Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: u7mQADvm66sGbj49fPKXL1hZYTea4j3s/20VD2CHzrw=
Subject key identifier: 22:FD:E1:BB:FA:F6:50:E9:86:23:C1:85:A8:7F:F8:E6:AF:8A:3D:1A
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 019A4EBD50B58CF432A7C64619C676BFD870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 06D7
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: RMDtW4WkA4jtx0tCqTFJp3HF/yjHQJwsnB0QV1EMq9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:50:b5:8c:f4:32:a7:c6:46:19:c6:76:bf:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=22fde1bbfaf650e98623c185a87ff8e6af8a3d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:ef:3f:c4:6f:f8:ec:22:ee:9d:1b:25:5c:
0a:46:1f:94:ec:14:45:78:6a:e9:5c:e3:33:ae:2f:
09:4d:30:6f:ac:e2:07:e1:14:c6:c6:e3:92:2f:ea:
51:76:fd:e1:07:88:61:c5:a6:ef:ee:e1:7d:50:00:
5c:c3:97:de:96:40:e2:07:bb:6b:13:bf:15:e9:ae:
ff:bf:00:be:46:70:f5:a4:8e:60:8c:41:5f:07:1f:
04:85:97:d0:b1:d0:10:d5:25:5f:dc:6a:34:a0:2a:
2f:86:ca:f9:d1:e9:d6:f4:a6:e8:4e:43:7f:e5:c2:
5b:c9:6b:72:2c:6c:c2:94:b0:cf:99:f2:3e:b0:f0:
22:95:bd:cd:77:c5:33:42:14:1a:40:02:5b:81:c5:
1d:cc:10:df:90:e3:e7:88:42:41:34:ad:0e:5c:fd:
50:83:07:46:3f:60:e9:79:94:35:1e:50:b3:4c:41:
69:90:d3:b0:da:83:0c:99:9c:3e:97:59:57:4a:e9:
6e:2f:0b:04:71:e5:15:6a:27:8d:c4:ca:24:e8:9f:
d6:ed:8b:da:85:98:e7:f1:01:82:b9:84:ee:64:f4:
de:b6:a7:22:98:27:4f:4f:0b:07:1c:66:09:15:5b:
6a:ba:98:e0:22:da:94:86:65:ae:12:ea:5c:77:88:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:E1:BB:FA:F6:50:E9:86:23:C1:85:A8:7F:F8:E6:AF:8A:3D:1A
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7e:7d:3e:d7:8b:f6:cc:61:84:2d:57:fa:2d:bc:79:32:ec:
0d:af:1a:7d:78:31:5a:fd:21:c1:f4:76:3d:64:0e:06:82:1d:
f0:cf:ac:43:92:3f:d2:40:a5:dc:70:4d:d9:9a:7b:eb:e4:aa:
55:6c:b7:67:93:dc:41:55:de:2c:48:77:7b:8b:3e:22:3a:7f:
0d:4a:bf:9a:b4:d9:f4:5d:46:78:4b:37:ae:8f:95:96:81:e8:
ea:01:27:d8:9a:55:dc:41:8e:1b:1b:df:c2:ee:c9:0f:9f:4c:
0b:40:47:e8:d5:84:ff:28:0b:51:e9:d4:48:88:cf:57:6d:52:
db:bf:80:13:ca:e9:cd:7a:90:6d:70:51:43:2b:d3:d5:e0:8a:
8c:fc:a6:73:53:4f:55:20:ef:07:92:ac:65:14:94:19:19:63:
dc:7c:4f:cb:b6:86:7c:bc:aa:0c:3d:2e:7c:3a:b0:c0:70:84:
ce:61:26:c9:b9:7e:07:db:12:b2:84:5f:51:ef:2b:69:47:e1:
d1:96:10:4d:3d:99:c8:94:dc:6c:f3:83:82:06:6a:89:75:bc:
62:69:da:b4:fe:fa:6b:7a:a4:92:f7:96:3d:f8:ea:93:7d:28:
45:37:43:3e:2f:9f:31:75:b8:8b:3c:7f:fa:88:2e:54:ed:8c:
49:15:0a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvVC1jPQyp8ZGGcZ2v9hwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzk3ZWM2YWNmNGM1MzcwYTUzY2FmODIzOTYzMTZlNTZl
NDg2YzYwHhcNMjUxMTA0MTIwMDIxWhcNMjUxMTA1MTIwMDIxWjAzMTEwLwYDVQQD
EygyMmZkZTFiYmZhZjY1MGU5ODYyM2MxODVhODdmZjhlNmFmOGEzZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVTvP8Rv+Owi7p0bJVwKRh+U7BRF
eGrpXOMzri8JTTBvrOIH4RTGxuOSL+pRdv3hB4hhxabv7uF9UABcw5felkDiB7tr
E78V6a7/vwC+RnD1pI5gjEFfBx8EhZfQsdAQ1SVf3Go0oCovhsr50enW9KboTkN/
5cJbyWtyLGzClLDPmfI+sPAilb3Nd8UzQhQaQAJbgcUdzBDfkOPniEJBNK0OXP1Q
gwdGP2DpeZQ1HlCzTEFpkNOw2oMMmZw+l1lXSuluLwsEceUVaieNxMok6J/W7Yva
hZjn8QGCuYTuZPTetqcimCdPTwsHHGYJFVtqupjgItqUhmWuEupcd4g8DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL94bv69lDphiPBhah/+Oavij0aMB8GA1UdIwQY
MBaAFLPJfsas9MU3ClPK+COWMW5W5IbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmYzMjgtY2U1Zi00MDRhLTlkNGMt
ZDNjMTk1OThhMGU2LzEvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83MmYzMjgtY2U1Zi00MDRhLTlkNGMtZDNjMTk1OThhMGU2
LzEvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH59PteL
9sxhhC1X+i28eTLsDa8afXgxWv0hwfR2PWQOBoId8M+sQ5I/0kCl3HBN2Zp76+Sq
VWy3Z5PcQVXeLEh3e4s+Ijp/DUq/mrTZ9F1GeEs3ro+VloHo6gEn2JpV3EGOGxvf
wu7JD59MC0BH6NWE/ygLUenUSIjPV21S27+AE8rpzXqQbXBRQyvT1eCKjPymc1NP
VSDvB5KsZRSUGRlj3HxPy7aGfLyqDD0ufDqwwHCEzmEmybl+B9sSsoRfUe8raUfh
0ZYQTT2ZyJTcbPODggZqiXW8YmnatP76a3qkkveWPfjqk30oRTdDPi+fMXW4izx/
+oguVO2MSRUKyA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:50 2025 by rpki-client