Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: KhSXPpav2ZeDUNQr/anxnH9keeW6yMoi8Uy8yoWGhm8=
Subject key identifier: F1:BF:16:20:6F:97:B1:05:B9:B3:EB:8A:8A:0A:93:C1:14:35:D9:AA
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 0196C3F07609936C3CDF7B97323E47DF934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 03FE
Signing time: Mon 12 May 2025 10:00:38 +0000
Manifest this update: Mon 12 May 2025 10:00:38 +0000
Manifest next update: Tue 13 May 2025 10:00:38 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: hIsxM6pLoxX8Ixdx1CTgFY+eS1C5vnBMybuTn0En5FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:76:09:93:6c:3c:df:7b:97:32:3e:47:df:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: May 12 10:00:38 2025 GMT
Not After : May 13 10:00:38 2025 GMT
Subject: CN=f1bf16206f97b105b9b3eb8a8a0a93c11435d9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:57:83:1c:a2:ae:7f:14:ab:86:17:f8:f8:
6c:aa:a4:dc:14:63:44:51:8c:e5:20:fe:37:96:dc:
76:1b:03:3f:6a:bd:af:13:23:d3:b2:c5:5f:bd:f6:
73:19:73:54:c4:d6:04:64:24:e1:c1:0a:10:35:2c:
b8:9c:b0:80:69:02:30:63:94:77:98:59:dc:12:95:
68:1a:ae:bf:16:1a:2e:35:ef:d6:cb:69:1c:6c:b7:
f1:82:01:b3:3f:c0:e3:15:be:f8:0f:8e:a7:72:89:
63:46:b5:30:72:a0:ba:49:c0:95:14:c5:e2:90:44:
3e:3b:ef:e3:33:02:41:66:bc:b2:1b:4f:7d:0e:fc:
a8:a7:be:d5:dd:7f:0c:c5:11:be:1a:57:0e:e5:47:
45:44:13:06:e8:d3:5e:44:7c:74:45:d9:36:fc:22:
de:93:01:d0:8a:cc:87:09:9d:b9:2b:8c:14:51:e5:
26:c6:d7:4e:7d:4f:8d:2a:e8:c9:5d:7d:70:96:fd:
03:aa:ac:74:86:cb:ec:7d:5c:e9:41:ce:53:e6:7a:
a6:2b:29:9a:2c:e9:b8:66:8e:78:eb:fb:c9:a8:8c:
ef:1e:8b:8f:f8:e7:80:ad:38:e1:4b:af:78:e3:08:
3e:c9:be:c1:c0:e4:3d:fa:56:08:93:c0:c9:85:5a:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:16:20:6F:97:B1:05:B9:B3:EB:8A:8A:0A:93:C1:14:35:D9:AA
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6d:20:72:f7:f4:88:76:4c:ea:7a:69:1b:09:fe:55:82:6d:
17:30:37:1f:b2:c3:75:35:a0:5d:5f:d2:25:92:f8:73:6f:45:
8f:ff:11:dc:f3:1b:af:86:2b:57:ea:77:53:78:31:b6:58:de:
36:f7:8b:4a:7e:e7:4c:23:26:00:66:23:86:f6:a9:b1:77:a1:
f2:f5:ef:11:4c:84:1e:c8:19:e1:48:02:cd:6b:30:e4:85:ba:
b8:ed:4b:63:20:e4:ef:ed:84:69:17:93:f0:c6:6a:b7:e9:6b:
83:45:5d:ae:99:a1:4b:46:ea:05:c2:70:7c:e4:a6:51:97:7e:
e8:2e:2e:07:54:2f:20:03:d5:c3:ce:a2:f8:87:73:3b:04:fe:
d8:aa:82:4c:e6:b6:33:f6:99:50:b7:7a:8e:d9:0d:15:58:3b:
44:05:54:ba:ff:72:17:27:fc:bc:c2:44:2c:6b:f1:09:a8:9a:
b3:d6:ae:01:c3:a4:fb:db:d1:3f:15:5c:45:e8:01:12:b3:60:
94:45:7d:c1:47:9e:b1:db:b6:8d:3b:27:29:27:83:7c:72:77:
b7:a2:f3:25:64:f4:92:0d:6d:c7:7d:29:71:23:08:a7:0c:c2:
55:23:47:fc:5c:20:bc:f5:60:ef:f3:dc:27:3a:95:aa:e1:2a:
50:48:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:45:31 2025 by rpki-client