Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: unaSzC/vpKGKe5oYtbYf0bVQEVnz8ewPrEW2vQgDS4w=
Subject key identifier: 07:79:E4:62:3E:9D:47:E8:06:59:39:FF:95:4C:0B:5A:80:24:15:96
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 0196922853A0A20C184E54726C585A9A5AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 18:00:38 +0000
Manifest this update: Fri 02 May 2025 18:00:38 +0000
Manifest next update: Sat 03 May 2025 18:00:38 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: JtaZhJy3zPK7URjwGVxonNvK7Ar2d/DTysjIKlG7ZL8=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:28:53:a0:a2:0c:18:4e:54:72:6c:58:5a:9a:5a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: May 2 18:00:38 2025 GMT
Not After : May 3 18:00:38 2025 GMT
Subject: CN=0779e4623e9d47e8065939ff954c0b5a80241596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:75:58:d4:eb:f0:2a:b2:bc:1c:3d:fa:ec:
c0:62:90:6e:59:40:52:ad:b6:86:f2:d5:63:79:e0:
90:f7:7c:3c:f6:72:9d:61:ef:9f:b7:f7:84:4b:74:
24:b3:09:0a:4f:c4:5a:1a:64:1f:ab:69:94:29:39:
dc:42:bd:7c:6f:2f:ed:c1:26:8a:36:72:6b:4c:11:
08:d0:65:99:52:5d:f2:af:0e:37:99:06:e8:f6:df:
a5:94:4d:a8:2a:33:2e:3d:54:5c:e8:a2:70:37:bd:
b5:93:36:44:39:54:5c:dc:73:f9:c9:e0:3b:51:0c:
56:d8:4b:37:a5:4f:23:69:4c:55:6e:30:0a:93:aa:
25:f2:0f:f0:ea:b7:9a:93:99:bc:a8:28:84:b9:a2:
66:4f:62:bf:5f:51:47:f5:d2:05:11:90:69:38:00:
29:09:31:1e:e4:07:5f:fa:c9:4c:20:99:a4:b5:9d:
ac:db:ab:9b:ef:4a:09:dc:53:a0:15:d0:6a:47:2d:
d6:61:60:99:ae:a1:37:af:eb:47:b6:17:f5:57:40:
a4:8c:9d:0d:b7:28:75:32:d1:6a:dc:ed:76:d6:08:
32:97:7f:5a:43:2b:21:36:de:e1:d0:8f:4f:12:3a:
2c:15:e9:c5:9f:a7:4b:65:a6:ca:0c:5a:7a:e8:ac:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:79:E4:62:3E:9D:47:E8:06:59:39:FF:95:4C:0B:5A:80:24:15:96
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:de:44:41:b5:e6:fa:f3:72:4e:1a:18:93:ad:6a:8c:49:5e:
e4:b6:bd:21:9b:c7:8c:01:98:6b:ce:d8:c9:48:1d:c2:98:70:
56:e3:00:1d:6b:cb:b3:6b:b6:40:82:ef:2d:03:51:af:db:8c:
7e:19:43:a7:65:d8:ba:ba:9a:c5:f6:39:1a:47:98:90:e7:76:
b9:09:10:c0:b9:88:90:dd:4a:f2:56:83:38:c5:02:a2:88:4a:
5b:e2:a2:75:08:ff:de:c7:f8:58:74:af:6a:36:70:93:85:ad:
44:13:e5:70:df:bd:f9:bc:cf:da:ca:e1:db:20:c6:12:bb:b8:
ba:e5:a6:13:2a:99:cb:72:8d:e9:ae:f5:aa:18:95:40:25:07:
60:ff:00:46:0d:36:2a:be:5f:80:05:c1:67:40:7e:1c:a8:f3:
61:4f:90:73:71:99:d4:44:c8:bc:02:93:39:a2:43:e0:3a:8c:
6a:0c:c3:f1:01:91:9f:e4:9c:f2:4c:87:86:22:9d:6b:a2:36:
86:0a:25:60:b3:d4:25:96:71:11:6c:95:a4:df:3b:a1:84:74:
6f:00:4c:8b:54:2c:2e:41:76:c6:d0:2a:24:00:80:54:0f:2d:
0f:9a:a1:f3:80:26:40:eb:91:6e:6d:af:36:79:bb:5e:69:b1:
3e:9b:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:32 2025 by rpki-client