Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: PKnReG/rz1BNmXGbxLRA+UfLBaCbnpSVVMLtiziBNmk=
Subject key identifier: 78:58:0E:8C:88:D5:76:90:4D:44:E2:6B:5E:9C:59:1F:E5:64:AF:25
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 019748FA76F16073735A2E4F2E0EB6EC28D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 06:01:03 +0000
Manifest this update: Sat 07 Jun 2025 06:01:03 +0000
Manifest next update: Sun 08 Jun 2025 06:01:03 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: kdrqkjeESnqob/0Rld8rgsFINcqlZ2irEjJo/2AlhM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:76:f1:60:73:73:5a:2e:4f:2e:0e:b6:ec:28:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Jun 7 06:01:03 2025 GMT
Not After : Jun 8 06:01:03 2025 GMT
Subject: CN=78580e8c88d576904d44e26b5e9c591fe564af25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:c0:86:45:09:01:ef:0d:54:6f:e7:44:d7:
75:a8:d6:ff:52:b2:14:91:51:4e:2f:7d:86:bb:66:
38:67:11:dc:6a:ef:fa:f0:96:da:5a:41:53:e4:33:
63:78:6e:ee:6a:b0:fb:b4:6e:63:35:f3:d8:db:54:
b2:97:bc:45:bc:bd:d5:36:b7:ce:6f:90:75:b2:25:
cf:b8:76:37:36:52:72:86:c3:ca:bb:a7:9d:13:ae:
1e:06:91:15:4e:18:8b:c2:5b:23:af:73:c4:04:98:
07:76:b1:82:5d:ea:7b:f1:42:bf:62:7f:37:a9:c2:
0e:44:38:74:0d:ce:2b:db:33:b5:a0:19:71:c5:13:
c4:67:ad:7e:b0:f7:5d:be:bf:c4:b6:4c:66:96:0c:
8e:67:69:75:55:38:1f:b2:73:48:dd:0f:75:f7:ba:
c5:a3:d9:0c:1a:c7:6a:5a:f3:a9:8d:9e:5f:19:a4:
44:94:e7:37:88:ad:e7:2a:33:0e:21:e4:39:b0:b7:
0a:3f:40:28:31:9b:12:04:df:97:3a:6a:68:17:28:
9d:42:a5:d6:37:37:c3:7d:3e:a5:a4:17:2d:43:a1:
6c:7f:12:6a:7a:49:a8:ca:d3:6e:15:d1:af:70:73:
2b:a3:74:50:7e:ff:20:19:c2:fd:00:1c:6a:55:f7:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:58:0E:8C:88:D5:76:90:4D:44:E2:6B:5E:9C:59:1F:E5:64:AF:25
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:90:23:11:17:1d:04:ff:50:1c:e9:5e:77:70:ea:f5:0e:
9a:c9:f8:a7:03:db:14:6b:94:43:11:06:03:14:19:5a:2e:a8:
29:e3:44:d1:de:f4:3a:9c:2b:04:3a:a6:4b:42:4e:79:13:04:
50:41:13:8e:35:8f:8c:f3:9c:6a:40:68:1c:b7:a6:b8:10:fb:
9e:32:e1:f5:94:87:76:fa:5f:26:d5:cf:ca:f0:4d:f1:6f:1e:
4e:e0:2a:36:7f:1d:bd:02:d6:22:4b:61:81:b4:19:c7:63:c7:
e0:46:8e:62:e6:a1:c3:9f:38:f1:ab:3e:ae:37:d6:15:8b:d1:
f6:6b:25:78:b5:32:08:f2:83:33:ed:8d:e9:fc:5f:61:ce:5f:
ab:bc:19:24:3e:c5:7f:b4:e2:ff:2b:bb:76:10:81:35:d7:85:
46:3c:23:a3:67:f8:87:5b:c8:ef:4d:ca:7c:a8:69:d7:52:3c:
59:06:fc:8b:7f:65:18:e0:c0:3c:49:22:4f:0b:aa:e8:fc:ad:
4d:de:46:97:c8:99:72:59:cb:8d:2e:eb:5e:1e:36:6a:c7:f1:
1c:e9:9c:87:a5:df:66:fc:05:3a:b2:8d:b6:2a:f2:55:d1:6b:
29:aa:ec:c6:2d:42:9e:b5:52:be:a7:2c:a3:88:61:8f:fd:98:
e7:93:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:41 2025 by rpki-client