Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: 9n59KR6j6fhuNjjEOUdnvcOXFrwwL2Me2zo27M2VDd0=
Subject key identifier: A5:27:DF:C6:6F:0A:8E:E4:AA:D6:1B:D0:95:BD:1D:D0:53:EF:74:9F
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 019849662B65B63CE7E176C846FC17266AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 05CB
Signing time: Sun 27 Jul 2025 01:01:29 +0000
Manifest this update: Sun 27 Jul 2025 01:01:29 +0000
Manifest next update: Mon 28 Jul 2025 01:01:29 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: mw5vumXKymkvnAY9A36/0SqtaSU7a8WYX16t4lZrp1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:2b:65:b6:3c:e7:e1:76:c8:46:fc:17:26:6a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Jul 27 01:01:29 2025 GMT
Not After : Jul 28 01:01:29 2025 GMT
Subject: CN=a527dfc66f0a8ee4aad61bd095bd1dd053ef749f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:e5:41:94:e2:fc:36:69:56:8e:39:95:6d:
e9:01:22:11:8e:ef:fc:75:ed:f8:23:dc:fa:e7:7b:
e2:63:72:31:a6:88:e1:e1:88:32:87:31:c5:a7:e6:
aa:34:3b:1b:9c:64:05:55:64:b3:eb:73:57:e7:a8:
7f:77:d1:86:67:27:f6:43:a1:b8:b8:ad:3b:83:63:
34:c5:80:72:9a:7d:ed:23:89:27:6b:e8:7c:9e:ba:
85:0a:4f:03:45:39:83:0d:27:b7:40:42:b2:0d:fc:
8b:27:66:6e:09:04:5f:0b:06:2f:c7:48:66:e6:a4:
f4:ab:b0:0e:ce:88:17:17:2d:9c:dd:bc:83:d3:f1:
5a:94:99:74:e0:5b:4d:88:14:2b:90:a0:cc:40:7e:
a4:98:ae:16:ef:02:64:ea:e1:01:e9:77:a3:63:a1:
3f:e2:70:a5:76:1f:a8:de:01:26:15:ae:34:dc:ed:
36:5b:90:b2:66:04:80:95:6e:40:88:dc:0a:31:76:
e8:fc:90:0a:3d:2f:18:25:a7:98:4f:16:70:fe:a8:
8b:f5:19:b5:0b:3f:47:1f:c9:f5:24:22:08:5d:d6:
e3:25:e3:4b:a9:2f:f8:26:3d:7b:39:09:34:14:11:
14:42:90:f9:43:2c:dd:e9:e8:9c:6a:cc:b8:84:f6:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:DF:C6:6F:0A:8E:E4:AA:D6:1B:D0:95:BD:1D:D0:53:EF:74:9F
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8e:f3:c5:b5:57:fd:87:f8:8e:75:1b:bb:6e:95:63:da:ca:
aa:1c:9c:7e:4f:2e:f9:8f:3e:c7:72:ff:d3:bc:ef:13:43:6c:
48:3d:3c:73:f9:8a:fe:0b:b9:5b:95:9c:73:6b:6f:ef:24:1e:
63:79:71:27:82:e4:e7:38:ec:93:a3:88:23:71:36:36:3f:e8:
b4:9a:ca:b3:92:af:28:63:9b:8b:92:2c:8d:4b:48:5d:c8:ea:
85:ef:29:46:da:9d:54:43:cc:cd:0e:30:ba:4a:82:9d:e0:38:
2e:ae:e0:58:88:4f:7c:11:28:e1:4c:e8:37:9c:78:a5:9c:b3:
68:20:71:6d:7a:ca:e0:04:ed:17:d5:8d:6f:ae:89:84:bd:89:
66:c8:83:6c:01:cd:83:d0:63:4b:33:73:0b:4e:29:fd:3d:c9:
7d:43:f9:84:62:91:e0:de:72:22:81:01:dd:80:7f:b9:2e:71:
e2:5c:15:16:18:8f:c8:90:f0:da:ef:c6:56:f9:23:ed:92:ce:
df:a6:29:af:b5:f3:65:2e:d6:b5:42:e1:98:38:8a:f9:52:8d:
2c:19:6d:a1:44:62:1a:94:92:ed:d3:17:ce:7c:50:c3:9e:ba:
c9:90:ad:0a:56:22:c3:f6:d6:8f:7d:37:70:63:72:69:ce:05:
0e:60:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:23 2025 by rpki-client