Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: GFGbKLMyeaCscJdceWDSs6KkRaeFbOHcs5d7r3ncUcU=
Subject key identifier: 04:3B:DC:AA:3D:BD:BB:BC:9D:50:10:71:5E:30:B6:B6:DA:A4:48:EB
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 0196B10E87933E82D66DF7BBFBE3C6AEC7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 18:00:41 +0000
Manifest this update: Thu 08 May 2025 18:00:41 +0000
Manifest next update: Fri 09 May 2025 18:00:41 +0000
Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: OG18NvajMvaxgNkIkMYxW6CeOBKWb50V4qSHnjZaEPg=)
2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:87:93:3e:82:d6:6d:f7:bb:fb:e3:c6:ae:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: May 8 18:00:41 2025 GMT
Not After : May 9 18:00:41 2025 GMT
Subject: CN=043bdcaa3dbdbbbc9d5010715e30b6b6daa448eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:7e:b5:fe:f6:b9:31:51:90:79:46:85:c2:
05:eb:19:6e:13:fa:c7:ed:70:02:2c:dc:a9:3d:2d:
2b:9a:39:3c:ea:41:0d:64:47:55:31:e4:bc:3a:33:
5d:12:bc:ed:42:84:ad:9e:c9:ed:6c:28:0f:00:87:
a5:4f:f4:7c:c9:f6:21:04:6d:43:fa:a4:21:a4:f5:
7c:99:0b:55:b3:9a:17:27:29:7e:36:b9:75:16:43:
de:41:44:5b:8f:d2:84:b5:74:a1:cd:28:9f:b2:fd:
94:86:5c:dc:3d:5a:c5:34:fa:0f:c4:9c:b9:36:26:
9e:9e:87:6d:ef:19:c2:48:b4:e8:9d:5d:5b:bb:8e:
db:01:fd:8f:f7:96:89:b2:68:c1:03:0b:cc:16:a3:
a1:be:74:56:46:c3:1d:84:38:e3:65:8c:e2:a9:4e:
08:24:d2:39:3b:c1:c5:5f:fd:ad:eb:19:82:3f:8e:
63:84:9b:90:d3:0f:aa:87:cf:17:d1:f2:2e:a8:ba:
96:a1:a1:7a:8f:4c:1f:d0:35:34:d4:62:b8:eb:85:
04:57:58:c6:58:0e:11:64:07:59:0d:85:46:fe:90:
62:69:4b:ee:8e:79:83:4b:9e:5a:dc:a5:dc:20:a7:
7d:44:f2:eb:2d:53:a2:88:7b:4c:5c:4d:c7:80:eb:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:DC:AA:3D:BD:BB:BC:9D:50:10:71:5E:30:B6:B6:DA:A4:48:EB
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:49:a5:a2:bf:2f:f6:ee:92:b3:81:9f:df:e1:6e:4f:64:27:
20:ab:bb:94:ad:2f:36:e7:7a:83:4f:15:e0:c4:18:f1:ae:33:
23:05:8f:bd:73:bf:04:07:79:c5:46:8b:0b:09:c7:d6:15:1b:
06:18:b3:91:b9:2f:f4:2c:db:1e:1f:fd:52:f7:21:bc:9b:17:
7c:a9:67:28:90:4e:ed:5a:32:2f:a1:99:9b:ba:6f:83:d1:4b:
61:9a:b1:63:e2:45:07:71:2b:36:46:24:78:ba:bd:e2:21:13:
e4:c3:5b:d8:6b:51:b7:23:f8:04:36:f5:ea:50:02:45:a1:e0:
93:8b:91:25:93:14:a6:06:c7:0c:2e:4d:23:5e:f4:0f:00:a5:
2b:2b:ae:b2:05:b9:aa:91:09:ab:b5:9a:83:4f:f4:fe:cc:69:
67:35:11:75:90:c0:9b:2e:4a:03:5e:dc:76:98:d4:e4:6a:b9:
53:fc:49:b5:f3:82:06:0b:11:2c:5c:61:17:f3:17:15:65:ca:
7b:55:dd:27:06:fc:c2:55:41:ff:bc:d4:9c:66:7b:f1:cf:28:
bb:8e:1b:51:07:ea:14:86:08:f4:86:8c:67:06:3a:81:83:b2:
ac:76:67:a0:55:43:76:61:57:7b:9f:59:9d:58:3a:c7:aa:f2:
b9:23:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:15:32 2025 by rpki-client