Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: 9WZKKdhFvYBxe2XL7v33thREfjLU7iLi9gnbqIiw7oo=
Subject key identifier: B4:A6:6E:77:DA:D3:DB:BC:3C:BB:88:59:A8:6C:71:D0:98:34:FC:03
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 0196D2BE8E703436864F1823CAD1BC7EAABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 0E3B
Signing time: Thu 15 May 2025 07:00:25 +0000
Manifest this update: Thu 15 May 2025 07:00:25 +0000
Manifest next update: Fri 16 May 2025 07:00:25 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: XWPebtO7yW+5dY+GZPfRqB+GscK+1pq0GudjEVwdRoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:8e:70:34:36:86:4f:18:23:ca:d1:bc:7e:aa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: May 15 07:00:25 2025 GMT
Not After : May 16 07:00:25 2025 GMT
Subject: CN=b4a66e77dad3dbbc3cbb8859a86c71d09834fc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:af:f5:fb:76:37:74:fc:26:02:d2:23:d5:
fb:ba:f0:0c:8f:25:bb:b5:37:72:d2:9d:e3:a9:c0:
81:e6:4a:f8:1a:e4:2d:f0:c0:71:fd:0a:82:46:77:
cc:2c:d4:a1:bb:df:f6:66:d8:cd:ef:ca:cd:d5:92:
80:e7:f6:48:e0:2b:d0:b9:ed:28:bf:1e:20:ad:64:
a6:4d:60:57:29:51:a2:1e:89:84:29:30:de:f7:81:
78:ae:0d:e2:8c:5c:b4:a7:86:9e:68:99:dc:ea:fc:
60:ad:08:c2:b5:7a:d9:58:ae:c8:98:a1:81:bf:b9:
cb:a1:5b:43:da:1b:1a:55:8c:08:b0:58:32:b0:bb:
26:ac:7b:3c:34:f4:c4:95:3f:7f:bd:1d:30:a3:ab:
2e:a7:27:a5:6c:ae:49:e6:2c:23:98:de:bf:8a:99:
7b:89:11:cb:42:75:d1:58:18:78:33:97:47:01:8e:
ed:6e:18:45:4c:13:32:29:2b:10:9f:6a:05:f3:18:
27:31:64:f8:25:ba:a3:bd:1c:06:10:ed:31:24:28:
a3:ef:ae:33:6a:2d:b9:09:fa:f0:52:d6:0c:a8:20:
30:0d:ad:80:48:76:da:61:58:d2:7e:98:63:88:c1:
41:81:25:24:14:62:5c:d6:1f:1c:b5:a1:72:b5:e5:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:6E:77:DA:D3:DB:BC:3C:BB:88:59:A8:6C:71:D0:98:34:FC:03
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:21:dd:29:45:47:66:1b:b1:6b:3a:95:80:d5:1e:6c:6b:
36:44:b5:e3:bd:f1:82:85:44:74:a3:b2:42:43:cd:9a:30:17:
84:ad:29:af:40:7b:2a:73:0c:df:6d:37:31:19:c5:8d:50:a4:
74:7a:c9:38:c4:a4:c6:63:ee:5d:c7:2a:08:61:39:1a:cf:d5:
86:75:ba:b5:26:ff:b5:c0:47:30:13:7a:42:1a:a1:65:74:30:
2b:f3:72:98:8e:4b:be:e4:f4:e7:94:8f:c1:db:9e:82:58:58:
d4:aa:3b:d2:cc:60:6c:1d:27:a9:73:a2:a7:e7:6e:23:ba:0f:
85:6c:b6:70:a6:48:b7:8c:ad:97:a3:38:95:98:60:c8:29:db:
25:36:4f:95:53:46:02:9b:41:44:1c:dc:37:4c:5a:e1:f5:ec:
21:9f:c8:5d:ce:74:37:ee:3a:7b:55:98:d4:ba:05:74:75:16:
e7:38:11:fd:2e:cb:e2:ef:ad:a8:9a:fd:04:99:65:ff:c4:ad:
7f:4e:b3:76:e4:6c:d0:86:dc:52:57:77:ad:e9:a8:43:bb:7b:
63:0e:02:e1:23:2d:1e:1e:43:34:a9:29:6f:24:28:f5:bf:c1:
b5:7f:19:52:c5:c7:0e:dd:21:b4:49:cd:75:1f:9d:30:4a:8f:
24:29:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:02:57 2025 by rpki-client