Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: c7CoGhdlW7FsWGBkdbzhWDc8yx7cOT5cl0CM4Ukoahc=
Subject key identifier: 52:97:DA:CE:B6:D0:90:D0:F4:79:32:E4:30:80:80:E2:6F:5E:C8:95
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 0198816802E3CE44A6EA670CD17D1994E57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 05E8
Signing time: Wed 06 Aug 2025 22:02:13 +0000
Manifest this update: Wed 06 Aug 2025 22:02:13 +0000
Manifest next update: Thu 07 Aug 2025 22:02:13 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: DcjELlVMOcRTQnUq0cNIOi01baIoEir7LhkXy/PwjDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:02:e3:ce:44:a6:ea:67:0c:d1:7d:19:94:e5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Aug 6 22:02:13 2025 GMT
Not After : Aug 7 22:02:13 2025 GMT
Subject: CN=5297daceb6d090d0f47932e4308080e26f5ec895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:78:1f:5e:39:61:0e:be:e5:2d:7a:f4:b2:
44:53:74:d2:a8:c8:e7:5b:5b:ce:4f:09:28:e5:6f:
95:10:03:4c:a4:60:0c:f9:ed:6c:3e:10:04:a5:8f:
33:dc:d5:12:4d:04:0c:92:9d:a4:57:98:e9:f3:b0:
63:42:df:97:82:3d:2e:9d:4f:d8:1f:d0:30:37:94:
19:20:85:34:4a:51:fa:12:57:24:71:a0:34:cc:a8:
c3:e3:d5:8a:8d:6b:32:d1:23:cc:fa:cd:62:f8:dd:
bd:1c:1e:90:f6:9f:fd:0c:88:02:31:29:7e:6f:61:
46:89:90:eb:0a:5a:14:7a:f7:25:7c:82:28:ea:b6:
c2:c7:74:9f:e8:ca:1f:07:b1:08:f5:8a:ab:5e:c8:
77:c2:e6:af:7c:c9:ce:3e:55:5a:d5:89:13:3d:c7:
eb:c2:f1:9e:ab:8f:52:10:45:5a:55:24:0b:b5:61:
69:1e:de:63:7d:d6:57:cf:f0:bb:1c:1e:7c:9c:23:
4c:62:27:39:ee:93:dc:3f:36:c0:52:07:7b:06:67:
53:dd:6c:66:bf:71:76:44:d5:81:a4:0d:44:98:43:
7e:00:6e:41:fc:d3:2b:2c:07:a7:a6:7c:78:34:69:
0f:31:39:4c:5b:00:49:e3:5e:ff:81:62:55:16:e8:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:97:DA:CE:B6:D0:90:D0:F4:79:32:E4:30:80:80:E2:6F:5E:C8:95
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:eb:d7:67:59:00:6a:61:89:c6:52:de:1f:fc:9f:9d:31:
53:bd:b1:5b:5f:01:ff:70:cd:b0:53:5d:ac:06:c4:2e:03:d4:
1f:db:96:f4:41:7e:ad:c0:cc:01:b1:30:af:8e:0d:8d:56:d9:
9e:21:18:ae:8c:87:9b:0f:f8:83:c9:f1:92:81:3f:cc:f4:95:
3e:ca:f6:29:ae:14:b3:a5:00:a6:ef:b3:45:68:0e:4d:c9:6f:
9d:10:33:17:3c:99:7e:a1:61:aa:a0:8b:1b:70:90:82:1e:1f:
76:e8:6d:29:9c:e7:21:bc:24:8d:f7:2f:85:ce:0f:6e:12:44:
82:11:f9:c1:a0:64:6b:e9:ac:d9:a5:8f:b3:20:89:cc:24:62:
64:71:da:5b:cf:0b:78:ea:10:c6:50:e8:66:20:27:a8:d5:0a:
ee:13:8c:6d:f2:96:42:7e:02:3d:7d:7c:98:2b:b7:d3:a6:5c:
ca:5e:d3:b6:e6:62:ca:88:49:84:9f:90:80:6b:c8:af:42:f5:
f1:dc:4b:84:6b:53:f5:e7:1b:c8:f8:7f:89:df:3c:d7:e2:f4:
24:ed:60:84:98:45:13:c2:c5:1b:84:7f:3f:83:7e:b2:c0:f6:
63:75:aa:3c:b6:4c:99:43:02:19:3f:19:d7:16:dd:09:61:cd:
0e:7b:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:11 2025 by rpki-client