Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: Q63RsDAb2FoyNtlQQaeu8ZNGeMfbcK/OinPd2uv4fPU=
Subject key identifier: A1:2D:C0:C1:60:85:7B:DE:23:F9:1D:3A:90:1B:82:BA:B8:F5:34:8D
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 01963E78D91667D21AA73088AAFDD81B407D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 12:00:29 +0000
Manifest this update: Wed 16 Apr 2025 12:00:29 +0000
Manifest next update: Thu 17 Apr 2025 12:00:29 +0000
Files and hashes: 1: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (hash: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=)
2: SNHPOOFKUgc1zNBN9wxr7FeAdRs.roa (hash: Hb2HBizkzgimQbuN29+MCl8e5+WlfhI+P1/UM2vwUU0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: uhDD218e6cvKX6GGvp3S/1qYzy/ywytk9Q//IxKorX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:d9:16:67:d2:1a:a7:30:88:aa:fd:d8:1b:40:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Apr 16 12:00:29 2025 GMT
Not After : Apr 17 12:00:29 2025 GMT
Subject: CN=a12dc0c160857bde23f91d3a901b82bab8f5348d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:fe:90:7d:40:33:ab:87:e9:af:c9:6c:10:
7f:70:9e:b3:06:7e:ce:57:da:2f:aa:06:f3:0c:f8:
83:9c:19:b8:d0:00:b4:d7:7a:11:74:78:bc:5f:0c:
07:e1:7f:75:f5:a5:af:95:b9:be:46:d7:75:1e:e5:
23:bf:68:43:ce:f2:fb:13:c5:cc:63:2f:7b:d1:6c:
ca:f7:87:b9:74:e1:cc:25:be:25:ee:6d:2d:49:be:
58:64:5c:1d:6e:2d:44:f7:1b:f5:33:99:90:33:cc:
bb:a6:f9:47:4f:76:dc:80:c1:64:73:6b:fa:e6:a1:
60:1e:a5:7f:59:d8:33:38:1d:a9:59:16:14:f7:88:
96:ec:43:7c:a3:c2:93:40:ad:04:68:4b:88:fa:01:
a1:06:2d:79:25:ec:5d:fb:27:0b:00:bd:c8:cd:d9:
c8:df:35:96:68:56:76:db:3f:a8:c2:ec:d7:ce:e3:
c3:0e:92:76:a5:5c:16:4b:ec:fc:8f:68:01:af:8a:
45:bd:ac:cf:98:7b:f3:2b:e1:ad:00:00:89:91:f0:
f1:f3:28:54:02:24:ec:ee:a3:b7:db:5b:75:06:16:
f7:43:d1:06:da:a5:0c:64:1a:fd:12:e7:ab:2b:35:
a4:35:0f:92:aa:ee:dc:57:d2:b7:21:b7:45:94:cd:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:C0:C1:60:85:7B:DE:23:F9:1D:3A:90:1B:82:BA:B8:F5:34:8D
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:95:96:29:e5:48:7f:b5:72:2b:15:45:43:fa:cc:79:1e:
4b:50:78:25:c2:62:d1:18:3b:58:7f:ff:34:8f:18:20:14:2c:
a2:04:19:be:6a:76:00:f5:16:31:28:c2:5d:0c:a1:e8:52:6f:
81:7e:b8:b7:80:24:31:83:0c:cd:2a:38:c4:be:e9:9b:63:82:
10:47:b6:45:ba:3c:97:8a:3e:e8:52:06:01:b0:49:dc:d4:f3:
ca:ae:7f:c1:b8:ea:ea:d3:8c:da:b7:3c:60:96:32:49:8a:0b:
9f:bc:b0:b4:50:cc:7f:c3:93:8c:5a:1d:a7:ef:49:4d:6c:76:
9e:82:32:ea:8a:48:05:b7:8c:24:c7:e2:a5:f6:7f:b1:fa:8d:
fa:78:4a:b1:47:86:e5:45:03:ba:52:42:c6:d3:23:02:1b:20:
d4:8f:c3:2d:eb:2f:38:ef:61:9a:f4:53:ed:4b:08:2e:a4:0a:
e3:7d:92:2f:9d:ca:cf:3e:e1:60:41:2d:2c:d2:9b:3d:7c:51:
c0:6e:d6:44:b6:50:29:2e:d9:00:9d:01:08:b8:5c:03:5a:cf:
0c:45:11:7b:ef:d9:d7:06:de:17:38:76:81:f5:f7:8c:bd:7b:
f1:68:87:77:4f:92:1f:a3:cd:89:5b:9d:51:3e:09:73:71:cb:
ce:14:aa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:35:49 2025 by rpki-client