Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: KfMlG0eZI+J4q6zLnPKjPb7nbGg7H1SmjPtkd2GB2vc=
Subject key identifier: 3B:E8:E2:2A:9E:96:5C:62:B2:3D:4F:66:B4:A9:DC:C2:FF:2B:39:0E
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 0196BAB655EF25A67969CBF72A596FE878A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 15:00:33 +0000
Manifest this update: Sat 10 May 2025 15:00:33 +0000
Manifest next update: Sun 11 May 2025 15:00:33 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: yJzlJy514z7MMRP5Swy6InFOg5+YnOwQkcN34rtBdYM=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:55:ef:25:a6:79:69:cb:f7:2a:59:6f:e8:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: May 10 15:00:33 2025 GMT
Not After : May 11 15:00:33 2025 GMT
Subject: CN=3be8e22a9e965c62b23d4f66b4a9dcc2ff2b390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:59:8b:ad:7f:7b:a7:e6:70:82:3e:29:f0:
25:33:bc:46:c0:ce:c7:4d:3a:55:8e:ea:b9:e2:1e:
dd:01:91:96:34:45:0a:ee:8a:fe:0f:f7:2d:7c:3e:
8c:33:78:52:5d:6d:c3:3c:2f:f7:56:c3:ab:88:da:
f1:d4:a1:ed:07:06:8c:aa:3a:89:41:ac:24:28:3f:
b2:33:53:4a:ad:26:56:cb:78:45:19:9e:ce:7e:9c:
70:65:7c:a8:d7:7c:b0:16:1c:5f:e9:a3:c9:98:ed:
0f:33:4f:9b:0f:e7:96:84:d7:69:ea:22:a6:94:9c:
75:3c:4c:59:dd:5a:18:48:55:64:44:28:69:d0:1d:
26:f2:1d:36:c1:0b:40:4b:24:c9:3e:34:ec:c1:1f:
b8:62:72:5e:eb:23:87:85:e9:c6:ff:3d:a0:7b:31:
b9:eb:85:14:6c:38:92:21:c3:7f:06:cb:90:db:05:
44:b7:4d:9f:68:11:ab:6e:d2:20:96:14:09:24:c9:
0e:ea:ff:89:16:9a:62:31:ee:f2:7b:6c:cf:9e:07:
f5:56:93:e7:c7:bd:7e:75:0d:f6:d5:9e:64:77:e4:
47:01:46:73:c9:ed:97:28:4e:ec:6d:f4:5b:87:30:
32:08:fe:28:05:fc:09:3d:40:a1:95:06:43:8a:a8:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:E2:2A:9E:96:5C:62:B2:3D:4F:66:B4:A9:DC:C2:FF:2B:39:0E
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9d:d4:38:70:03:de:d6:0c:15:75:8b:65:a9:13:ed:a0:41:
41:90:f4:71:b2:43:f5:d5:a5:fc:cb:c8:71:d7:33:e7:a0:38:
39:6c:6c:96:d7:be:68:73:ad:32:81:70:16:69:2a:97:95:69:
a9:9c:77:76:fc:c9:02:63:27:11:39:32:ed:6a:c1:c2:ad:61:
e4:db:89:3c:9a:16:2a:b0:16:9d:e6:16:21:4d:0e:39:30:70:
75:54:cb:61:b9:58:f5:d0:b9:26:25:f7:d9:a9:17:d8:e1:d4:
73:df:53:8f:c9:2c:4a:38:e8:93:ba:a0:7e:3a:5f:94:52:04:
56:c1:52:03:eb:12:17:d6:fc:da:3f:40:9e:b6:de:01:6f:b5:
95:ab:60:10:9c:25:8f:d4:22:7a:43:e3:cb:72:35:b5:5b:03:
c5:a6:7f:7b:b9:8f:42:ce:78:f7:06:81:ba:a3:a7:f3:65:be:
a0:ac:92:ca:96:30:4a:9c:6c:57:0f:90:81:7b:ff:78:1f:4f:
a7:bb:5b:fe:d7:17:fa:ab:dd:41:8e:92:6b:61:e3:41:b0:b6:
d3:f1:8b:a5:47:ec:8a:fd:ff:e3:cc:36:03:91:97:0b:da:4a:
37:1b:f8:34:ee:16:c4:1c:6e:40:20:30:02:6d:9a:8d:3e:0f:
44:35:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:51:51 2025 by rpki-client