Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: aqeP35JIeLvq8md42lePTHDP7KKcl/ThBo6iSWpawCE=
Subject key identifier: 57:73:FE:79:2C:B6:16:CC:5D:3A:22:F1:61:35:2C:24:FD:70:B5:3A
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 019922FA272CEB726164DED2B74C72B08CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 0884
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: tsQwOrI9vEEb/3vubQVXJZjL3YOdKLlmeCYzQLb9lhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:27:2c:eb:72:61:64:de:d2:b7:4c:72:b0:8c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=5773fe792cb616cc5d3a22f161352c24fd70b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:85:87:8d:49:c1:60:2c:9e:39:ed:68:81:
dc:7a:f8:7c:4b:40:34:04:79:bb:48:63:f4:06:a3:
48:76:fb:8b:4b:11:d1:fd:06:6a:0e:f2:d7:69:50:
42:cd:cd:45:10:35:3d:a5:52:0a:1b:4d:8a:67:bc:
41:bc:0c:f0:4a:03:5f:2a:b8:da:dc:46:3c:49:be:
cc:f4:46:75:d6:9a:dc:0d:03:56:25:10:46:89:28:
e4:6a:98:2e:b9:c6:6f:b1:a1:52:ff:1c:5f:e7:58:
5c:5d:ca:91:a0:21:46:dc:d2:35:d8:fd:c7:83:f2:
cc:3f:36:5c:2f:88:77:8c:7c:37:c0:22:1d:fe:8f:
8b:40:cc:b7:2d:dd:66:ba:6b:c8:20:b0:49:9f:96:
08:f5:e6:03:c3:60:a0:8b:df:47:38:4a:b2:9e:16:
f1:db:82:be:c6:6c:d2:4e:45:0b:e0:e0:79:a6:86:
37:0c:14:3d:df:6e:ff:4a:62:e0:f9:63:e5:1d:97:
36:5a:f9:74:a3:09:c0:74:62:ab:77:3d:b5:a8:b1:
5a:cf:67:12:1c:ca:1c:f8:82:da:15:7b:68:9f:09:
22:78:85:b3:d8:e8:c6:fc:ca:8e:25:73:c3:61:2e:
5f:1a:ba:65:2b:f8:0c:a0:7d:d1:ee:d7:57:93:ca:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:FE:79:2C:B6:16:CC:5D:3A:22:F1:61:35:2C:24:FD:70:B5:3A
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:96:53:07:eb:98:89:d6:11:45:d8:44:3f:d2:60:e6:eb:
b4:5a:3d:9d:ff:36:13:43:b1:d4:20:18:77:8e:69:85:9e:46:
41:06:16:f0:de:ae:98:1a:c1:31:6a:c6:08:2d:0c:be:39:a7:
87:f7:ec:7f:01:0d:2a:3f:b0:e8:ce:de:fe:3b:71:8e:6d:eb:
fe:09:e5:8b:0f:f7:4a:e2:de:b1:67:83:de:0a:07:ff:e5:49:
23:5d:7d:e5:c9:5f:39:e9:a9:1e:69:12:92:28:a8:31:10:e0:
10:a2:68:90:e6:43:1c:e3:16:67:e2:ec:b8:21:85:5d:21:54:
70:07:fe:42:94:ab:66:bd:cc:38:95:dd:6b:94:5c:c1:1f:9f:
8d:76:34:09:a6:28:16:68:7c:89:49:6d:e8:0b:ce:83:a1:e5:
6a:fd:fe:e8:85:ae:c3:10:45:7b:f8:c9:13:5c:aa:ed:0d:6a:
bd:31:20:af:ce:cc:ba:38:37:27:f2:ee:ed:c3:78:f3:4d:7d:
5c:58:38:fd:cf:54:11:fe:37:9b:54:7e:28:05:24:15:a4:05:
9c:45:92:54:00:68:a3:dc:75:35:6b:54:d4:87:fc:7f:80:98:
cd:2c:2e:1e:8c:dc:42:d4:06:df:ea:33:ef:57:58:e1:bd:50:
66:71:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:00 2025 by rpki-client