Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: cCnD2/lm6bkwsgO1PaNwg2JiuXxvztdX29E6zScEb4g=
Subject key identifier: FE:88:97:55:DB:8E:7E:65:D4:B3:13:12:F6:21:3D:11:A7:89:62:7F
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019749D62F8004DFCA7276C6BE535A49381B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:01:03 +0000
Manifest this update: Sat 07 Jun 2025 10:01:03 +0000
Manifest next update: Sun 08 Jun 2025 10:01:03 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: 8AHUvCX/Py8Z5WxL+njRylUaHswIg1YGl/50fdJVNnM=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:2f:80:04:df:ca:72:76:c6:be:53:5a:49:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jun 7 10:01:03 2025 GMT
Not After : Jun 8 10:01:03 2025 GMT
Subject: CN=fe889755db8e7e65d4b31312f6213d11a789627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:d4:0f:7d:dc:39:76:5e:5d:8b:3c:9d:c4:
15:cf:f3:25:e1:c5:3d:e3:48:1f:d2:16:e3:94:50:
a7:04:84:4e:33:da:92:bc:cd:bb:63:12:04:a3:f0:
91:56:2a:10:a3:27:fe:f1:46:22:17:2d:4d:01:15:
65:40:61:e3:5d:7e:49:bc:7f:c9:e9:c5:8b:11:d0:
17:a1:c4:0d:35:16:49:3e:25:ae:b0:e2:15:d0:7a:
67:09:b9:8f:23:5a:f6:ba:c2:02:a2:7a:0b:07:73:
03:25:36:69:d9:b6:8b:5b:24:15:75:ad:39:5b:7d:
f8:aa:3b:eb:3e:2f:36:a7:d3:dc:ed:da:21:86:a3:
b2:8d:27:86:58:ef:50:86:0e:f2:d2:a4:d1:18:e9:
a1:19:8c:2b:d4:a1:17:ef:ed:e4:72:ad:3f:be:22:
bb:34:0f:fa:33:b9:56:a5:2a:8d:c9:e0:64:e4:bb:
f2:bd:c4:62:53:a2:bf:b3:67:73:40:d4:63:10:48:
52:62:04:c2:28:08:c8:ac:9e:8a:9e:70:a9:40:ee:
cc:70:50:89:70:5a:fb:3f:d7:19:39:74:22:a7:e1:
fd:46:b0:6c:db:c8:f5:8d:7e:01:91:6d:45:ab:ae:
11:4e:28:40:aa:25:de:7b:b5:4a:ae:ae:0c:e5:2b:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:97:55:DB:8E:7E:65:D4:B3:13:12:F6:21:3D:11:A7:89:62:7F
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:88:a7:76:f1:02:60:2e:a6:e7:6c:99:9e:02:a2:aa:e7:f2:
c8:e3:64:cb:50:6a:dd:29:22:bf:6c:4c:3d:dc:bb:9d:6b:61:
f6:10:49:b4:1e:7c:6b:d8:6c:08:dc:5f:5a:c8:b9:76:da:aa:
45:14:87:f7:61:c2:42:1c:a1:91:88:67:a5:f6:f1:8c:24:13:
d3:88:dc:c3:93:d2:cc:09:74:49:dc:11:27:13:e7:f3:66:ec:
2d:ad:37:84:b6:e2:c3:0b:78:67:a3:ea:52:e5:64:4e:68:33:
be:c6:0c:44:84:6e:34:49:ad:7a:e6:85:23:d6:e5:47:3b:ee:
83:73:ad:1c:d1:8e:7a:a5:ac:91:1c:6c:67:aa:e0:52:07:b2:
33:86:4b:f2:e2:3f:bc:d1:76:40:4d:f1:ed:64:c0:ba:ad:5c:
3e:86:8c:9c:a0:13:9d:4a:f5:24:48:f9:a3:e0:28:95:1a:c2:
fc:20:d5:97:af:85:a1:16:e5:80:e6:c7:79:22:2a:8c:17:d8:
f8:e2:a7:d9:68:63:5e:2d:23:41:aa:1f:a8:e1:e2:47:f3:d9:
f8:d9:f4:47:04:b0:dd:3e:42:b4:de:e4:40:19:19:1d:07:48:
97:b7:41:aa:f8:38:e8:e9:4d:2d:52:2b:02:ce:f5:64:0e:f3:
81:c3:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:00 2025 by rpki-client