Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: fex+XOJPc/QOo2u09UxajGs3jLxqTSKYFJjN2j/U8Oc=
Subject key identifier: 2F:8E:F2:7D:55:8E:91:8F:F5:5B:50:33:D9:37:BB:4A:68:03:16:52
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 0196D4084447E199DB3BECB77CEFE48CB5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 153F
Signing time: Thu 15 May 2025 13:00:33 +0000
Manifest this update: Thu 15 May 2025 13:00:33 +0000
Manifest next update: Fri 16 May 2025 13:00:33 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: OwiDQ3waa1E44l9fF6mrLuKOWKdVZayVLwYvHUaocxM=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:08:44:47:e1:99:db:3b:ec:b7:7c:ef:e4:8c:b5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: May 15 13:00:33 2025 GMT
Not After : May 16 13:00:33 2025 GMT
Subject: CN=2f8ef27d558e918ff55b5033d937bb4a68031652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:f3:cd:5e:1c:93:8b:ca:3f:76:c0:d7:ef:
54:8d:da:d1:7a:92:6a:1d:c6:65:52:ec:ef:02:d2:
34:1d:22:78:62:b4:fc:5b:97:bf:81:da:ad:7d:04:
2b:b0:1b:05:1c:6e:21:8a:29:24:a4:2e:67:6b:ee:
db:20:b2:d4:ee:37:89:03:cd:1c:57:ef:57:63:8a:
24:8f:93:b6:33:04:3d:39:75:17:3f:01:87:40:70:
7c:ea:13:6a:b4:76:42:eb:d5:47:9e:9d:8b:8c:89:
cf:de:f3:4b:6a:11:03:83:42:25:01:f6:62:8f:8e:
6f:68:b8:7f:43:f8:98:cf:18:f7:46:f1:22:4e:91:
a6:58:95:10:7d:26:97:9e:4a:e2:21:b7:45:53:cb:
77:35:a5:e2:a8:dd:9b:6e:98:df:a4:b4:89:58:39:
c6:17:fd:82:1e:de:bd:1c:8a:9e:28:e9:c9:f6:67:
d9:df:ca:10:41:cf:02:99:cb:1a:57:92:2e:62:3d:
15:9a:8b:51:c6:fd:63:1e:f3:c9:25:57:0d:ab:ef:
0a:5e:31:4d:fb:26:b6:7f:c4:4e:fa:c8:68:7e:57:
24:4b:4c:cd:16:38:11:a8:b8:3b:e8:36:9c:d6:9c:
26:fb:71:5c:04:42:b6:38:3b:6d:78:b1:2e:b9:90:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8E:F2:7D:55:8E:91:8F:F5:5B:50:33:D9:37:BB:4A:68:03:16:52
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:6e:25:d2:14:5e:bb:f4:2a:2e:6a:5e:fd:f9:0d:0c:6e:
bc:35:bd:a7:d8:bc:ab:5c:fe:0d:db:37:1a:a1:75:89:50:80:
75:b6:29:9e:7d:5b:9a:c1:02:4b:9b:2f:87:c3:49:c1:0d:63:
13:1d:81:25:93:40:26:11:74:18:78:c0:91:4e:ac:6c:44:cb:
62:db:39:79:ee:45:e3:69:2f:05:14:ac:1f:42:4a:6c:38:8b:
ee:3c:44:0b:dc:51:9b:29:99:25:22:a9:4f:d2:0e:72:f6:13:
99:bd:c6:7f:1c:f1:fe:90:9b:2b:33:0b:f5:5b:01:8d:70:c8:
b4:77:4a:96:8a:db:08:fe:72:5c:c3:e5:32:b5:b3:5a:50:73:
5f:13:70:1e:62:c4:62:f8:e9:94:c5:7a:ba:0e:cc:7a:f9:0c:
e3:53:32:a9:9a:53:ae:ab:10:05:3c:fc:d3:6e:ee:88:1f:a2:
b8:f8:4c:01:26:c2:c1:2d:19:ff:2a:7a:8c:89:03:b3:f6:21:
3e:82:15:73:f3:72:23:45:c6:89:6a:ae:24:d2:24:3e:0c:9f:
b6:98:1e:7b:54:f2:74:8f:86:f4:64:2a:fb:11:ce:57:de:9f:
38:0f:7f:ce:ef:eb:2d:c0:8c:09:ed:b5:4d:a5:e0:0c:1a:02:
49:ca:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:25:05 2025 by rpki-client