Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: v95zlo97cmyb6Wy0MTiZKN6yH7ect4cKup+mvh9xdns=
Subject key identifier: A8:75:C0:36:9F:18:70:E0:5F:FB:50:4E:3A:B3:62:B2:9A:B3:7A:33
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 0197B6A1E2D55507C171E3DD0E28249072A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 057F
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: J7g20za/QMvKvYD6bugHOhxuph+w7IMDJvvXWiFCPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e2:d5:55:07:c1:71:e3:dd:0e:28:24:90:72:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=a875c0369f1870e05ffb504e3ab362b29ab37a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:34:91:30:89:1c:ab:60:9a:16:64:f1:2b:
5d:f6:7c:a9:49:f5:7e:e5:03:b9:8d:c5:57:ab:a2:
84:5b:08:ab:2f:df:26:36:a7:d8:5d:45:ba:b2:f7:
5f:83:7e:51:03:91:0f:7e:a1:ed:67:e3:f9:ff:60:
b8:24:ce:66:48:27:ca:28:da:a8:c9:7f:4f:e1:19:
56:c7:6e:4f:47:ef:40:81:a1:8b:db:b8:5e:7d:b0:
f5:f8:72:4e:34:ec:40:e6:3a:4d:eb:62:21:60:53:
8a:d9:8c:2a:ca:8c:7f:b7:25:c9:6b:c1:68:e5:b1:
53:69:3f:7d:7d:b7:73:25:a1:2d:e9:ae:28:92:8d:
e4:1b:a7:c0:a1:b9:6d:14:bd:a9:c2:f2:9e:44:f2:
51:37:7a:3c:30:dd:13:5d:23:77:f6:13:df:ff:ed:
24:68:f0:9d:e6:31:80:ed:7c:ac:d7:54:0d:95:c5:
b8:e4:fb:75:23:d4:7e:e0:f6:82:85:60:9b:74:ae:
37:f9:6e:4f:ed:9e:92:b4:06:ed:c5:26:93:22:ce:
6f:24:50:37:b3:80:b2:dc:0a:b9:9b:9c:21:fc:50:
a0:e7:65:d0:e1:5c:22:eb:84:af:24:d0:20:05:07:
72:89:a4:e3:c8:22:a8:14:df:63:00:ad:d7:9f:8a:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:C0:36:9F:18:70:E0:5F:FB:50:4E:3A:B3:62:B2:9A:B3:7A:33
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:89:a2:9b:93:31:7a:7e:17:a7:3c:59:5e:15:90:dc:21:d6:
72:eb:b9:da:b5:4d:b8:82:96:99:5b:a0:7a:f2:f5:8c:41:a1:
ef:0a:d4:b0:aa:57:e2:34:e3:24:50:a0:b4:a5:5b:d9:4c:f9:
d5:d1:70:fa:c7:7a:86:24:81:9d:0a:1a:ac:52:63:f4:fb:ab:
35:92:a2:2a:54:58:a1:ae:4f:97:74:a5:1a:4b:c1:76:22:12:
9e:da:63:76:75:00:10:73:c6:38:3a:4c:bb:e3:fa:67:f5:1f:
84:77:5b:1b:ea:1f:80:14:7d:91:cf:5a:08:be:f4:ae:a2:30:
ea:e8:ee:27:21:d1:f9:94:ca:31:c8:75:9f:86:dc:3b:8b:48:
5e:51:af:1b:c4:c2:c5:f1:53:73:3b:3c:c0:fd:dd:be:08:d8:
c7:aa:8c:75:80:90:c9:d0:b3:07:e8:2e:db:f8:40:c0:4c:72:
87:c9:8c:81:2c:45:5e:36:ba:88:7a:9f:31:0b:19:3c:79:e1:
ea:c5:7c:ad:f7:84:ad:3e:cd:d9:d0:c8:46:3c:ac:e1:92:9d:
fa:ff:f7:a2:f4:25:2d:9b:ef:8d:17:fe:0d:94:4c:39:44:0b:
d8:e7:70:5e:63:4f:43:ce:b4:18:d5:83:35:b3:d8:aa:ba:ca:
59:69:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:52 2025 by rpki-client