Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: 3M2VSXqMSkie1Q4up5PhM9RmgUVtrCncK9tpeSsreTM=
Subject key identifier: 52:6E:AC:12:20:76:B6:C0:9D:4F:AC:AF:0A:D5:9C:92:D8:F3:68:D1
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 0199FBB371F4ACA72F04DB39D94065BB3355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 06AC
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: JbNtKfgn6g5Q6PFAeeMcWZucU8KtW5rCmfw9Xm8ut0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:f4:ac:a7:2f:04:db:39:d9:40:65:bb:33:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=526eac122076b6c09d4facaf0ad59c92d8f368d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:cc:4e:ce:93:bc:55:f5:7f:64:af:38:4b:
d3:ca:29:59:a2:f3:f4:e9:90:10:6d:9f:fc:1b:bd:
64:30:39:bb:d2:d3:14:dd:20:94:22:6a:0e:ec:43:
7f:fc:ef:bc:23:f9:28:06:06:34:8e:9b:fd:d5:83:
c5:f4:8e:55:37:a2:ca:bb:ee:09:87:4e:52:a9:80:
20:22:35:e9:af:d3:1a:9d:b8:30:c0:05:ae:be:44:
70:ab:db:cf:de:be:0c:7d:97:01:4e:01:d0:81:a7:
de:6b:1f:53:fe:12:7f:1b:1e:bc:9f:37:29:83:79:
16:b5:22:74:87:29:a4:ad:be:ec:75:d7:fa:24:36:
e5:35:33:26:78:d1:4e:88:eb:65:e8:80:a8:28:be:
53:13:99:f4:c1:2e:a1:10:59:2d:54:51:f5:7b:da:
35:e1:69:2b:9c:f3:13:f2:ca:50:09:e3:59:6c:d3:
8c:d4:3a:bc:7c:8c:a3:aa:c8:4c:79:b0:7d:3d:82:
18:66:dc:d3:3f:ab:b4:f0:21:20:1b:cc:31:aa:94:
bc:2c:f7:07:a3:0f:5c:bb:72:14:d2:fb:da:7c:82:
9d:b7:25:0c:3e:1d:f8:38:c5:04:f3:83:45:9a:73:
5d:c8:ee:0f:f0:7e:f6:32:a7:1f:5f:70:ea:62:bd:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6E:AC:12:20:76:B6:C0:9D:4F:AC:AF:0A:D5:9C:92:D8:F3:68:D1
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c3:99:35:f4:6c:8c:8d:fa:b7:25:ff:d1:db:8a:9b:45:de:
f4:26:bd:5c:e4:e0:8c:1c:ad:09:26:34:8b:f9:cb:04:02:0a:
04:b9:ad:b9:43:de:84:51:84:8d:99:5e:0b:8d:1e:bb:a3:af:
8f:fa:ff:68:2f:0a:c9:92:fa:17:fe:42:c4:a6:a3:2b:13:2f:
e8:6e:58:1e:a8:fb:ee:c4:67:d3:d9:c7:6e:64:63:e6:82:52:
7b:e2:6d:b0:ad:9e:1a:1a:99:62:45:e1:af:94:93:d5:c1:0c:
27:90:53:44:e1:5b:26:8d:ec:d2:ab:26:14:ef:6b:3b:37:95:
c8:81:19:0d:bf:84:50:1c:35:71:81:9d:e5:f5:a4:b2:98:51:
d0:f1:c7:fe:fb:39:2a:9f:b0:6d:81:f0:f2:3e:5c:61:0e:56:
b9:67:fd:50:ad:01:d6:2d:4b:bd:74:6b:b4:75:f3:f6:8e:e1:
c2:7d:9f:5f:5d:94:b7:8f:13:45:4a:07:e3:51:9d:d4:f7:a0:
23:6a:8f:c9:57:c2:70:3b:00:e0:d8:60:cf:8e:43:a5:55:f1:
a7:6a:91:55:b4:ed:5e:9a:61:e0:cf:92:ce:c9:76:49:22:5c:
78:5b:2b:ab:05:d4:48:e6:54:39:c1:ef:37:d8:65:a7:6f:56:
f4:ac:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:14 2025 by rpki-client