Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: kWOwk+R6HQxVHBDJfKLLp+MLc3lAbieaFGIQ6gaD2Ks=
Subject key identifier: 07:B5:C8:BE:EB:EA:E3:08:5B:72:66:E5:7B:3D:FE:9C:47:E0:DD:45
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 01963EAFD20E986369C1F2BA48073B195A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 03B9
Signing time: Wed 16 Apr 2025 13:00:32 +0000
Manifest this update: Wed 16 Apr 2025 13:00:32 +0000
Manifest next update: Thu 17 Apr 2025 13:00:32 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: oQlAoerEjaOJHP+K14daNOkD8xPmmS7CcuFgkoy1Ycc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:d2:0e:98:63:69:c1:f2:ba:48:07:3b:19:5a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Apr 16 13:00:32 2025 GMT
Not After : Apr 17 13:00:32 2025 GMT
Subject: CN=07b5c8beebeae3085b7266e57b3dfe9c47e0dd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:a5:36:fa:6c:49:be:34:dc:28:84:fe:c3:
ab:68:f8:7f:c8:a9:aa:fe:d2:79:0c:d7:48:7a:d5:
68:b4:43:9c:e0:2e:07:e7:6a:cd:97:51:97:6c:59:
06:51:24:6d:ca:11:97:7d:36:78:53:01:44:95:e4:
5e:14:8d:bc:ef:87:5d:64:55:ed:ce:46:3f:72:4e:
0b:47:35:52:10:78:32:b9:97:ff:b2:da:b7:73:46:
73:5b:cd:fb:a1:18:7c:79:17:68:9d:1e:3f:f0:5f:
08:2f:f0:d3:71:99:c5:7d:42:e9:bf:98:9e:39:1e:
ef:26:bb:7a:15:7c:d1:b2:2e:93:93:a0:66:ba:6f:
5c:b3:05:07:e5:a9:6f:33:2c:10:d1:30:dd:54:97:
ea:5d:54:59:b7:13:49:fa:0a:aa:07:41:a5:ba:5e:
55:57:e2:07:57:8c:2c:20:16:6f:0e:69:e6:7a:f2:
46:a3:09:bb:8a:0c:d0:92:6f:65:89:ee:74:4d:b3:
47:6d:15:89:8d:e0:1a:a7:a5:ba:71:86:e0:fa:89:
c5:df:52:aa:bf:4b:5c:3d:58:65:08:d2:60:2b:09:
aa:0e:1e:a8:a6:ab:de:53:ae:11:0a:64:cf:e8:b8:
fa:41:c1:0f:8d:07:fe:dd:8e:c8:b5:1b:b8:a5:65:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:C8:BE:EB:EA:E3:08:5B:72:66:E5:7B:3D:FE:9C:47:E0:DD:45
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:32:0c:10:1d:68:68:bb:41:b5:04:6a:c3:03:f5:e5:7f:83:
a3:0b:dd:4d:c2:72:5e:79:33:69:9a:44:0c:f6:36:15:fa:04:
05:d2:75:4d:ee:47:23:33:b4:9f:22:a6:a5:e3:6c:55:8d:7a:
d8:75:01:16:1a:48:48:35:6e:a0:23:8f:bd:d4:c3:1f:1a:1a:
9a:af:f5:7f:b1:47:30:03:93:1b:e3:0e:ed:59:59:7e:7f:8f:
3b:37:5b:d8:5d:0b:c0:7c:27:3e:2f:e0:ae:0b:76:80:50:76:
6e:76:b8:d3:95:88:39:40:98:84:b7:b8:2a:e1:e2:b8:1f:ea:
f8:97:7c:0d:8c:56:3d:e0:e7:04:40:f7:d8:6d:25:e2:05:ec:
b0:e1:6a:5e:54:97:64:e4:bf:99:f2:74:88:a8:c8:22:45:88:
46:f8:76:28:98:be:bb:ea:42:d8:84:db:b6:5f:15:67:18:78:
74:ee:fc:a8:db:7a:24:e9:0c:4b:86:eb:5f:cd:b7:31:34:21:
27:42:cd:91:75:e8:de:2f:3b:4e:24:ad:2d:7c:92:13:94:08:
34:62:f7:2e:46:0e:91:23:cb:a8:99:04:d1:29:dd:29:23:45:
ce:e9:c3:a3:f7:11:5f:ca:b9:07:d5:bd:ff:72:a2:61:66:31:
8c:c7:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:38:59 2025 by rpki-client