Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: vqdzVvV5eSLANlctoB7EaTTHwaHJ0KwiB3NgxniYwTg=
Subject key identifier: 06:6C:82:4C:29:E8:A5:9D:3D:D0:A1:70:69:33:BD:D2:8B:C8:75:0D
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 0196545BCB317C7099247A44487149649538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 18:00:23 +0000
Manifest this update: Sun 20 Apr 2025 18:00:23 +0000
Manifest next update: Mon 21 Apr 2025 18:00:23 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: 9HNCQx/Lb151jMKshPPY9EZ4Fj3hNwvsrEM6IaxXdAc=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:cb:31:7c:70:99:24:7a:44:48:71:49:64:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Apr 20 18:00:23 2025 GMT
Not After : Apr 21 18:00:23 2025 GMT
Subject: CN=066c824c29e8a59d3dd0a1706933bdd28bc8750d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:43:16:f7:1a:2f:54:52:36:63:1d:9f:12:
b5:3f:33:40:94:ba:d8:94:29:37:bc:9c:64:89:e7:
9a:1e:a0:a6:07:b5:22:15:a0:89:ed:fd:29:14:c4:
05:7b:11:77:a1:a6:a0:71:3d:a7:41:3a:d9:76:1e:
60:b2:f0:c6:09:8f:9d:b2:a4:1c:6d:11:27:43:cb:
0d:10:c2:a5:b2:5b:e5:8a:f7:1e:1f:ae:dd:04:be:
1f:d3:61:ed:2f:04:99:3a:a4:a7:eb:6d:e2:a4:db:
63:0d:40:29:31:fd:74:91:54:ff:19:45:1f:4b:1b:
40:d0:76:08:c2:11:38:02:93:b5:6f:cb:3a:90:a6:
7d:cb:c1:e4:69:8c:a2:35:ba:41:32:d3:c8:96:98:
52:71:ee:e1:60:11:0f:05:97:a2:a6:6b:19:0d:e8:
fb:92:c5:6b:a4:4f:25:15:cf:52:69:c0:51:97:1d:
de:32:1e:e3:54:26:f2:87:df:33:a2:68:2f:98:f6:
ea:8b:51:48:6f:a5:2c:13:0b:a7:80:75:ac:c1:f6:
aa:96:6e:e3:41:8a:a6:4e:b9:b7:96:06:94:90:9d:
9a:cf:03:dc:1a:cb:66:e7:64:33:58:54:dc:78:f2:
92:bf:c6:9d:ba:1d:5b:75:f2:2e:e2:08:60:65:63:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:82:4C:29:E8:A5:9D:3D:D0:A1:70:69:33:BD:D2:8B:C8:75:0D
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:63:9e:fe:f9:bc:0d:a5:60:1e:15:06:64:95:6c:94:f3:38:
21:86:d4:89:48:17:3b:b8:ca:fa:be:9c:25:1c:e3:99:54:84:
89:38:ee:06:f3:54:e0:d0:21:c8:42:6f:c8:f0:2f:78:67:38:
e8:87:d7:fd:bd:38:f9:47:e5:d9:01:30:a4:e7:04:63:ed:4e:
b2:d4:7f:ad:b8:05:c8:21:28:70:3b:e3:a0:a5:cc:46:33:b0:
b7:75:0c:ec:75:a2:79:dc:e0:6d:fa:c2:e5:e0:8f:b7:aa:d5:
e8:57:96:1a:a6:39:b9:9b:e8:92:59:09:c8:85:cd:e1:aa:a6:
03:be:30:94:b0:c7:74:3a:d4:3e:d4:a5:50:8a:d5:4f:c8:01:
73:fb:d6:b6:c3:1b:e1:09:44:0d:13:b3:47:57:bb:f7:26:48:
30:55:39:88:82:97:09:bd:4b:40:9a:4b:7c:c2:8b:fb:f7:b9:
31:5e:56:5a:44:ea:d6:12:86:85:57:aa:0b:4e:e7:e9:7b:26:
54:4b:d5:85:c3:3a:68:00:f9:0c:8c:ae:6e:19:88:e5:40:84:
4b:50:af:cc:2f:19:8d:4a:58:6f:39:1e:b1:56:ce:b6:dc:e6:
7d:35:65:32:da:97:42:15:85:21:f5:c7:b8:8f:4d:d1:4c:ed:
fd:30:16:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUW8sxfHCZJHpESHFJZJU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl
OTdlNmIwHhcNMjUwNDIwMTgwMDIzWhcNMjUwNDIxMTgwMDIzWjAzMTEwLwYDVQQD
EygwNjZjODI0YzI5ZThhNTlkM2RkMGExNzA2OTMzYmRkMjhiYzg3NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijZDFvcaL1RSNmMdnxK1PzNAlLrY
lCk3vJxkieeaHqCmB7UiFaCJ7f0pFMQFexF3oaagcT2nQTrZdh5gsvDGCY+dsqQc
bREnQ8sNEMKlslvlivceH67dBL4f02HtLwSZOqSn623ipNtjDUApMf10kVT/GUUf
SxtA0HYIwhE4ApO1b8s6kKZ9y8HkaYyiNbpBMtPIlphSce7hYBEPBZeipmsZDej7
ksVrpE8lFc9SacBRlx3eMh7jVCbyh98zomgvmPbqi1FIb6UsEwungHWswfaqlm7j
QYqmTrm3lgaUkJ2azwPcGstm52QzWFTcePKSv8aduh1bdfIu4ghgZWO+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZsgkwp6KWdPdChcGkzvdKLyHUNMB8GA1UdIwQY
MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt
ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni
LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWOe/vm8
DaVgHhUGZJVslPM4IYbUiUgXO7jK+r6cJRzjmVSEiTjuBvNU4NAhyEJvyPAveGc4
6IfX/b04+Ufl2QEwpOcEY+1OstR/rbgFyCEocDvjoKXMRjOwt3UM7HWiedzgbfrC
5eCPt6rV6FeWGqY5uZvoklkJyIXN4aqmA74wlLDHdDrUPtSlUIrVT8gBc/vWtsMb
4QlEDROzR1e79yZIMFU5iIKXCb1LQJpLfMKL+/e5MV5WWkTq1hKGhVeqC07n6Xsm
VEvVhcM6aAD5DIyubhmI5UCES1CvzC8ZjUpYbzkesVbOttzmfTVlMtqXQhWFIfXH
uI9N0Uzt/TAWJg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:45 2025 by rpki-client