Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: 5528ywts7PdxKbbQIXb0qwsKaUDGKBuFNPXoF7qA1Vo=
Subject key identifier: C4:B5:35:6B:B6:ED:50:1A:38:51:1F:AE:81:59:17:64:8C:72:B2:49
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 019838041A4C3CB10AEC0E1E86FEAA2F512D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 08EA
Signing time: Wed 23 Jul 2025 16:00:49 +0000
Manifest this update: Wed 23 Jul 2025 16:00:49 +0000
Manifest next update: Thu 24 Jul 2025 16:00:49 +0000
Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: u74BdoJ/SVNSpvec6swN4bK1Jf20XNti2SZCBeg9paM=)
2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:1a:4c:3c:b1:0a:ec:0e:1e:86:fe:aa:2f:51:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Jul 23 16:00:49 2025 GMT
Not After : Jul 24 16:00:49 2025 GMT
Subject: CN=c4b5356bb6ed501a38511fae815917648c72b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:7c:2b:38:f3:4a:d8:8a:e9:fe:1d:d1:76:
4c:fb:3f:3c:ef:a3:e1:67:f8:26:7f:0e:ec:b1:76:
d2:16:53:6d:ae:1c:df:40:22:3c:9f:d0:de:e9:7f:
0b:f5:8d:b3:0a:56:69:b4:b0:b9:b0:37:a2:4f:fb:
90:a6:dc:5f:fc:e4:91:66:05:10:e0:63:86:48:13:
89:d8:fc:70:43:fc:e8:db:2b:10:0b:c6:27:ae:82:
ff:a3:0a:b2:f2:3e:2b:44:76:96:75:bb:fd:a3:ee:
41:1f:7f:a4:4f:10:50:4f:8a:c9:5c:08:56:01:fa:
75:ad:2e:59:e3:0e:ce:82:69:f1:0c:50:97:fb:bb:
17:4e:4d:ba:01:82:25:ce:59:de:a4:2e:3d:36:e7:
7c:87:71:cd:4d:56:cd:11:71:a6:42:5d:d2:a9:2b:
9a:b1:2f:0c:15:32:31:f6:0f:e8:57:92:93:0c:3f:
00:64:1f:76:6a:69:83:c0:89:ca:df:39:29:09:56:
44:9f:c0:01:a0:62:5a:9c:fb:f9:69:13:fe:da:32:
0c:ee:1e:49:e6:34:4a:cd:3b:e9:d9:02:41:6f:b4:
12:f0:58:05:c0:56:df:0a:41:b7:a7:74:7c:4a:7d:
94:85:9f:93:a8:5a:97:40:2b:cc:18:ef:b9:d8:b4:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:35:6B:B6:ED:50:1A:38:51:1F:AE:81:59:17:64:8C:72:B2:49
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:ca:c8:a7:04:fe:e1:81:e6:58:f9:51:d6:c8:f6:f8:9b:
74:9f:d7:f0:3d:03:6c:ca:e0:11:76:4e:f3:07:81:56:83:bf:
90:52:6b:e3:af:ef:47:16:1d:8c:a8:4e:bf:3e:bc:97:42:70:
c6:71:8d:ee:85:16:14:96:6c:92:38:d9:f3:14:e1:bf:ef:8b:
e6:86:b2:9f:ed:87:ab:3e:ef:07:4a:a1:d3:67:f8:57:e4:14:
e5:23:cb:68:19:a9:1a:a7:b9:8f:56:68:a0:af:9b:f1:fb:02:
2d:6f:94:8e:e4:05:2d:d8:4c:11:bd:2e:9f:c8:8e:d1:fa:5e:
72:57:7f:86:fe:c2:f5:02:fd:fd:f8:4e:18:dd:14:7c:97:0f:
ce:15:db:23:fc:0f:4c:8f:e4:83:3b:48:6d:74:db:56:11:4b:
c0:13:76:81:11:87:58:b0:9b:7b:b3:5c:9f:8f:68:c7:12:8e:
ed:73:f5:56:99:87:28:27:10:6b:47:e7:1a:35:c2:17:e4:ce:
d4:d4:eb:29:8d:5c:d2:82:37:a6:91:8a:2a:f0:12:af:bb:e3:
a9:85:cc:76:44:68:7a:e8:64:eb:86:c1:1d:9b:32:80:db:90:
d2:f0:cc:6e:72:7a:92:08:2d:5d:00:5e:6b:ee:6a:24:da:d8:
20:73:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 01:25:10 2025 by rpki-client