Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: O+mgbWkqJc2r11c6EsC5iK0LI2VdB1QhYie7W3uEpqU=
Subject key identifier: DD:56:49:32:F2:66:8A:A9:33:CF:26:DE:08:8C:C4:B1:D9:CE:CF:44
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 0197B9A195DA5614358227A2BEF7F467CA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 09A5
Signing time: Sun 29 Jun 2025 03:01:03 +0000
Manifest this update: Sun 29 Jun 2025 03:01:03 +0000
Manifest next update: Mon 30 Jun 2025 03:01:03 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: tWuW6E8PIoa2tXbwCDE0RgrPTudGjircwy3eUzl6i8I=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:95:da:56:14:35:82:27:a2:be:f7:f4:67:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jun 29 03:01:03 2025 GMT
Not After : Jun 30 03:01:03 2025 GMT
Subject: CN=dd564932f2668aa933cf26de088cc4b1d9cecf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:89:0f:c6:9a:77:cc:54:7f:5d:66:b5:fe:
b4:11:24:d5:bf:bb:63:82:50:61:ad:9c:93:14:1a:
59:84:34:f8:09:6e:3f:be:fa:e6:f3:48:c7:e7:90:
67:37:f4:ec:6c:9b:9d:f1:12:e6:c1:d9:02:72:e3:
1c:24:0f:d3:83:db:b7:3a:a5:49:7b:f5:00:c5:31:
37:8a:36:54:eb:b8:a2:3b:eb:f8:7e:f4:6d:59:fe:
18:3c:34:3d:04:bc:a5:1f:c8:2f:1c:e4:e7:b9:b3:
6b:ed:23:d9:83:e6:14:fc:7b:75:8f:b5:d8:c5:56:
7e:5b:90:e7:9a:36:8f:ab:cf:90:7c:e1:5c:a2:ad:
fd:71:f5:e5:05:35:4d:24:f0:0b:44:08:a1:2d:07:
09:6a:36:ff:38:5b:34:5e:88:c4:37:1f:4d:c2:cb:
15:01:fd:81:e6:65:53:f2:37:d0:0b:42:71:56:79:
42:0c:b1:f9:ae:a1:25:35:5f:0e:7c:47:4f:c3:6c:
cb:69:84:24:f0:36:f6:0a:ec:90:0d:35:68:7e:01:
c4:39:c7:d3:c6:69:37:58:ec:22:89:51:03:c1:45:
94:99:ea:fd:92:a3:7a:29:85:ea:fe:60:d5:1a:98:
b7:28:cd:df:aa:75:4b:f3:bf:45:e6:92:8b:d2:a8:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:49:32:F2:66:8A:A9:33:CF:26:DE:08:8C:C4:B1:D9:CE:CF:44
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:22:17:05:d1:d0:47:0e:34:84:14:50:3d:2b:21:50:a9:75:
2e:84:1f:07:23:19:59:62:f6:24:28:3e:35:ec:d3:de:e4:43:
35:9e:53:1c:27:44:ee:e3:0d:2f:b7:1f:29:d2:99:17:6c:9f:
f0:32:56:35:b9:0e:ff:f8:8e:7b:db:a6:10:91:71:bb:64:7d:
d1:99:91:d7:a6:01:f0:6d:f8:54:06:f4:41:d5:8f:15:d0:34:
b2:ca:97:3c:e0:61:b5:0c:d5:d1:fa:b5:12:12:ea:7c:b2:05:
ff:ee:32:11:24:df:c7:cf:35:f7:d3:55:cc:c5:2d:73:ba:86:
5a:78:b2:ec:29:f0:13:1e:f3:30:91:59:21:c6:a4:b3:5a:54:
49:2d:c0:ff:2d:96:48:f4:8f:89:88:05:10:a8:09:6a:bd:66:
4e:e3:bf:bf:b2:57:3a:1a:18:ad:64:74:8c:3c:87:a9:d0:db:
66:71:e9:d2:32:32:b3:da:f3:e9:be:12:05:6e:81:a2:b0:78:
68:76:23:de:9b:83:f5:30:fc:be:1f:e5:a5:64:ee:bf:88:c2:
88:1b:e5:4c:39:2e:dc:aa:ac:b9:7f:a7:d0:0e:0b:97:54:3e:
46:07:6e:87:1a:df:5f:ea:e4:5e:e0:81:2f:42:09:09:c4:61:
c5:56:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:03 2025 by rpki-client