Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: BLTNuGTaCXjmfXwtSS4QpLENXjT53G/LdUb+QhikZZ4=
Subject key identifier: 42:F9:C4:D2:F1:E3:7C:35:2A:2C:2D:0D:0D:82:4F:A9:86:A7:BB:0B
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0196C53A6F2DB17426FA15C20117FC163447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 089F
Signing time: Mon 12 May 2025 16:01:03 +0000
Manifest this update: Mon 12 May 2025 16:01:03 +0000
Manifest next update: Tue 13 May 2025 16:01:03 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: b897y+UwI4OAzrnMHor5K2uiyQwjmXNPXayXk3b0hsI=)
2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:6f:2d:b1:74:26:fa:15:c2:01:17:fc:16:34:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: May 12 16:01:03 2025 GMT
Not After : May 13 16:01:03 2025 GMT
Subject: CN=42f9c4d2f1e37c352a2c2d0d0d824fa986a7bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:c0:70:db:ee:34:e9:3f:97:fd:05:58:98:
d6:00:d2:b6:f7:a3:7b:c1:ff:31:90:07:ed:a8:2f:
e7:f3:19:d3:8e:13:07:1b:72:06:36:44:5f:80:df:
13:9e:c7:60:01:46:f7:a4:7a:0d:a0:e9:eb:7c:93:
42:bb:df:a3:58:cf:98:05:f2:e4:5f:0c:2e:59:2a:
8e:fd:77:c0:46:f7:c7:d3:cb:a2:dc:5f:00:be:ef:
16:ef:b7:22:04:4c:0f:b7:99:ae:7e:ac:15:db:93:
c6:5e:63:dc:66:a1:de:9e:f3:73:b9:88:ba:07:48:
26:48:de:a1:3e:fb:22:ba:36:f9:5f:06:16:87:53:
98:fe:2f:7e:17:b4:ef:eb:c0:71:5c:19:c4:d5:25:
4b:bf:14:2d:20:16:7e:00:b0:a1:22:12:c1:96:35:
d8:1a:51:ca:d3:3a:b8:cf:14:d1:dd:0c:50:01:95:
b0:82:64:01:a4:4d:10:c7:ee:b8:a1:0d:58:70:20:
93:2c:5a:df:f9:b5:8d:d1:8c:2f:07:48:04:ad:ef:
bc:d0:8b:18:9b:a4:6d:91:64:5f:a7:55:de:a1:a6:
38:d8:e4:2d:94:c7:87:b5:29:22:c1:b0:8d:5a:f1:
45:86:9e:2b:5e:91:d9:01:c3:e0:60:aa:85:4e:2e:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:C4:D2:F1:E3:7C:35:2A:2C:2D:0D:0D:82:4F:A9:86:A7:BB:0B
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:99:ad:b9:99:33:7a:7f:20:0c:ea:97:4c:0c:77:07:db:af:
1a:e0:df:55:d5:6e:80:5a:c9:84:2a:76:c6:d3:e8:39:bc:c5:
f3:22:41:4d:c5:46:d6:56:d6:54:5b:0d:cc:c6:69:b6:f0:9b:
da:ff:8b:b5:5f:2c:c3:e2:01:80:17:cc:ed:3c:fd:8c:98:33:
34:97:fb:43:42:96:01:98:c6:6a:6e:cc:d3:10:88:98:c2:db:
d2:f4:06:75:26:b0:87:42:53:3c:e4:9c:64:f2:41:15:07:32:
e4:26:35:a9:62:6e:b7:a5:06:5a:27:ab:29:08:ee:ba:65:09:
50:93:0b:e7:e1:a7:66:fd:b0:b0:6e:f3:d2:0f:c7:73:a3:6d:
cb:ba:3b:4c:8d:25:b5:fc:cc:97:1d:c7:a5:f8:c9:65:04:e4:
59:a0:57:20:ac:ae:a8:99:8b:a3:f2:51:f1:d4:f8:db:57:4b:
36:9b:57:58:cb:43:ef:68:5e:24:e5:b1:24:42:91:a9:69:73:
96:fc:b1:dc:49:e2:49:fe:b2:05:57:8e:2f:fa:d9:67:44:9a:
a0:c0:68:c8:a2:c3:f6:8e:65:46:c1:d0:ce:ec:95:3c:b2:66:
ba:98:a0:46:9e:74:27:2c:6c:35:9c:da:96:58:28:ed:33:b4:
06:6d:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:56:08 2025 by rpki-client