Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: 4egVcKav3MxkbGi7wozuoj+GMpe2jxDgjpT6+jgxHyg=
Subject key identifier: 35:4D:0D:F3:23:D1:D7:E1:98:A3:A5:5E:FA:23:BE:D3:63:B3:73:CF
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 01977308FA30F0E8FA8D0468EA1A1A13766A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 055C
Signing time: Sun 15 Jun 2025 10:00:57 +0000
Manifest this update: Sun 15 Jun 2025 10:00:57 +0000
Manifest next update: Mon 16 Jun 2025 10:00:57 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: cBjerIWL4y/WJ/5O1YjHAVOoZ3uLEgxqvtZTvq5rwcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:fa:30:f0:e8:fa:8d:04:68:ea:1a:1a:13:76:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Jun 15 10:00:57 2025 GMT
Not After : Jun 16 10:00:57 2025 GMT
Subject: CN=354d0df323d1d7e198a3a55efa23bed363b373cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:fe:9a:45:de:da:92:75:d0:3c:1e:10:a4:
e7:05:5d:04:31:73:64:2f:05:c3:94:d0:4a:7f:03:
73:f9:68:91:08:c7:b6:ec:19:c8:86:b4:34:7e:35:
6a:b7:3d:df:f4:d8:9d:75:1c:67:d0:71:5c:3c:45:
c4:04:26:c8:03:3e:dd:5f:d1:df:e3:d5:5f:83:76:
da:fc:11:1a:9b:b9:31:b1:2d:4b:19:9d:99:d8:26:
d9:e3:66:9e:e3:7f:4d:3f:78:54:6d:d4:04:d6:1a:
06:b6:44:1c:36:cf:d9:e8:bf:51:0c:cd:72:f4:6c:
c7:33:af:e2:af:85:7b:e0:e2:d7:ed:49:10:3d:8c:
78:45:55:cc:b6:61:da:f9:f2:00:e5:0e:e6:dc:d7:
ca:f5:36:24:24:20:68:47:63:01:00:a7:9c:e1:99:
e4:13:22:cc:55:79:b2:a1:ab:f4:9b:02:59:fe:76:
70:9c:33:b2:34:b1:71:f9:76:72:74:2c:77:fd:8d:
6f:d7:5c:56:d0:08:b3:dd:85:9e:74:4d:f9:18:22:
48:86:30:85:67:78:47:95:7e:1a:80:c9:d8:19:95:
59:9f:e9:78:84:22:34:a8:75:95:b2:50:5c:95:eb:
9f:3d:ac:61:e3:51:14:a0:3c:ea:0c:49:3e:8c:d2:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:0D:F3:23:D1:D7:E1:98:A3:A5:5E:FA:23:BE:D3:63:B3:73:CF
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e9:06:a8:c9:93:be:10:a7:ca:05:b8:b1:0d:5d:e9:e3:35:
05:2a:2c:b5:6a:67:d9:b0:52:58:77:67:cb:f5:3c:37:21:d8:
04:d8:74:5c:14:f2:8b:f3:d2:27:b6:67:b2:5d:18:d4:1d:6d:
18:1a:9e:b9:ff:de:c7:0e:cc:85:bd:01:b0:8a:47:c3:da:43:
0e:b8:aa:61:87:e2:fa:fc:94:59:e6:e7:73:91:04:a7:6b:06:
8d:dd:f3:01:79:b9:c2:08:0b:04:52:ba:60:02:7d:1c:81:c7:
da:e8:c6:25:f4:cc:1b:51:56:5b:13:f5:bb:e8:04:df:89:68:
22:0c:41:f5:c3:1e:c8:6f:3a:a9:36:dc:d5:2d:14:1e:a7:53:
9f:b9:c5:6c:78:5d:f7:52:02:b2:6c:4e:09:df:6e:75:7c:0f:
70:4b:f2:56:76:98:85:88:75:fb:dc:39:15:63:4f:c7:f2:e1:
a6:96:33:a1:27:91:46:87:e7:0b:c1:c9:7f:fc:56:7e:15:eb:
ab:0b:6b:3f:64:af:dd:a9:aa:8c:1b:31:13:56:17:09:73:86:
f2:30:81:97:91:c8:4e:55:84:79:da:99:25:7b:a2:24:d4:9e:
97:3a:e6:47:28:54:bd:76:d5:63:ce:e1:14:57:12:a9:23:7b:
d2:ad:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:29 2025 by rpki-client