Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: XmtG0NnAdRXhRH+WWyOZqf+fDpWtMtvmt2YYHz3/Sn8=
Subject key identifier: 20:DB:DA:16:40:D0:68:C0:03:86:EB:BB:44:E8:B9:6B:D9:00:1B:C1
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 01974B8DD15AF823DBC7047B48AFA5622556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 096C
Signing time: Sat 07 Jun 2025 18:01:14 +0000
Manifest this update: Sat 07 Jun 2025 18:01:14 +0000
Manifest next update: Sun 08 Jun 2025 18:01:14 +0000
Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: uZ3lg1WbJzpJIRIdWNI8vGK5FS79DYeF4zIRi26zlbo=)
2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:d1:5a:f8:23:db:c7:04:7b:48:af:a5:62:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jun 7 18:01:14 2025 GMT
Not After : Jun 8 18:01:14 2025 GMT
Subject: CN=20dbda1640d068c00386ebbb44e8b96bd9001bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:46:3d:47:ef:30:f7:be:2f:d5:9c:37:19:
be:19:34:07:11:57:bc:66:a5:2c:ea:4e:4a:3b:61:
75:72:4c:df:eb:91:35:16:03:e5:3e:4c:db:ce:78:
bf:8a:51:9b:d3:2c:43:bb:dc:fa:22:79:f5:1c:55:
79:e9:78:fd:62:3a:8d:d8:22:8d:23:88:fe:23:42:
0b:96:ef:eb:61:9a:bc:84:c3:8c:cb:c8:6b:c5:33:
76:bf:d6:72:0e:0e:a3:c0:e5:c5:6b:21:52:27:ee:
2c:0f:b1:cc:2e:12:cd:c3:5c:fa:33:fe:f0:84:02:
ee:b5:26:f4:71:72:e4:e3:b7:50:38:b0:44:c5:4d:
f4:2d:94:84:69:73:b7:99:c1:fe:4c:ec:22:e3:dc:
50:2e:0e:4e:2a:b6:d7:4a:fc:c3:76:5f:86:bc:5e:
54:1a:cf:41:28:cc:61:3b:b6:30:54:01:8a:2b:ea:
4a:8d:8f:9c:59:70:16:29:b9:2e:ca:f2:7d:dc:f5:
d5:37:78:08:3f:0d:b8:75:79:3c:ea:2b:e6:d3:16:
26:98:16:e3:e4:67:b8:36:c6:c3:12:8b:e1:96:87:
a5:be:95:ed:49:13:a5:29:33:96:8e:ba:3e:1f:83:
6f:b1:7a:77:8d:9a:b4:34:89:f8:a7:95:60:40:c6:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DB:DA:16:40:D0:68:C0:03:86:EB:BB:44:E8:B9:6B:D9:00:1B:C1
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:be:bc:de:42:79:37:64:90:e4:36:ff:7b:c2:bd:88:72:
a0:ab:ca:3e:42:71:c3:10:2a:50:36:aa:24:8e:d1:ed:cc:16:
aa:21:bb:90:5a:5c:c7:09:63:34:d9:38:50:24:f3:d5:cb:16:
7e:4a:38:70:08:87:15:e7:32:06:57:d5:68:ba:7c:0a:49:6c:
da:ac:54:0a:1f:a9:98:90:ee:61:43:6f:e7:fc:0a:2a:9b:3e:
d8:db:00:5e:94:fe:34:8b:3f:e7:07:3f:fb:2a:71:28:01:50:
9a:a3:37:50:60:bd:8e:5e:db:c9:fe:96:72:93:2e:fa:a7:be:
fd:dd:02:46:16:2e:0d:23:4c:f6:ce:cf:90:9b:62:bd:7a:13:
ea:2c:e6:d2:f1:a2:1d:c7:bd:8d:94:90:aa:3d:4e:39:89:ca:
ac:2f:92:61:03:be:a3:c4:c0:33:a4:6c:06:94:06:fd:c0:b4:
0e:49:83:25:3a:51:72:14:39:3f:bb:75:f6:63:77:40:3e:28:
71:0a:f5:df:a2:30:c6:0f:45:e0:35:62:36:7c:01:2b:e7:6f:
a8:50:94:0d:fb:33:88:0c:4d:f4:8d:9b:fd:2d:3a:77:7f:f0:
00:fb:84:ac:9a:8f:e2:a5:d7:06:7c:2d:b5:a4:c7:fe:67:44:
b7:d2:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:37 2025 by rpki-client