Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json)
Hash identifier: 8MmdpNShrCfFqxgYchZAi0y1ADHEenL9+GI4BcLV6+Y=
Subject key identifier: FC:25:4E:0D:FA:96:0B:79:78:E0:6E:E0:9D:53:45:01:7B:5E:4F:E6
Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589
Certificate serial: 01951210C06B1F22FC9F6682F1EFD444F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
Manifest number: 03FC
Signing time: Mon 17 Feb 2025 04:00:42 +0000
Manifest this update: Mon 17 Feb 2025 04:00:42 +0000
Manifest next update: Tue 18 Feb 2025 04:00:42 +0000
Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=)
2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: 6VunqpbCXnhcGV93IaUeJvvqWq954Km/EfN+Qa53exI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c0:6b:1f:22:fc:9f:66:82:f1:ef:d4:44:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589
Validity
Not Before: Feb 17 04:00:42 2025 GMT
Not After : Feb 18 04:00:42 2025 GMT
Subject: CN=fc254e0dfa960b7978e06ee09d5345017b5e4fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:65:ee:2e:35:d9:50:e9:c0:b4:5c:1c:31:
75:f0:1f:5a:db:b1:b6:e9:1b:65:7d:28:0b:0b:6d:
cc:3d:57:2a:15:33:f4:b2:be:ae:3d:67:4b:37:20:
72:1c:d6:5e:57:71:d7:3e:d8:91:62:3c:ff:4f:8c:
13:5f:4c:5e:2e:45:3b:96:be:b2:c5:39:0c:20:c0:
9a:56:99:92:78:00:19:c0:0a:e3:8f:4d:14:aa:be:
fe:95:ad:3e:dd:95:0b:e0:98:47:f3:a9:14:58:63:
d1:50:0f:86:a5:45:9d:8c:41:6a:25:04:03:eb:60:
02:c8:f1:70:c8:5b:a4:80:d4:f8:30:a1:3f:2d:fd:
0f:61:30:a3:60:91:92:42:fb:47:30:01:87:5e:04:
64:71:0a:cf:69:d6:49:cf:64:59:29:06:27:73:10:
68:02:c9:8c:f1:b1:43:61:d4:bd:9c:8b:72:ed:79:
7c:18:f8:21:02:d3:af:b5:f6:d4:c1:69:4f:6c:da:
b0:57:b4:ea:b2:f3:fb:4f:0d:5f:42:96:a2:1b:4a:
b6:29:15:fa:15:5f:ac:f2:a3:cb:ba:33:14:cd:0b:
5e:56:90:c3:cc:33:87:d4:42:94:98:c9:55:77:6c:
c9:a4:ca:19:69:05:fb:38:e0:83:da:58:2b:a6:7c:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:4E:0D:FA:96:0B:79:78:E0:6E:E0:9D:53:45:01:7B:5E:4F:E6
X509v3 Authority Key Identifier:
keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6f:40:a7:38:13:01:2c:f1:03:a9:a1:b9:ab:5f:e7:1e:6b:
e5:e0:cf:60:04:34:a7:43:48:1a:39:98:91:3f:01:4b:a7:e0:
b8:74:69:d0:41:4e:70:88:5b:c1:85:02:d6:81:92:02:39:db:
bf:7f:db:6a:4e:15:e0:2f:49:e5:eb:33:fe:30:a8:06:03:18:
8d:7b:cc:78:9c:80:3a:dc:b9:c1:3d:b5:c7:fc:3c:88:de:53:
4f:42:cf:35:32:fb:fe:88:91:26:86:07:1d:4c:cc:4f:9d:cb:
e8:40:57:36:ec:54:e1:f5:88:d9:04:07:0f:8a:fc:7c:59:8f:
b5:d7:74:8d:2e:b7:e7:78:e2:b3:56:22:aa:67:52:8e:51:4d:
09:77:be:ae:be:ab:0e:6c:8f:f2:82:86:47:44:d9:2f:8b:be:
b3:ce:1b:e6:61:7c:1c:c4:9f:72:40:ce:4f:86:c7:ba:8a:92:
6b:c5:8e:72:33:05:6f:6e:30:16:b9:19:14:0e:36:04:ae:d8:
a7:bc:31:5c:df:6f:dd:38:b0:17:8a:43:e2:90:5f:05:c2:1d:
90:2d:ae:78:d6:17:a8:d0:68:c5:d1:c0:97:90:0f:6d:b7:6f:
29:c1:96:8f:a2:78:aa:fe:7d:83:6a:f1:b9:a0:e7:98:a2:a4:
59:a4:f0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEMBrHyL8n2aC8e/URPQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl
MzA1ODkwHhcNMjUwMjE3MDQwMDQyWhcNMjUwMjE4MDQwMDQyWjAzMTEwLwYDVQQD
EyhmYzI1NGUwZGZhOTYwYjc5NzhlMDZlZTA5ZDUzNDUwMTdiNWU0ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt41l7i412VDpwLRcHDF18B9a27G2
6RtlfSgLC23MPVcqFTP0sr6uPWdLNyByHNZeV3HXPtiRYjz/T4wTX0xeLkU7lr6y
xTkMIMCaVpmSeAAZwArjj00Uqr7+la0+3ZUL4JhH86kUWGPRUA+GpUWdjEFqJQQD
62ACyPFwyFukgNT4MKE/Lf0PYTCjYJGSQvtHMAGHXgRkcQrPadZJz2RZKQYncxBo
AsmM8bFDYdS9nIty7Xl8GPghAtOvtfbUwWlPbNqwV7TqsvP7Tw1fQpaiG0q2KRX6
FV+s8qPLujMUzQteVpDDzDOH1EKUmMlVd2zJpMoZaQX7OOCD2lgrpny8rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwlTg36lgt5eOBu4J1TRQF7Xk/mMB8GA1UdIwQY
MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt
Y2JhMDYzMWYyOTNmLzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm
LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW29ApzgT
ASzxA6mhuatf5x5r5eDPYAQ0p0NIGjmYkT8BS6fguHRp0EFOcIhbwYUC1oGSAjnb
v3/bak4V4C9J5esz/jCoBgMYjXvMeJyAOty5wT21x/w8iN5TT0LPNTL7/oiRJoYH
HUzMT53L6EBXNuxU4fWI2QQHD4r8fFmPtdd0jS6353jis1YiqmdSjlFNCXe+rr6r
DmyP8oKGR0TZL4u+s84b5mF8HMSfckDOT4bHuoqSa8WOcjMFb24wFrkZFA42BK7Y
p7wxXN9v3TiwF4pD4pBfBcIdkC2ueNYXqNBoxdHAl5APbbdvKcGWj6J4qv59g2rx
uaDnmKKkWaTwKA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:41 2025 by rpki-client