Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier: GV73tyscwJMXwOJOqSqhgDlYBzv+JYfiFU9bhKnuAsY=
Subject key identifier: AA:A1:FD:C3:E8:B1:25:06:B8:4D:95:C7:4A:86:96:58:63:00:FE:6A
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 0196BD124B16863652004DA67A84C6522D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 02:00:14 +0000
Manifest this update: Sun 11 May 2025 02:00:14 +0000
Manifest next update: Mon 12 May 2025 02:00:14 +0000
Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: UOi19srFFSh9IpMRFFt5dsJB+guy2meyHtuFF/41LHk=)
4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:4b:16:86:36:52:00:4d:a6:7a:84:c6:52:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: May 11 02:00:14 2025 GMT
Not After : May 12 02:00:14 2025 GMT
Subject: CN=aaa1fdc3e8b12506b84d95c74a8696586300fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:f2:41:93:a5:9f:ff:5c:ce:c5:33:2b:46:
8d:84:94:ce:d0:7f:84:65:f9:08:cf:6e:46:2b:58:
ae:7b:ab:9c:5a:20:76:55:19:db:59:24:71:4e:c6:
6b:13:aa:39:27:b2:21:d7:51:7b:a6:d1:7f:20:a6:
78:cc:02:0d:67:fa:32:a0:ee:8b:73:bf:90:6f:51:
28:b2:0a:af:1c:bc:f0:b4:f1:83:ee:71:c1:37:5b:
e5:cf:0e:7f:43:01:55:b2:64:fa:43:f9:fe:7f:96:
05:22:d7:a6:b9:bd:99:58:ba:40:90:e9:53:73:28:
07:e6:5c:86:d8:25:b4:84:03:0c:c3:79:89:7e:f7:
60:ad:54:c7:70:61:7f:76:3e:58:bd:c4:f0:62:22:
6d:f2:79:f3:ad:a5:b9:43:3a:bd:aa:29:d6:32:0b:
dd:01:ec:5c:ef:77:db:8a:92:fc:5e:3d:29:3e:6b:
8d:be:0f:d3:cb:0a:60:fc:87:86:56:27:bd:de:3a:
55:f3:a2:ae:f5:0b:fa:51:3c:45:4a:da:ff:9d:5a:
c6:d4:12:95:fa:f8:91:d0:2e:18:79:ac:0d:3a:f5:
f3:c6:d1:c1:35:eb:42:50:0f:1a:0f:1b:4a:f1:e1:
d0:38:d7:f4:36:22:a8:7a:70:d1:32:21:29:f8:7c:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:FD:C3:E8:B1:25:06:B8:4D:95:C7:4A:86:96:58:63:00:FE:6A
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:22:6c:90:4e:34:dc:80:5e:c6:0a:ca:96:b3:5e:dd:2d:be:
d4:38:74:b4:8c:6d:40:22:12:98:ef:31:ba:0e:96:0d:36:c1:
a0:7b:5b:0c:77:74:33:a4:4d:f1:67:9c:3c:03:20:06:88:b7:
66:a2:36:2b:c1:95:2d:e1:38:43:78:da:6c:cc:56:60:5f:82:
7d:b6:17:d2:aa:cf:ad:20:b7:ca:3d:76:5c:0f:f5:76:47:fa:
c6:47:d8:f6:ff:c7:a8:03:68:5e:44:22:25:da:7b:b5:4f:57:
8b:c5:2f:31:f3:2a:c4:75:d6:0a:a2:ac:40:f4:59:b7:17:29:
f1:14:fd:45:19:c0:78:86:3c:a0:83:ed:5f:02:39:34:d6:c3:
15:52:93:03:ee:4f:e1:03:48:c6:4a:53:23:93:e0:43:4c:61:
e3:58:68:79:62:f2:c2:42:c6:3e:1d:09:28:ce:12:41:26:62:
9b:1f:d8:9f:5a:b3:52:b0:c8:36:9e:7c:74:f7:53:cf:e1:75:
91:08:fa:7c:cc:83:1a:d4:bf:1c:7c:c2:2c:b1:0a:d6:b6:1d:
a9:a8:81:41:2c:47:6b:b3:ae:df:15:76:38:b2:89:37:43:da:
71:64:5c:d8:99:bd:87:80:f7:6f:be:6b:65:d7:31:e4:5d:d5:
f7:01:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:21:58 2025 by rpki-client