Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: ljqAtn8GKXTdRMRcFBfC39CdSj9Xw5IZG+aKOhrVJ7A=
Subject key identifier: 09:13:44:AD:94:C2:6F:DB:BB:EA:9D:F2:30:38:49:E5:AB:E1:A4:06
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 01974D7BA136119E29883B27FAEE7250D499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 03:00:37 +0000
Manifest this update: Sun 08 Jun 2025 03:00:37 +0000
Manifest next update: Mon 09 Jun 2025 03:00:37 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: EtjJ9RKOb2OU+emTASiaPe26pxNUR0Te9AgqxWFDUhM=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:a1:36:11:9e:29:88:3b:27:fa:ee:72:50:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Jun 8 03:00:37 2025 GMT
Not After : Jun 9 03:00:37 2025 GMT
Subject: CN=091344ad94c26fdbbbea9df2303849e5abe1a406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:c2:68:19:51:61:0f:5c:73:50:73:9f:65:
24:ff:57:5f:db:c3:d2:e4:44:d1:9f:17:9f:9b:9b:
c9:6f:16:56:d7:4b:84:ff:0d:a2:9c:32:42:e5:37:
ee:c2:0c:41:eb:93:c7:0b:0d:a0:70:62:e6:8f:18:
f2:d7:f8:0c:84:f2:f8:f6:6e:38:45:63:64:d0:f7:
5d:5c:39:45:21:5f:c5:0c:4a:0e:ba:d3:55:6e:c8:
14:a3:0d:7a:61:84:c3:b0:56:57:2f:e6:19:22:8b:
59:46:05:17:3f:88:eb:0e:e5:7b:4a:21:e1:12:12:
6b:92:0c:0d:10:03:fd:a1:ae:87:7d:23:c1:18:92:
bb:78:6a:4e:c9:7f:8a:bb:ce:b8:e3:24:e0:63:23:
9d:b0:b2:13:7a:30:4d:7a:09:95:e5:62:68:85:59:
a1:55:ca:0f:bb:e6:34:05:b3:dd:37:39:95:c1:8d:
93:22:54:46:86:45:b3:51:4b:53:32:37:71:c1:2c:
81:53:cc:bf:7a:3f:7d:64:bd:56:1d:f6:9a:e2:07:
06:08:7a:24:6f:a2:d9:69:58:f4:91:bf:5e:57:b7:
a7:82:e5:6d:5c:8a:85:bd:57:4c:fb:7e:b1:5f:65:
03:84:57:24:12:e8:e9:c4:c2:1d:48:d1:6a:19:74:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:44:AD:94:C2:6F:DB:BB:EA:9D:F2:30:38:49:E5:AB:E1:A4:06
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5b:34:74:6a:1e:10:64:b0:15:7d:49:d0:41:ec:5f:6d:ac:
b5:6f:af:ed:e4:d4:8f:37:2e:fc:ec:2e:03:aa:79:b3:0f:64:
c1:25:1a:4f:63:94:53:f3:75:4f:48:ec:0b:57:1f:b5:af:c3:
8f:b8:5d:b3:b5:b3:d0:66:b2:9c:af:f4:4f:dc:e2:21:07:38:
02:0f:35:12:e6:e5:aa:e6:3f:63:41:bf:4a:0f:c4:c7:15:cb:
59:de:95:6c:41:35:ee:5c:7e:51:83:32:87:06:de:8e:47:02:
be:96:31:89:29:b7:d7:1d:76:73:e8:61:16:e5:d4:7d:56:c8:
b8:9d:f0:ee:c4:c0:fe:32:8a:59:f9:5b:13:f5:b4:db:36:e6:
ec:80:06:9f:04:4e:77:a7:90:40:b0:37:a3:70:3a:60:07:13:
45:94:8b:3c:55:6f:bd:85:55:f2:43:16:4d:db:af:ef:1b:50:
f3:52:88:61:c9:d6:b4:cc:46:43:17:a8:77:43:f8:e3:f7:04:
ef:37:66:26:7e:36:61:db:ae:76:71:57:79:78:f7:e4:f1:7b:
3f:fe:75:4a:b8:64:07:75:6d:5a:37:07:f5:d4:16:b8:c8:a1:
d4:9a:41:6f:3d:22:cb:f8:5f:e4:ca:c8:e1:6d:e5:df:ee:38:
23:ff:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:25:26 2025 by rpki-client