Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: 32O/ovziGxVGJ4hWICIPUMC7IVGXPvuJKGwNsee8Ozs=
Subject key identifier: 7A:C0:D9:80:0E:AA:83:08:61:0F:AE:C3:13:2B:4C:4D:69:5E:2C:0B
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 0197B7EAA87CC498FDFA07D3D53C27509089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 07C8
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: CgJ3nWZQnYO59999OrfAUhu6BCyv8UVBZv0i3sDd2QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a8:7c:c4:98:fd:fa:07:d3:d5:3c:27:50:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=7ac0d9800eaa8308610faec3132b4c4d695e2c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:6a:97:56:d4:36:69:59:69:57:b4:86:ad:
9a:74:2d:00:33:c8:7a:95:00:f8:ff:13:bf:bc:aa:
94:0a:2f:65:9f:2f:9b:86:3a:28:ba:72:b6:93:be:
4f:fe:47:89:48:ba:6b:ed:b3:93:d0:e4:5c:55:b4:
ce:1d:93:4a:5a:1e:e8:d7:5a:0c:3f:bd:ff:87:da:
15:18:6d:7d:cf:26:82:c0:da:d6:17:74:d7:9b:b5:
cf:bf:c4:f2:aa:2a:e0:ef:2a:ed:d7:01:05:e1:f8:
ed:f0:25:15:58:80:a1:7e:2f:f7:3e:fe:3a:10:f9:
dc:ff:3d:88:91:01:e6:53:2d:93:37:ff:af:c5:1b:
e9:74:1f:78:b2:27:92:7d:f5:f6:02:d4:88:85:45:
53:b1:e3:e5:54:80:b1:f2:ce:58:4c:d5:01:07:4f:
43:0c:d3:e4:7a:0f:98:c0:2f:a0:15:91:6a:74:44:
af:22:bb:f6:8c:b8:03:66:dc:b4:ac:7f:05:92:3a:
49:4b:bf:27:09:ec:d4:b4:9d:f3:e8:55:17:c3:61:
56:c7:d2:4f:1b:e5:c4:e8:cb:c0:4e:c7:30:40:c5:
85:da:96:b2:79:6e:ee:f8:8e:c5:12:f2:85:0a:b1:
d4:80:b7:ab:3a:f8:12:39:c7:76:54:bf:96:9e:0e:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C0:D9:80:0E:AA:83:08:61:0F:AE:C3:13:2B:4C:4D:69:5E:2C:0B
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c2:5f:9f:72:1a:dd:30:52:a3:76:ab:6d:5f:92:0c:0b:0e:
84:d9:f8:42:bf:88:b3:0e:fe:e0:00:06:ba:89:60:fe:e4:55:
4e:dc:b8:f2:8a:31:1f:0c:ce:ae:35:75:18:55:71:8d:7c:a2:
98:d0:cc:31:e3:5c:b9:2e:51:d9:2b:45:6a:c5:1e:2d:f0:52:
ba:a2:de:ec:6d:9e:1a:2c:09:cc:67:2f:a4:68:29:4d:aa:8d:
0c:a7:df:c4:d9:7a:71:5f:5f:36:8e:d5:00:18:01:79:bf:8e:
2f:7d:f6:67:ad:9f:3d:01:a6:21:b4:86:b4:48:ed:1a:6a:21:
6d:6f:b1:a9:c2:53:1f:36:3f:c6:e9:04:26:1f:04:a6:85:8b:
6d:87:c8:55:e8:08:1d:69:72:a9:54:e7:95:ad:13:26:21:d1:
b8:de:67:6d:b0:e6:c0:ff:a6:a0:57:d4:37:eb:f7:83:ba:3c:
4e:86:08:bd:9d:9d:32:cc:75:d5:28:fd:e0:0f:fb:8b:8f:c7:
48:c5:3f:20:f1:cb:e5:6d:09:21:ec:aa:a9:79:01:ca:b5:fd:
b8:34:ad:43:7b:d8:4f:86:57:a1:77:28:21:de:27:fc:c6:8f:
97:8c:f7:09:ec:ea:ab:50:bb:b2:d2:70:87:95:e0:ee:f8:8b:
5e:bd:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:07 2025 by rpki-client