
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: 7Q4cVM0TJVwrfy6M5vI3NYLhHRsgtBQN5Myb0Khgzro=
Subject key identifier: EE:4D:09:E2:98:7A:57:74:04:8F:B7:2B:A3:E5:08:0E:38:F7:79:19
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 0196CBAA2E441FE8C2A5B910D0F3E4CC52CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 051E
Signing time: Tue 13 May 2025 22:00:49 +0000
Manifest this update: Tue 13 May 2025 22:00:49 +0000
Manifest next update: Wed 14 May 2025 22:00:49 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: d5orubBdRi9cqaNXgEhVRKnip61zyDSTTFyoZnAiblg=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:2e:44:1f:e8:c2:a5:b9:10:d0:f3:e4:cc:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: May 13 22:00:49 2025 GMT
Not After : May 14 22:00:49 2025 GMT
Subject: CN=ee4d09e2987a5774048fb72ba3e5080e38f77919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:1a:3f:f2:07:52:2a:1f:0b:0e:f4:34:65:
57:4f:13:ed:92:fd:e4:1b:fd:c4:14:6f:32:1d:98:
ad:85:01:25:5c:03:7d:5b:d5:f3:50:d5:27:75:02:
0b:5f:a9:bb:b6:63:ac:3f:3a:56:93:40:fd:08:ff:
08:ba:69:a9:ae:a8:24:97:34:64:3c:f4:6f:e1:88:
bb:6e:1f:0c:83:93:1d:27:cd:22:1b:c1:7a:5a:7c:
24:20:1c:1b:3e:28:9a:fa:29:0c:f8:01:d5:b7:b3:
00:0d:64:9e:44:b3:e8:88:0c:a0:d6:89:bb:e1:59:
c6:4b:f0:90:b5:43:cd:a9:63:70:be:11:2a:06:62:
23:81:f6:75:d6:65:45:b4:9a:ea:c3:b6:7e:0a:b4:
4e:bc:75:05:6d:f2:1e:7a:14:45:83:b5:06:4b:68:
cf:da:48:2e:47:f3:59:b1:ca:28:09:b2:19:f1:65:
33:28:ad:a4:f8:72:22:96:19:e9:3e:6c:13:72:1c:
72:21:54:c8:34:be:b4:38:ba:7b:f5:b8:b8:66:66:
57:30:5b:cb:40:d7:08:1c:2e:3e:88:89:74:b1:20:
8a:43:4f:de:79:a7:3c:ef:21:d1:8c:7f:44:b4:3c:
8f:fe:cf:b0:82:21:b6:42:d0:eb:69:a4:52:78:15:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:09:E2:98:7A:57:74:04:8F:B7:2B:A3:E5:08:0E:38:F7:79:19
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e2:aa:89:32:45:1e:ae:12:3e:99:0e:0a:47:ff:83:ab:71:
91:e3:e1:61:05:a1:63:b4:54:08:9e:bf:3d:7a:20:d0:5d:c2:
5a:08:1a:1c:2b:6a:d9:00:5f:9a:1d:7f:9e:1b:8e:01:12:ca:
87:d6:06:27:a3:7b:16:68:af:26:ee:0f:d8:d3:98:aa:d5:4c:
52:67:08:01:bd:ae:ca:2d:e8:8c:98:35:ca:f1:49:9a:ed:5b:
4e:6b:59:0f:a0:18:15:7f:e5:2f:29:d3:43:01:f6:25:7d:04:
f5:d5:0e:cb:a8:e8:fc:7c:47:b6:46:e2:f1:b4:02:07:8a:e1:
b1:27:4e:30:70:cb:eb:92:f0:e6:32:59:11:1c:bc:98:74:7d:
a2:62:dc:31:6c:dd:0c:60:bb:9b:52:d5:d1:0c:95:77:49:3b:
da:2c:aa:53:e9:e6:57:d7:1d:5d:3b:6d:e9:3a:5d:82:e9:ec:
69:e2:c1:d7:bb:0e:2c:8a:85:9e:33:72:bb:40:7a:c8:70:96:
e6:01:08:ba:93:97:7a:f9:a4:94:6a:f5:3a:73:b3:b2:81:1a:
ed:03:79:00:e8:4f:b5:48:05:fa:2c:dc:d2:ec:f1:a4:9d:13:
4b:06:43:27:49:9c:83:dc:3a:bc:7f:59:fd:b3:27:e8:27:4c:
a1:ce:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:59:52 2025 by rpki-client