Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier: T1gp7Lo+Vkxwfx22MQ4RRiBkNzvLECJTLZ+FnMR8cXs=
Subject key identifier: 08:2E:8C:C2:7C:77:80:56:76:88:B2:4A:0F:FE:EE:AD:39:1E:19:1C
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 0199FD6B6438986C4E3B22BA0E091EEF7D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number: 0516
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: cgOogdvkbk1CJ7iGuEYN8YxXgEWTu0KgUiat6xclYwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:64:38:98:6c:4e:3b:22:ba:0e:09:1e:ef:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=082e8cc27c7780567688b24a0ffeeead391e191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:32:43:99:40:aa:8c:fc:ae:1e:20:52:d9:
16:bf:b4:f2:b0:e6:f4:25:dc:57:85:6e:d3:30:20:
30:5d:d0:45:0a:c1:f5:55:47:41:51:96:c1:c3:c0:
ca:ca:ff:3d:4a:42:80:20:12:75:2e:74:df:7a:c9:
3d:14:75:07:e7:4c:9a:a4:9a:e7:f4:47:46:ef:16:
fe:62:e0:39:6e:80:30:c5:24:16:a4:b2:a8:5a:7e:
a2:cf:c0:da:fd:95:56:7b:2f:42:12:5c:c1:67:c4:
4e:40:58:49:1d:c9:5b:c4:ae:9e:90:f6:2d:0e:2f:
05:b3:99:80:13:8d:97:bb:7f:ea:f6:ed:d4:a1:d6:
d6:8c:91:0f:23:ff:db:17:7e:fa:eb:2e:d9:b5:15:
28:68:93:5e:64:90:43:76:9d:86:8d:b0:05:4a:65:
18:af:c5:2e:64:b2:28:82:99:cd:ba:8d:2c:2b:99:
de:8d:97:e2:94:21:fd:69:ca:2a:c8:71:82:86:8b:
98:0a:7a:4c:6d:9d:32:57:55:94:76:af:1f:f5:9f:
74:8d:22:65:5a:5c:60:04:2f:1c:70:27:35:64:28:
3c:92:e1:65:7c:1d:9a:72:4e:66:2b:22:d2:f0:bf:
f1:ab:57:de:c8:58:3d:c4:58:69:28:e5:a3:11:f7:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:8C:C2:7C:77:80:56:76:88:B2:4A:0F:FE:EE:AD:39:1E:19:1C
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:5f:c6:e0:5c:9e:97:7e:ec:34:bd:5f:48:8e:46:be:01:
17:19:06:f3:b3:13:aa:b8:49:0e:75:13:4b:c6:85:34:4b:49:
f3:fa:40:78:f4:e8:db:0e:b6:c2:22:26:59:6f:44:b6:2d:53:
d8:00:6d:32:f7:7d:9a:a1:5c:9b:90:33:66:43:51:76:61:69:
bc:39:48:57:15:03:1c:e8:45:d1:c0:33:97:27:19:8b:9c:74:
54:11:35:2e:7d:0b:c2:79:09:6c:79:e2:32:da:a9:16:ee:91:
75:66:32:9a:e8:0c:19:c7:65:8e:7c:cd:cf:66:9d:c6:06:35:
47:5d:cd:61:64:7f:96:2b:55:a4:56:29:4e:b9:bb:e8:af:42:
62:76:74:3d:9b:b3:fb:72:07:49:fc:ab:64:b4:66:bb:ea:b3:
cc:e8:87:65:a4:83:91:97:b7:08:dd:c3:a9:ed:52:fe:c9:cd:
aa:81:08:cc:b4:e0:e9:87:ec:0c:9f:ab:4d:38:1d:24:2f:62:
88:12:b8:5b:f1:f2:e7:70:82:77:88:c0:ca:95:62:27:2f:82:
0f:f8:fa:d5:1a:e7:11:cf:a9:d1:8d:f9:d8:f5:65:d1:72:6e:
86:49:96:ac:db:1d:98:4b:8b:db:3a:0d:f2:48:d5:6b:70:01:
90:bd:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:51 2025 by rpki-client