Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: Wcomh9CyJKfTHOvnmMQjiw2rg7nzjEdullt7EsOcziA=
Subject key identifier: 79:14:1F:4A:65:C5:73:DD:E8:33:26:BB:3D:3A:A1:3B:84:FE:2F:5C
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 019651C8AB0EEA6E0233464FBB757ED89AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0949
Signing time: Sun 20 Apr 2025 06:00:27 +0000
Manifest this update: Sun 20 Apr 2025 06:00:27 +0000
Manifest next update: Mon 21 Apr 2025 06:00:27 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: md95rIyNy3ZEG3HbWUDb7/Xv9VEH7tbnWVsam/cN2DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:ab:0e:ea:6e:02:33:46:4f:bb:75:7e:d8:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Apr 20 06:00:27 2025 GMT
Not After : Apr 21 06:00:27 2025 GMT
Subject: CN=79141f4a65c573dde83326bb3d3aa13b84fe2f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:f2:ac:f0:04:0b:f1:71:77:6e:31:dd:76:
c9:78:20:ed:bf:a9:9c:48:e6:1b:b7:d8:f5:23:17:
7d:3a:8e:26:58:f8:cf:c3:3e:8f:85:e1:77:57:05:
78:08:02:6e:76:7b:12:cc:b7:2b:b6:7b:47:a2:58:
91:2c:80:83:cb:e5:65:7e:da:7e:81:1f:9e:0f:5c:
80:fa:21:79:e1:05:d7:28:28:de:0c:0e:51:c9:94:
d6:f7:8d:b4:a7:83:9a:e2:ca:65:0f:9b:b3:22:3a:
64:9c:e4:00:24:db:ff:54:1c:ae:0c:58:a4:ca:7d:
8b:e1:0a:aa:c9:0c:59:db:ee:e4:c8:a6:b3:1a:00:
2a:36:c4:1b:8f:14:89:f9:1c:22:51:80:4c:8e:d8:
dd:5a:6a:79:2c:29:8d:22:bf:6f:11:65:91:90:53:
e8:99:ab:99:89:8d:7d:f8:9e:8a:86:b0:d2:70:d5:
94:4f:2e:8a:65:f0:a1:19:cd:78:fe:c9:0c:af:23:
62:e0:ea:46:b9:7e:60:7a:71:aa:45:e8:3c:63:3f:
aa:dc:d7:c3:c0:0d:d4:7a:6e:0f:14:c1:91:06:55:
de:04:e3:d4:50:10:3d:26:8c:a5:8b:8c:51:97:7c:
1f:6e:c0:72:fe:ff:a6:84:e6:34:b9:79:71:b4:5a:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:14:1F:4A:65:C5:73:DD:E8:33:26:BB:3D:3A:A1:3B:84:FE:2F:5C
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:0a:57:4a:7b:b4:5f:57:70:e0:e4:8b:db:29:a4:aa:ea:
f5:4e:e0:d9:3a:56:d1:7c:7e:ff:50:18:3b:66:ad:7b:9f:c0:
c2:e2:0b:59:4f:1e:7f:72:31:9b:b4:76:1c:71:f2:7b:43:22:
a9:21:04:cd:8b:2b:5b:d5:7e:fa:ae:31:ff:32:54:e7:50:30:
5f:eb:a5:c2:36:03:d1:ca:16:c4:28:c6:82:85:f5:f5:31:db:
ee:da:57:88:61:04:4f:84:69:2a:b2:7f:db:af:86:8b:d6:86:
c4:7a:54:fd:32:aa:69:58:c2:8d:10:dd:da:a6:34:80:03:ff:
09:59:df:05:e1:8b:51:8f:77:8f:0e:f6:04:02:39:94:e8:2f:
19:54:53:49:fa:69:6e:fd:06:ed:d7:1d:86:aa:41:3d:b3:91:
85:af:f3:95:80:ec:d5:56:d5:89:66:8a:31:e9:f6:3a:9d:d0:
d6:7f:29:95:65:d2:a9:8c:2b:96:eb:fc:d4:42:9b:5f:d0:f1:
3a:b7:16:f4:3e:42:79:5a:c2:65:3b:77:c6:6a:32:63:56:64:
0d:9c:aa:c6:20:7a:fc:44:eb:fa:5d:4e:b6:ed:38:49:17:b2:
00:55:47:66:30:8e:0a:cf:e2:00:cc:18:80:33:60:93:18:33:
fa:8f:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:18 2025 by rpki-client