Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: KRJmsnV/+q+zd2RMVqj/QymkHslUUzKrxGDh8aJJfvA=
Subject key identifier: 0F:F8:BE:55:11:E9:43:CD:86:AA:94:F8:F3:94:8E:78:E2:D1:EF:47
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 0198D5BBFDFA7A8F10B0591206E1A69701E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 085C
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: y8ZlB5nlJ65LMT/BAByWjAYC81Bii6clVnHwF5Fa3tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fd:fa:7a:8f:10:b0:59:12:06:e1:a6:97:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=0ff8be5511e943cd86aa94f8f3948e78e2d1ef47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:f0:b6:73:d9:93:c3:c6:a1:92:f5:a7:63:
71:dd:72:4b:87:73:f9:49:88:96:45:b5:09:e7:93:
ae:5f:b3:42:e7:7b:29:9a:5c:a9:67:43:ce:91:89:
72:fe:00:a2:09:a8:24:64:35:66:96:8f:de:49:0e:
e5:51:cd:a9:27:2a:09:21:e0:e5:81:0e:17:4b:88:
58:51:95:b5:1f:d2:1a:86:db:63:e1:c0:50:3b:db:
08:68:3f:39:d3:10:0c:bd:2e:02:8e:1f:bf:2f:b3:
39:ac:57:3f:96:fd:04:c4:31:94:8d:87:91:6c:42:
c6:88:ee:e8:db:95:4e:3e:92:39:fe:01:7a:1c:a4:
fb:a7:c0:6d:50:2e:e5:7c:5b:27:87:b1:cc:41:51:
30:7b:8c:ea:41:b6:50:d8:d2:a3:f6:ec:b0:d0:e2:
86:ee:5b:fb:69:7e:49:67:39:71:90:ac:68:ba:15:
41:85:f6:98:64:b1:6a:db:79:6e:8e:03:83:e5:4d:
da:7a:68:d0:2e:d8:89:d2:a5:ab:25:2b:19:a0:36:
f8:13:08:cc:ca:b7:11:0d:0d:47:11:bb:10:34:a0:
46:b3:61:3e:00:7f:d4:11:2d:ab:b2:fd:39:93:df:
4f:b8:21:27:7d:ff:e2:84:1c:76:44:d6:96:3d:92:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:BE:55:11:E9:43:CD:86:AA:94:F8:F3:94:8E:78:E2:D1:EF:47
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2c:a5:dd:5a:e3:bb:35:58:c9:3c:1e:64:65:8d:ee:57:bb:
aa:7e:0c:28:12:30:8d:bd:cf:c6:48:5f:2f:5f:d9:2c:7c:c6:
e3:5d:8b:96:d8:07:7f:33:66:c6:87:30:b5:89:9c:d2:8b:4c:
d8:09:2c:01:55:29:43:21:2a:79:67:d5:47:db:2b:f9:d0:3f:
bd:4e:ef:65:3a:32:c3:5f:c8:c4:61:ca:0c:fb:a0:4a:00:ef:
a5:49:c7:e2:25:22:a6:fa:9f:e1:9f:a8:ea:7d:b3:d3:59:21:
61:93:c7:d0:af:21:96:40:fb:35:5c:65:da:ed:19:54:6b:2c:
c0:d4:ea:b0:2c:44:49:11:5e:7a:b4:27:47:cf:73:e9:ca:bc:
28:97:67:8a:22:f3:69:ec:28:18:cf:ca:69:5d:dc:7c:10:fa:
bb:ad:a8:d2:e8:2d:f6:af:eb:3a:40:8e:ef:da:45:41:5b:0a:
34:08:95:2c:c9:2f:94:16:24:6c:8d:0b:a2:00:e3:b1:f0:4b:
66:e1:33:f1:6f:01:12:4c:f4:77:41:44:83:e8:2e:db:58:3f:
06:a4:cd:11:81:24:52:eb:58:c2:14:f5:ca:c2:e8:43:5e:83:
f3:92:c4:24:68:b4:62:78:df:12:19:45:67:29:89:fb:d5:30:
85:33:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:47 2025 by rpki-client