Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: rCV5GQ/7L8PS7fXAKL9HostLrkdBqFL0I1AKzuUSVEM=
Subject key identifier: 42:92:97:D3:5A:00:19:8B:84:26:0E:F3:4E:AA:46:C9:2C:26:95:65
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 0196BDEE8F5A4B4B78CCA26BB01CAC10B955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 06:00:50 +0000
Manifest this update: Sun 11 May 2025 06:00:50 +0000
Manifest next update: Mon 12 May 2025 06:00:50 +0000
Files and hashes: 1: Nxnoy8PzHcDiGfchb2OaOXYn7vM.roa (hash: GP0m9RkVuG3t4cb+/VsoB9MTCQ47u1sK6mEKaKsR5h4=)
2: iCRE8nmMlSwgty-lxs48bniB608.roa (hash: j5FLZkm+p03dHu1S8DiUOAGHR6CKGwM5JBM32PcoUIE=)
3: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: 0LjnDi9rqc2BFs7lc3p6ocz15ZhHQDgh204ZyL5ZYHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:8f:5a:4b:4b:78:cc:a2:6b:b0:1c:ac:10:b9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: May 11 06:00:50 2025 GMT
Not After : May 12 06:00:50 2025 GMT
Subject: CN=429297d35a00198b84260ef34eaa46c92c269565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8a:f8:be:6d:14:f1:b6:1a:50:68:fa:64:02:
f9:d4:27:cc:e9:9f:a4:43:e3:f8:e7:5c:6d:8b:15:
3b:7e:80:cc:9f:a9:d4:01:78:f6:6e:ff:17:61:6d:
fe:cc:86:81:d2:de:43:bc:4e:5d:52:66:d6:63:74:
86:a6:e5:b4:c5:d0:15:aa:04:7f:de:1d:5b:9d:3c:
4c:79:b6:52:e2:0f:4d:bf:41:3f:34:54:48:b9:92:
0f:ef:dc:7f:dd:46:b2:a2:38:b5:4c:5e:5e:16:3d:
26:60:71:b9:94:2f:5f:e7:e5:fb:7a:bf:03:17:cb:
62:ef:91:c0:da:29:00:29:d5:b4:3c:ea:94:35:54:
9e:f6:bc:3f:0f:1f:69:f8:67:86:c5:db:69:17:e2:
3c:9d:f6:d4:75:a1:0f:ec:5e:d9:92:7d:f9:4b:e2:
83:99:f1:7d:a7:b5:d5:82:eb:2b:66:fc:c7:e4:1c:
38:85:69:53:cb:10:6f:38:5b:78:58:95:08:12:a5:
d4:42:2e:af:05:da:5a:9e:42:d7:d4:d5:d9:8b:e1:
cc:90:03:ae:c1:ea:87:cd:4a:2d:7e:0c:a7:e8:3a:
3b:3a:97:dd:33:b0:2f:76:2c:f6:4f:d5:78:c5:d9:
2d:33:b7:2a:f9:a9:02:37:c8:66:ee:dd:01:20:b7:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:97:D3:5A:00:19:8B:84:26:0E:F3:4E:AA:46:C9:2C:26:95:65
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cd:ce:b1:c0:e8:45:78:ba:e4:51:49:50:31:2c:b4:1c:9e:
04:a6:f8:17:f2:fe:47:6a:e7:56:c7:44:43:9c:d8:a0:01:99:
7a:8a:03:b4:15:00:9c:b0:10:9d:5e:43:f6:8e:b7:e9:c4:96:
5c:f2:f1:12:af:da:4f:12:ea:4f:35:23:41:12:aa:ff:0a:8c:
e0:46:1f:49:a2:6f:10:d4:f8:89:02:8e:0c:91:b7:da:5f:9a:
20:2e:68:ef:d4:24:2b:85:32:86:76:e2:59:57:de:87:84:41:
be:ff:e4:4f:87:d6:62:4b:81:75:e3:d6:a4:ce:c8:7e:1c:1a:
a1:29:35:59:ca:57:02:14:04:10:e9:e7:53:6b:a7:63:a9:9e:
92:bd:0a:ea:7e:1d:b4:bf:72:ca:62:f7:1b:ce:ba:01:c6:ef:
45:01:28:f4:35:eb:8a:f3:56:75:e7:d4:6e:56:1e:d3:46:5b:
a4:bb:d9:1a:4e:46:e1:c8:e6:d1:bd:ba:ef:85:81:cf:f1:c8:
61:f2:16:2d:0e:c0:82:1f:ae:43:f7:21:8e:7f:07:da:74:ab:
fe:6d:86:a7:10:57:aa:c9:dd:70:ce:29:60:c3:6e:62:34:62:
69:f1:f1:1e:81:a1:50:91:e0:f5:6d:0c:6e:3f:8f:a1:e2:27:
68:0b:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:04:06 2025 by rpki-client