Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: lBjH+7pKBMcTlhoDfbt0JiYfdekR315azYghzDSNJG4=
Subject key identifier: 2E:88:A7:D3:C2:64:05:97:15:05:72:DD:6D:9C:54:49:FB:A5:7B:8F
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 01969E99F254FE3750A458529329F5EFDBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 04EE
Signing time: Mon 05 May 2025 04:00:10 +0000
Manifest this update: Mon 05 May 2025 04:00:10 +0000
Manifest next update: Tue 06 May 2025 04:00:10 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: UGCyHRSCcajbinlYA5CmXMPr29bwEPECJRS+wDxqkqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:99:f2:54:fe:37:50:a4:58:52:93:29:f5:ef:db:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: May 5 04:00:10 2025 GMT
Not After : May 6 04:00:10 2025 GMT
Subject: CN=2e88a7d3c2640597150572dd6d9c5449fba57b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:c0:1d:8e:79:a3:e6:e8:fb:7a:06:b7:18:
4b:b3:2d:bd:0f:70:ff:77:e3:b0:72:aa:6f:7e:f3:
a4:fd:99:97:1a:39:20:ce:d2:84:93:48:79:e1:83:
9c:8a:fb:aa:7f:aa:c0:f5:c2:14:93:4b:28:c1:38:
87:c4:d0:48:04:0c:0a:de:b5:7f:89:3d:23:b4:ad:
38:ef:c3:0a:58:65:9e:7c:c7:dc:1b:b9:a6:89:ec:
cd:dc:6d:20:1a:8c:ad:92:34:b2:b5:b4:71:19:0c:
f1:ed:31:81:08:7d:6c:5f:dd:0a:ab:1c:2d:27:01:
a3:0e:8d:68:40:2a:82:1e:15:30:3e:25:46:fd:81:
56:48:47:04:94:73:d6:30:12:cb:cc:ce:40:80:35:
19:a1:b6:a7:6d:47:63:20:f6:c7:0f:6f:a9:9d:b9:
56:77:9a:d6:18:2e:24:77:7a:61:eb:48:9a:4a:85:
ed:b4:27:7e:98:cd:91:73:7d:64:8f:bd:23:86:a4:
08:06:01:60:cf:36:35:d3:a4:16:4b:6c:eb:e9:f6:
22:a7:4b:e8:f4:71:06:d7:ac:ef:84:c0:35:57:e6:
3c:af:44:ef:55:d5:f1:b8:51:d8:06:14:eb:e4:b5:
c8:54:7d:6b:f3:b6:d2:6e:28:75:d7:09:d3:b6:a1:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:A7:D3:C2:64:05:97:15:05:72:DD:6D:9C:54:49:FB:A5:7B:8F
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:97:9b:fc:e8:56:4d:07:f5:44:62:c6:cd:ce:a5:4d:5a:67:
34:9d:bc:98:da:16:0f:87:b4:05:22:cf:9c:e3:f5:ea:55:d6:
e0:1b:1b:32:59:38:b6:b8:e3:4f:fa:b9:62:36:8e:69:d9:24:
e4:30:61:bb:63:05:d3:5c:8f:5c:0b:e2:9e:c8:2e:5a:2f:a7:
5b:60:3b:81:55:4a:99:b4:41:9e:f7:af:a2:bc:6d:41:30:32:
ad:7b:69:c2:8a:3c:e6:14:19:65:fe:a3:fb:9c:84:1e:1c:c3:
f4:a9:33:ba:36:1b:37:f8:b3:ce:a7:55:77:32:ef:c3:ce:f5:
74:ee:b2:a3:b7:87:93:6a:a8:c5:85:1c:5d:c9:2e:53:b3:81:
18:2d:1e:cc:4a:bb:fe:eb:b1:f1:ad:eb:e3:1f:ca:76:5c:2c:
70:1c:cc:38:9d:97:16:5d:ac:07:78:fd:ea:92:ac:49:5d:8b:
95:8b:e4:c4:90:11:a2:d3:f7:b5:9b:36:ff:d1:7c:d1:27:50:
ab:4d:bc:5f:8b:dd:0e:7d:74:14:df:07:85:c3:ba:49:ba:57:
80:6a:60:9d:cb:73:5d:c5:85:1f:3e:d1:8d:e4:08:bd:41:df:
d1:1f:83:97:0c:81:b9:1a:96:ca:74:98:85:ba:c4:74:a0:9f:
82:5d:1d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemfJU/jdQpFhSkyn179v+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzk3ZWM2YWNmNGM1MzcwYTUzY2FmODIzOTYzMTZlNTZl
NDg2YzYwHhcNMjUwNTA1MDQwMDEwWhcNMjUwNTA2MDQwMDEwWjAzMTEwLwYDVQQD
EygyZTg4YTdkM2MyNjQwNTk3MTUwNTcyZGQ2ZDljNTQ0OWZiYTU3YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptbAHY55o+bo+3oGtxhLsy29D3D/
d+OwcqpvfvOk/ZmXGjkgztKEk0h54YOcivuqf6rA9cIUk0sowTiHxNBIBAwK3rV/
iT0jtK0478MKWGWefMfcG7mmiezN3G0gGoytkjSytbRxGQzx7TGBCH1sX90Kqxwt
JwGjDo1oQCqCHhUwPiVG/YFWSEcElHPWMBLLzM5AgDUZobanbUdjIPbHD2+pnblW
d5rWGC4kd3ph60iaSoXttCd+mM2Rc31kj70jhqQIBgFgzzY106QWS2zr6fYip0vo
9HEG16zvhMA1V+Y8r0TvVdXxuFHYBhTr5LXIVH1r87bSbih11wnTtqFKTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6Ip9PCZAWXFQVy3W2cVEn7pXuPMB8GA1UdIwQY
MBaAFLPJfsas9MU3ClPK+COWMW5W5IbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmYzMjgtY2U1Zi00MDRhLTlkNGMt
ZDNjMTk1OThhMGU2LzEvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83MmYzMjgtY2U1Zi00MDRhLTlkNGMtZDNjMTk1OThhMGU2
LzEvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJeb/OhW
TQf1RGLGzc6lTVpnNJ28mNoWD4e0BSLPnOP16lXW4BsbMlk4trjjT/q5YjaOadkk
5DBhu2MF01yPXAvinsguWi+nW2A7gVVKmbRBnvevorxtQTAyrXtpwoo85hQZZf6j
+5yEHhzD9KkzujYbN/izzqdVdzLvw871dO6yo7eHk2qoxYUcXckuU7OBGC0ezEq7
/uux8a3r4x/KdlwscBzMOJ2XFl2sB3j96pKsSV2LlYvkxJARotP3tZs2/9F80SdQ
q028X4vdDn10FN8HhcO6SbpXgGpgnctzXcWFHz7RjeQIvUHf0R+DlwyBuRqWynSY
hbrEdKCfgl0d6Q==
-----END CERTIFICATE-----
Generated at Mon May 5 10:26:49 2025 by rpki-client