f:0f:7b:ff:af:20:c3:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:23:90:B3:06:38:DB:C2:67:F8:B5:DB:90:32:E3:07:FC:7E:77
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:62:91:db:64:34:75:43:61:81:8b:c1:27:a8:12:ec:6b:46:
da:01:f1:0d:55:41:98:f2:3f:da:31:58:b5:75:e5:87:fc:39:
41:44:9e:0c:0b:84:95:72:61:64:c9:01:40:7a:cd:27:19:69:
15:bb:6b:a2:9a:ef:3b:98:0c:82:8e:1c:14:e4:2a:1a:a6:e8:
9c:76:10:cf:e5:56:3d:8b:5c:f2:36:35:32:64:38:08:bf:0a:
28:8a:c4:af:48:84:89:27:1e:5f:92:d1:7a:c1:99:45:5e:f9:
f1:07:63:14:31:4c:1b:9d:01:f6:95:bf:de:1f:36:0e:54:bd:
df:89:12:7a:d0:2a:62:9b:0a:ac:24:88:23:59:ac:7b:2c:29:
e4:37:b0:c5:ba:af:87:69:40:4e:9e:b7:33:82:54:c9:e1:aa:
86:f5:0d:d3:ea:63:60:fc:b0:9b:4a:3d:76:22:7f:00:62:4f:
a2:a4:f8:40:9e:26:87:db:d1:a6:8a:6e:ab:c3:e8:2a:c2:8c:
d4:04:ee:a1:c0:1f:60:a1:69:e1:05:33:2b:4e:5b:d6:7a:1b:
06:9a:a4:bd:b6:8d:e0:44:f8:2a:df:af:6e:a8:86:8b:e4:6b:
ec:f5:d3:bf:61:9f:a9:8f:98:fb:de:8a:a7:4a:9b:16:15:86:
87:22:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:29 2025 by rpki-client