Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: zm6Z1bUtSaF0tDebWZH7rzIq9hnYbtaUpwjZX9FrJgc=
Subject key identifier: 2F:E2:20:88:C3:57:02:72:C8:72:EB:7B:40:81:69:61:37:3D:02:C6
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 01969F084C3D2234BAFE95D8F51BF72168F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 06:00:43 +0000
Manifest this update: Mon 05 May 2025 06:00:43 +0000
Manifest next update: Tue 06 May 2025 06:00:43 +0000
Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: EnaL3bTNUl0x+5k+MlIqc+YJ/YAKiA26ADCdNk8yYh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:4c:3d:22:34:ba:fe:95:d8:f5:1b:f7:21:68:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: May 5 06:00:43 2025 GMT
Not After : May 6 06:00:43 2025 GMT
Subject: CN=2fe22088c3570272c872eb7b40816961373d02c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:3f:35:27:08:cc:39:ba:ea:ed:e8:69:2e:
30:4c:90:1c:8e:3b:1e:34:e3:ad:15:91:1e:3e:ba:
37:f6:68:c1:fb:4d:a4:aa:e4:e2:e3:96:97:e0:da:
ee:04:61:21:4c:ff:df:60:c8:56:4e:b7:c4:14:27:
e0:42:d3:d1:8d:d5:f7:c5:33:b4:eb:87:6f:95:33:
4b:88:8e:13:11:b1:b0:94:32:ca:e5:f1:67:4b:05:
33:da:73:ff:5a:16:7a:25:24:b1:36:cb:74:c9:b0:
26:60:a5:0a:8b:81:90:cc:d6:03:2a:3a:59:22:90:
b0:b6:c8:02:05:d1:93:4b:e4:a0:bd:3d:98:53:0e:
b7:82:f2:0b:ae:e2:2e:18:e1:be:8a:cd:07:ae:b8:
38:c6:f3:c1:bc:30:9e:ec:5e:a6:0b:3d:ce:10:7f:
e3:ca:dd:19:d9:e1:a5:da:ba:55:5e:23:2d:f8:79:
72:7f:bd:f1:22:56:33:71:a6:a0:41:32:bb:61:7c:
90:7f:27:72:1b:0d:6b:6a:3f:87:0d:e3:af:48:b2:
dc:c4:21:ba:1b:02:81:3d:db:1d:85:ff:af:95:94:
9e:bb:0d:79:af:46:23:1d:5e:58:0e:05:65:97:37:
3a:ec:ed:ad:6e:89:65:26:fc:65:3c:82:d6:71:53:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:20:88:C3:57:02:72:C8:72:EB:7B:40:81:69:61:37:3D:02:C6
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:cc:6a:28:89:a6:84:71:99:a4:21:d4:e4:ba:7b:66:00:
37:92:cf:3c:be:eb:45:51:0a:63:30:fa:ca:66:99:96:6a:3a:
4b:1b:89:c7:00:31:9c:da:5c:1c:18:51:1f:dc:2c:f2:a9:40:
4f:53:2b:53:c3:42:8e:07:d5:ab:b5:19:ea:0b:f2:f4:5e:bc:
c1:be:ba:0a:b0:d0:4f:60:88:ea:af:fa:df:f9:37:12:3e:a6:
82:25:9a:bb:d8:75:2d:3c:ec:01:03:12:e5:f3:1f:c6:78:c7:
d3:6b:4a:31:0a:a8:d5:30:91:f5:7c:e9:62:e9:c0:11:2a:75:
32:26:d5:c8:65:32:f9:63:f9:7b:cf:b6:67:30:5a:d0:97:85:
43:ea:b0:95:d7:fe:9f:c6:8a:14:2d:53:42:38:07:61:81:e5:
7d:35:4f:f8:8e:8f:62:e9:c8:00:b2:2f:b7:04:3d:27:b9:c4:
a9:b3:51:97:31:65:3b:4b:a1:3e:01:c8:1f:f4:b4:0b:1e:81:
eb:88:ce:32:29:bf:46:7f:cb:00:e8:24:f0:32:a8:5c:a0:f6:
b4:c3:94:e8:25:6d:73:4a:34:fc:fe:e1:a0:ce:3e:7a:3f:c0:
45:52:88:75:01:a7:b1:9e:1f:b3:e6:50:b3:4b:1c:a8:7b:f2:
3a:07:73:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:25:37 2025 by rpki-client