Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: tTyFJO4R5AAyID6Pr+AM4L0uwAJq3wB2fa7/UPXmZXI=
Subject key identifier: B2:D5:1D:29:0B:4B:5F:88:B0:54:DB:27:47:1D:D4:F7:38:E0:7B:D0
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019655A5F17B42717F7B451EC09E7C505814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:01:00 +0000
Manifest this update: Mon 21 Apr 2025 00:01:00 +0000
Manifest next update: Tue 22 Apr 2025 00:01:00 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: 0zD5tKzlEQ+87Ln0ByvcTTBgqAWB/WI2j/tTjd23XIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:f1:7b:42:71:7f:7b:45:1e:c0:9e:7c:50:58:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Apr 21 00:01:00 2025 GMT
Not After : Apr 22 00:01:00 2025 GMT
Subject: CN=b2d51d290b4b5f88b054db27471dd4f738e07bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:57:05:d3:5b:26:35:cc:70:b1:9e:d7:93:
f0:85:51:07:61:4b:13:75:45:09:ae:2d:c6:9f:19:
e1:f5:89:76:ad:a9:36:15:ba:a8:4d:5f:d4:26:10:
e5:b3:1f:c9:24:8c:62:c7:95:35:80:bb:4d:79:c0:
26:28:d6:9c:ba:18:39:24:cf:fc:3e:0c:8f:7e:29:
99:99:98:04:72:0e:c1:2b:cf:2e:78:92:4f:83:22:
d1:cf:36:fb:a9:87:88:51:fc:c9:cb:22:fe:84:93:
b7:38:f9:3f:b7:5f:f0:f2:27:12:a8:fa:2a:05:ea:
77:12:64:ac:57:45:8c:4c:3f:14:3c:ec:14:4c:b3:
70:dc:2d:eb:0f:8e:2c:9a:f3:a2:c0:ff:36:0d:2d:
51:e7:1d:d6:80:f2:89:a3:57:05:77:84:a5:5f:05:
84:69:6b:8b:cb:2a:5b:a2:57:b9:a2:c9:77:16:9e:
6a:61:b3:bd:7d:58:c4:9f:01:3e:f6:2d:b1:c4:02:
1e:1a:31:62:cc:20:4d:4b:b8:76:bf:7e:8b:61:09:
e0:92:61:9c:3e:85:b4:ba:96:87:94:33:6c:42:11:
e6:d8:bf:54:83:af:61:0c:35:fb:8d:86:c4:56:38:
3a:fe:b9:79:ad:63:66:95:89:9b:28:d4:f9:bb:af:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D5:1D:29:0B:4B:5F:88:B0:54:DB:27:47:1D:D4:F7:38:E0:7B:D0
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:99:0a:bd:74:9c:d6:eb:f7:65:00:8e:46:96:25:5a:52:
0f:a4:af:5f:23:13:48:b4:3a:d8:a2:4b:fb:9a:87:b7:ec:cf:
27:aa:7c:a8:26:1e:99:99:31:17:61:22:7c:27:df:d9:26:29:
1c:cc:13:8e:7c:9a:b3:5e:45:3a:c3:bd:63:93:15:b2:f1:0a:
60:69:b0:0e:94:a2:be:c8:fd:3e:40:ef:a2:d4:9f:53:d0:3d:
13:cf:3f:c3:ab:b8:7a:c7:d6:af:e0:d0:0c:e7:c4:d4:57:cd:
77:3f:83:29:ee:2f:45:6c:ed:e7:69:ac:94:a9:44:94:37:00:
45:97:6e:a1:91:02:e5:57:56:b0:55:55:53:6c:f8:4d:bd:7e:
f5:05:db:b3:6b:27:4f:4d:58:77:c3:28:74:82:22:20:c9:68:
c8:d4:fe:70:5e:8a:b3:55:a4:be:45:ca:ad:6f:74:d5:b1:97:
f8:2b:c1:db:b3:f8:0d:47:c4:dd:78:2d:2b:82:1b:71:38:ee:
84:f4:19:ce:dd:bb:1b:60:ec:11:11:21:d9:c4:de:55:fc:3f:
69:25:13:3e:3b:07:f9:59:69:5e:a8:4c:14:db:18:24:ae:34:
6f:c0:7d:48:54:77:63:5b:66:63:14:05:c3:ba:39:18:9e:2f:
69:78:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:46:45 2025 by rpki-client