Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: zS15et1pToPGEOrNqdACI1K0YfmFPg034qhlZnMWjPw=
Subject key identifier: 0F:37:E1:DC:E5:4E:08:98:D8:A4:00:89:D5:06:7A:2E:B7:87:3F:CF
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 0196E48E23E36D85356FB9C312D2F046F6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1543
Signing time: Sun 18 May 2025 18:00:42 +0000
Manifest this update: Sun 18 May 2025 18:00:42 +0000
Manifest next update: Mon 19 May 2025 18:00:42 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: m1/SrQbd3eVxSZ47g4eqFd3c3tVGu/Ax+eaWssM/7bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:8e:23:e3:6d:85:35:6f:b9:c3:12:d2:f0:46:f6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: May 18 18:00:42 2025 GMT
Not After : May 19 18:00:42 2025 GMT
Subject: CN=0f37e1dce54e0898d8a40089d5067a2eb7873fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:c7:9e:36:6a:a5:74:19:05:e7:da:d0:e2:
19:83:2b:32:f6:19:ca:e0:70:3a:8d:fd:bc:97:21:
a2:3a:ec:f1:7d:6d:da:7f:4d:0b:5f:16:93:12:9f:
1e:31:67:72:28:f5:3f:f2:ab:a2:78:70:4a:f4:4f:
f3:ec:98:a0:82:3f:e2:eb:67:7a:34:f5:1a:4f:1d:
80:58:24:88:9f:2b:0e:17:a4:58:85:ef:33:20:ce:
e8:c8:f7:c0:ff:ff:77:4c:b3:b7:87:cf:15:28:3f:
f1:91:ea:37:38:8c:3b:dc:eb:9b:aa:c2:34:13:d3:
a2:89:3c:20:99:c5:6a:51:1c:1b:8b:71:7f:60:78:
5f:66:0d:0b:04:c5:73:b2:31:c6:b4:d2:b6:ee:a8:
4e:e4:24:13:57:5d:6e:30:8f:64:d6:80:c8:81:a2:
38:da:e6:ad:7f:bc:d9:d6:64:d5:ff:08:74:be:41:
0c:46:b1:ad:b2:22:03:90:21:8a:77:4a:66:99:51:
1b:77:51:a2:00:8c:61:f4:ba:d2:89:bd:86:a1:67:
a8:21:43:ff:fd:f6:a0:23:94:b5:17:43:28:2f:c7:
8c:ad:d9:f0:f6:ad:3e:b6:38:41:a1:dd:55:87:2a:
67:26:b5:d9:51:e6:7a:df:08:10:62:f2:2c:73:a2:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:37:E1:DC:E5:4E:08:98:D8:A4:00:89:D5:06:7A:2E:B7:87:3F:CF
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:53:6c:89:87:07:13:36:cd:98:2a:b1:1c:ec:d9:49:42:b0:
43:a4:be:0d:f3:15:03:d2:24:84:a6:e0:34:9e:12:20:7e:20:
fc:90:d3:2e:4d:ee:a3:0f:16:d0:33:aa:f6:28:e7:fc:d9:c5:
eb:76:30:65:b1:1f:c3:79:85:4c:f5:a8:e0:48:fb:73:ab:9b:
5a:f7:de:57:c5:25:ef:14:c2:91:72:bb:0e:25:02:fd:55:18:
d2:29:a4:2d:39:ce:b3:eb:b0:c2:28:76:b2:18:48:bd:53:e9:
ed:05:e5:16:b6:76:06:34:46:05:1e:45:75:2b:eb:df:f8:bc:
61:9c:02:f2:14:d4:19:b2:37:a7:37:93:93:62:90:b9:c8:2e:
2f:cc:56:00:ea:c6:58:95:79:cd:86:f4:f7:56:f6:a5:58:93:
6b:ac:66:43:b6:cb:38:50:6f:d3:8e:38:07:0d:c6:2e:9f:90:
34:f9:90:86:a6:9e:87:39:b1:ea:c0:5b:85:38:01:ce:c9:a9:
60:20:78:0f:b6:af:e8:b2:ac:b7:fc:64:76:ff:be:7d:a2:c5:
69:2a:92:30:3f:48:52:a2:8a:1c:52:58:93:b5:ab:8f:6e:37:
16:f6:5a:c0:fd:fa:a1:5d:47:ac:10:2c:0d:cd:3f:02:82:45:
48:cd:36:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbkjiPjbYU1b7nDEtLwRvbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2Y2Y2NmNTdmMWM0OGYxMWMxNGZkMDA1NDA1YWNjZTM2
ZDAzYjgwHhcNMjUwNTE4MTgwMDQyWhcNMjUwNTE5MTgwMDQyWjAzMTEwLwYDVQQD
EygwZjM3ZTFkY2U1NGUwODk4ZDhhNDAwODlkNTA2N2EyZWI3ODczZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7XHnjZqpXQZBefa0OIZgysy9hnK
4HA6jf28lyGiOuzxfW3af00LXxaTEp8eMWdyKPU/8quieHBK9E/z7Jiggj/i62d6
NPUaTx2AWCSInysOF6RYhe8zIM7oyPfA//93TLO3h88VKD/xkeo3OIw73OubqsI0
E9OiiTwgmcVqURwbi3F/YHhfZg0LBMVzsjHGtNK27qhO5CQTV11uMI9k1oDIgaI4
2uatf7zZ1mTV/wh0vkEMRrGtsiIDkCGKd0pmmVEbd1GiAIxh9LrSib2GoWeoIUP/
/fagI5S1F0MoL8eMrdnw9q0+tjhBod1VhypnJrXZUeZ63wgQYvIsc6IoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA834dzlTgiY2KQAidUGei63hz/PMB8GA1UdIwQY
MBaAFPM/bM9X8cSPEcFP0AVAWszjbQO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEt
ZjVkNmI0OTIzOTRiLzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEtZjVkNmI0OTIzOTRi
LzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVNsiYcH
EzbNmCqxHOzZSUKwQ6S+DfMVA9IkhKbgNJ4SIH4g/JDTLk3uow8W0DOq9ijn/NnF
63YwZbEfw3mFTPWo4Ej7c6ubWvfeV8Ul7xTCkXK7DiUC/VUY0imkLTnOs+uwwih2
shhIvVPp7QXlFrZ2BjRGBR5FdSvr3/i8YZwC8hTUGbI3pzeTk2KQucguL8xWAOrG
WJV5zYb091b2pViTa6xmQ7bLOFBv0444Bw3GLp+QNPmQhqaehzmx6sBbhTgBzsmp
YCB4D7av6LKst/xkdv++faLFaSqSMD9IUqKKHFJYk7Wrj243FvZawP36oV1HrBAs
Dc0/AoJFSM02Mw==
-----END CERTIFICATE-----
Generated at Mon May 19 04:11:44 2025 by rpki-client