Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: xChiDPCtMDMAgvJ1438NcJClQacgNMbO2VHe5aq21fk=
Subject key identifier: 5A:81:BB:08:9A:A3:58:FC:AE:1C:42:4D:E9:4C:B0:59:7D:6A:05:FA
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 0196A954F5FE9C8201B0286EB98550987461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0918
Signing time: Wed 07 May 2025 06:00:39 +0000
Manifest this update: Wed 07 May 2025 06:00:39 +0000
Manifest next update: Thu 08 May 2025 06:00:39 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: SxNYhiaXkr9sIoFkaABumr12vnBSbFb9WkrBIDjBaGk=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:f5:fe:9c:82:01:b0:28:6e:b9:85:50:98:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: May 7 06:00:39 2025 GMT
Not After : May 8 06:00:39 2025 GMT
Subject: CN=5a81bb089aa358fcae1c424de94cb0597d6a05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:0e:08:d2:a9:cf:da:db:85:5e:cf:14:07:
73:3e:c7:0f:05:86:ce:c5:db:c8:67:a1:bb:ac:7e:
20:12:d4:2c:ad:5a:57:c0:c2:11:fc:8b:97:26:b5:
a0:97:50:0e:8a:8a:82:fb:b3:94:d6:0d:b1:f8:e1:
0d:f6:fb:da:34:b8:46:71:4e:79:af:7e:1a:2f:b0:
73:fb:4b:c3:55:1b:b0:89:df:ae:e7:bc:dd:c0:f7:
26:5c:07:e0:99:56:35:00:ee:7e:15:c1:b4:d5:2b:
4b:24:89:4d:10:5a:0c:c3:f8:89:4a:88:27:84:58:
9c:67:47:bc:d5:77:83:77:c1:03:5f:a2:d4:db:73:
fb:95:7b:d2:c5:26:80:55:1c:d5:d8:f6:7f:39:ce:
b4:7c:f3:6c:01:bc:ee:8d:58:a2:8d:9d:53:f4:65:
46:30:4a:02:6e:ad:32:e6:9d:50:8e:87:12:0c:19:
21:ae:7a:34:59:59:c0:16:28:5e:d6:95:95:d0:de:
8b:85:41:b9:e2:df:58:0c:3e:d7:b3:3b:ab:69:12:
11:fb:d6:75:3b:57:50:77:1e:4d:57:8b:ab:42:11:
ec:74:c8:ba:64:7c:aa:ff:11:ac:f5:1e:2a:72:49:
79:8a:fa:21:94:27:c9:37:45:c2:c6:69:8a:53:17:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:BB:08:9A:A3:58:FC:AE:1C:42:4D:E9:4C:B0:59:7D:6A:05:FA
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:52:d0:a4:65:c7:a2:8c:ec:00:12:3e:a1:06:34:a6:ed:20:
6c:cd:bb:5b:24:fe:92:76:72:de:1c:c1:bd:ad:6b:7c:2f:be:
18:98:ef:96:29:73:d0:00:1a:3a:cf:3b:d3:20:f4:af:4f:24:
22:0f:16:2d:87:2c:7d:15:56:c9:75:42:71:04:49:17:cd:ba:
9c:19:80:f0:43:d7:19:12:97:19:a3:6b:e0:dc:9a:26:38:97:
16:e4:49:81:ce:0c:10:1a:ba:53:e8:32:f4:fc:b3:7a:d0:e6:
e7:51:0a:74:f1:3b:ca:cf:85:fd:c3:ca:cd:a6:48:58:87:45:
aa:2b:de:75:91:2b:fc:aa:78:8b:f3:a5:a6:bf:49:83:38:d1:
eb:43:4d:5e:3c:e7:38:6d:d9:7d:ef:38:6a:0f:ff:51:1a:9f:
dc:68:da:8d:0a:04:b5:c0:e1:83:ba:0a:91:03:e9:79:a7:c1:
29:43:98:a7:6a:2d:e7:d9:f6:90:53:ec:d4:7f:fd:b5:31:17:
c5:e7:70:a2:59:2d:f7:e9:c1:cf:cd:13:66:f0:c3:6c:04:0f:
9c:8c:b9:38:74:f6:fd:fa:ee:40:86:54:1a:b7:f2:32:b1:e3:
40:a4:e9:a2:14:bc:c2:2d:85:ff:68:e1:ee:05:3e:35:72:81:
fb:31:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:41:14 2025 by rpki-client