Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: 2QXDsNLFDN0BBgn3rLbYoI/Pt4ST/IZIu08w4s66Fxg=
Subject key identifier: 21:1F:4C:72:3E:6F:E3:07:BC:5D:C9:FC:78:25:E3:8E:B8:5A:F3:A2
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019680C6B8E128C61B74243E41EA867C75C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 09:00:29 +0000
Manifest this update: Tue 29 Apr 2025 09:00:29 +0000
Manifest next update: Wed 30 Apr 2025 09:00:29 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: wBKPwCcHnlEVQfX/yPyqPBEo5Hn0ZqpEKopt3XDGyPU=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:b8:e1:28:c6:1b:74:24:3e:41:ea:86:7c:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Apr 29 09:00:29 2025 GMT
Not After : Apr 30 09:00:29 2025 GMT
Subject: CN=211f4c723e6fe307bc5dc9fc7825e38eb85af3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:09:5c:d5:54:b7:5e:d2:7b:a8:02:98:26:
7c:f6:14:7e:a6:16:4b:21:63:91:6d:aa:6b:46:91:
44:4b:31:47:54:46:6e:3d:b9:f1:df:c9:bd:ba:77:
b0:3b:be:bb:a4:41:c4:9b:7c:d9:ce:92:0f:6e:5c:
f2:63:4a:99:ac:45:dd:d3:3a:b2:97:59:52:5e:5a:
65:61:d6:7c:ab:8e:45:98:4a:18:51:9a:e8:d3:c7:
95:d0:5b:ae:62:88:30:fb:35:d3:60:ea:ff:7d:2b:
f4:6d:34:8a:37:6d:5b:bd:81:22:32:29:54:95:1e:
82:49:63:7b:4a:44:e0:8e:74:bf:a4:58:6b:89:ba:
8b:bb:31:6c:cc:14:07:6a:04:74:a2:67:c2:f9:10:
14:e9:fe:47:ed:6b:7d:4f:33:51:68:cf:9c:eb:83:
aa:0b:3f:f0:82:65:08:43:d8:8a:6a:eb:a2:33:4e:
29:7c:b9:39:38:70:46:e6:99:f5:02:49:7f:3f:d2:
97:59:03:10:f4:3d:eb:27:14:37:00:a7:92:36:e7:
79:b5:ee:49:c8:74:18:9b:f1:52:4f:32:2a:af:16:
a5:91:fe:89:39:39:64:92:76:2f:d0:22:00:6f:01:
0f:dd:3c:d8:1c:a6:8c:a7:ec:77:0c:0c:13:9c:18:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1F:4C:72:3E:6F:E3:07:BC:5D:C9:FC:78:25:E3:8E:B8:5A:F3:A2
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:96:b8:fc:ed:79:bf:0d:35:d8:78:be:01:d4:85:b4:6e:
3e:ca:0e:35:5f:69:c3:5c:bc:07:86:6b:97:86:71:e0:85:8b:
18:12:dd:34:a1:67:ed:c3:b9:c6:e3:c8:be:cc:d7:cd:d0:58:
2c:aa:2e:b3:43:a1:77:6d:3a:da:ea:53:09:8d:7c:ed:08:c8:
b4:55:20:e2:e2:c2:30:1c:d8:d4:66:77:88:8e:67:cb:86:64:
4f:61:8e:4a:eb:e9:af:f5:9e:a5:03:e8:36:dc:94:14:24:b8:
50:ad:ea:92:aa:01:b1:fa:1c:5d:1e:6a:33:60:83:4b:01:7c:
34:a7:cb:6c:37:dc:0d:43:08:c7:42:49:e5:ab:6f:05:b4:15:
c1:3c:05:ce:9b:7c:85:32:2f:be:20:5c:b8:8e:b8:26:d4:36:
38:af:56:b5:32:ff:6c:dc:11:c0:23:4e:d7:49:75:d7:08:42:
8d:d8:3c:ce:e2:c4:fe:ba:ad:64:70:55:ff:69:ea:ee:ae:11:
dd:d1:dd:7f:07:51:ea:bb:a0:fc:be:61:d4:18:b8:7a:42:38:
c0:0b:5d:0e:e0:44:38:8b:b1:4a:9b:d7:6c:a7:29:01:67:aa:
9d:84:6e:67:26:48:a0:93:d0:d7:d6:68:de:25:6e:36:b8:c2:
59:2a:aa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:43 2025 by rpki-client