Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: /L2EIbKG8pLj2I/PKIF56rmRpCeqaZPViPNTdiTPK18=
Subject key identifier: 8B:56:65:D6:7B:B3:40:19:CE:1F:35:75:B9:B2:D0:C8:CC:52:1C:01
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 01967BD83FC85FEF83C5B7F72593512338C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 04DC
Signing time: Mon 28 Apr 2025 10:01:31 +0000
Manifest this update: Mon 28 Apr 2025 10:01:31 +0000
Manifest next update: Tue 29 Apr 2025 10:01:31 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: 6xm76MOY/3q+Ln2QXL4eYJv351VMeV2tmYw9e0R1abM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:3f:c8:5f:ef:83:c5:b7:f7:25:93:51:23:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Apr 28 10:01:31 2025 GMT
Not After : Apr 29 10:01:31 2025 GMT
Subject: CN=8b5665d67bb34019ce1f3575b9b2d0c8cc521c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ec:13:35:81:95:07:29:8a:e6:1a:85:7c:77:
52:29:e0:92:31:3b:43:cf:d9:73:08:a1:72:3d:f3:
1e:ef:aa:84:ba:5e:bf:6c:1c:17:d7:af:f3:52:91:
09:7a:f1:1a:b7:78:a5:11:5c:30:69:17:72:1e:f1:
34:0e:ab:07:43:3e:8f:91:b9:3a:40:93:d8:5f:4c:
e3:cf:cb:38:85:29:83:2d:62:57:63:99:d2:fd:6a:
20:73:97:d9:c7:3c:f3:30:49:d4:c1:10:31:97:cb:
6e:d2:1e:21:0a:f4:77:be:9c:38:c9:e7:1a:f2:e6:
3a:a7:62:3b:0c:f2:91:66:7a:fc:66:86:a1:77:b6:
10:71:a0:72:76:da:ec:d2:8c:99:c3:19:97:3b:7e:
fe:a4:fa:6f:73:db:d0:33:3c:15:c4:20:d0:25:34:
61:8d:c1:7a:c4:cf:f2:b2:3f:ad:0a:ae:24:0e:42:
12:86:b7:c7:f9:7e:56:73:47:dd:e1:2c:ca:e8:f6:
c3:da:1b:9c:3e:01:83:0f:0b:69:64:e9:02:3f:d9:
96:12:7e:80:7e:a8:c7:50:0e:4e:ba:d5:4c:ab:91:
c0:58:15:cd:e2:b5:69:0a:97:cc:6a:a1:75:33:f6:
c2:eb:95:0d:c0:80:71:9c:d3:dc:f6:4a:45:17:94:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:65:D6:7B:B3:40:19:CE:1F:35:75:B9:B2:D0:C8:CC:52:1C:01
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:85:33:f2:8c:bd:3f:fc:1e:db:e9:bf:b4:5e:4d:21:f7:3d:
18:16:da:8d:3d:9d:45:8b:6d:72:bb:eb:69:50:6b:ff:b1:5d:
20:a9:aa:e7:ad:49:0a:06:99:c3:7f:0d:53:bd:7c:7b:40:32:
f1:30:54:81:a2:1e:2e:5c:59:b5:4c:b4:ef:7b:c6:12:48:d5:
3c:95:d6:d9:95:fe:f1:f5:ee:9d:5a:63:19:5a:24:81:b3:0a:
ef:7d:2f:d7:68:94:24:89:0f:51:5d:26:7a:21:7f:16:06:26:
e9:82:cc:d5:93:5e:e4:3b:63:a6:07:4c:c0:2d:a2:8d:48:28:
76:97:38:df:51:04:77:ae:d4:34:09:29:f5:66:52:38:8a:1f:
70:62:e4:a6:74:1b:dc:84:3b:4a:d2:ec:a8:f4:d1:da:64:82:
a2:7c:ce:6a:a4:4a:d1:04:39:e0:90:43:33:c7:64:e7:34:67:
98:f6:4a:06:84:3c:d1:a2:6c:3d:8e:3d:32:8d:b5:12:49:02:
fb:a8:3b:a8:2b:bf:9e:99:9b:50:b0:5b:4b:2c:f4:70:1d:92:
4f:91:28:7b:b7:cf:6e:f9:02:0e:4d:16:5d:06:0e:c4:1b:89:
c0:a0:d5:ab:bd:55:20:8e:bb:44:49:36:49:bf:d4:97:14:75:
5d:d0:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:55:32 2025 by rpki-client