Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier: dEA7DagQlZvg37mt2wZvHwFJU4wilIGicxnj7uY11hk=
Subject key identifier: 30:63:F4:28:10:76:10:71:0E:C2:03:8F:34:02:8E:6D:E2:3D:9D:6A
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 0198D7E0FFF551706210761DB116626EB72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number: 047E
Signing time: Sat 23 Aug 2025 17:01:43 +0000
Manifest this update: Sat 23 Aug 2025 17:01:43 +0000
Manifest next update: Sun 24 Aug 2025 17:01:43 +0000
Files and hashes: 1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: 0XQuVxH1sBZUGNoX9i9v1GVdpfWEqw5b1t1mtL9Ll6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:ff:f5:51:70:62:10:76:1d:b1:16:62:6e:b7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Aug 23 17:01:43 2025 GMT
Not After : Aug 24 17:01:43 2025 GMT
Subject: CN=3063f428107610710ec2038f34028e6de23d9d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:c8:c8:49:50:86:b3:de:6a:31:c2:6f:bc:
df:bc:05:72:b3:40:ac:ab:fa:1c:e7:a3:05:d2:2b:
66:76:ca:55:52:a7:88:61:ae:c8:2a:47:c8:f4:6e:
e3:16:f6:68:27:ee:b7:0d:8d:4a:da:40:01:cf:0d:
41:85:a3:dd:ed:a7:50:4a:dc:4c:9b:46:e0:d2:02:
b3:92:b4:af:f0:90:3f:4a:62:57:78:85:4d:94:18:
79:f8:b5:97:87:51:6a:08:a8:b7:9b:7c:b4:1f:da:
60:29:80:05:a6:f2:d4:dc:b1:46:dd:f8:db:20:dd:
b5:db:f4:56:37:bf:41:a8:b4:3a:fc:33:16:85:33:
c7:88:4b:66:73:29:07:61:90:e7:16:be:6d:47:30:
42:5f:bc:66:6a:a2:15:03:1e:1d:ab:ed:92:d9:4c:
56:d4:6b:ac:a2:34:a8:23:e1:ce:3a:a7:3d:2f:64:
42:08:98:a2:6f:2f:bc:b0:68:ef:ab:28:2a:f8:24:
6f:29:75:33:91:ac:18:a2:86:0e:12:91:06:59:2a:
ed:8b:bd:5d:4b:37:cc:58:3f:36:c7:57:bb:cc:46:
ab:0d:13:d8:75:9a:42:ff:9a:0d:ac:f2:f5:cb:39:
21:ca:50:fe:6d:57:c0:8a:8f:9a:9d:c4:bb:13:35:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:F4:28:10:76:10:71:0E:C2:03:8F:34:02:8E:6D:E2:3D:9D:6A
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:a7:b5:b1:fb:fe:cc:aa:44:02:7e:f1:76:00:88:32:df:
b6:82:f1:82:21:6e:5c:e4:ef:53:cb:e3:67:05:d8:a9:ea:f4:
86:d3:1e:5b:5b:1c:fb:cd:80:4a:55:58:c8:e8:6c:a6:c5:e5:
32:88:5a:50:04:e9:ae:37:03:f0:80:00:e7:0c:24:6f:22:db:
4a:4c:26:7f:8b:40:88:87:cb:38:14:8b:0b:6c:2c:3a:1b:51:
5d:d7:58:30:54:d2:1f:5b:11:36:73:7e:c1:e4:11:8a:de:8a:
7e:41:00:28:29:a8:75:45:04:b5:d1:f4:ff:ec:78:4c:c9:31:
d2:27:21:82:85:6c:1d:7f:6a:fe:c2:12:01:30:9e:fe:57:21:
ff:bf:d0:1d:26:b0:cc:c8:47:f0:48:48:e9:46:2c:9a:57:17:
47:e9:06:77:e2:b5:02:cb:1a:e5:83:d8:dd:55:2e:64:6c:d1:
7e:10:04:28:23:ed:8d:c3:fc:3d:0f:41:bb:ca:14:75:ff:80:
30:d7:ec:bc:9a:3f:3b:1f:7d:46:d3:60:7a:9f:14:2d:bf:28:
25:f4:3d:d3:8b:23:e7:a8:e7:3b:36:9e:8c:46:29:07:e9:5c:
a2:11:61:1d:ac:c2:40:f2:0d:7a:15:db:4b:a1:4a:bf:c3:87:
67:88:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:54:31 2025 by rpki-client