Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier: CkTzgulITwikGdYAXbaqH1PQoxPnt7qbystj5sS2n/Q=
Subject key identifier: 4C:A0:58:6C:B8:97:FD:95:77:89:4F:F8:4D:D9:8F:F8:95:5E:9A:98
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 01989259FCF48B91881DC44C42AFD5F42995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number: 045A
Signing time: Sun 10 Aug 2025 05:00:27 +0000
Manifest this update: Sun 10 Aug 2025 05:00:27 +0000
Manifest next update: Mon 11 Aug 2025 05:00:27 +0000
Files and hashes: 1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: REteW0BtGYCW2gvX6lmU3Pe4W/5NrE4WtYpWECUtpp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:59:fc:f4:8b:91:88:1d:c4:4c:42:af:d5:f4:29:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Aug 10 05:00:27 2025 GMT
Not After : Aug 11 05:00:27 2025 GMT
Subject: CN=4ca0586cb897fd9577894ff84dd98ff8955e9a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:b2:3f:82:a2:42:99:db:6d:75:4c:e8:16:
41:17:90:a8:1d:15:53:0c:52:e0:2b:c0:5e:79:a4:
95:43:b2:e6:57:e3:03:68:cd:63:0b:3d:69:e8:a9:
b9:51:c7:7b:c9:a4:51:29:b0:7c:3e:b9:fa:7d:ab:
a2:29:1a:fe:2f:f4:5b:44:c1:ca:51:05:b4:18:58:
78:c6:20:6b:2f:81:d0:d0:dc:3b:33:77:e5:23:9f:
a5:8b:0f:d5:13:02:f8:65:27:cd:42:d4:8d:e2:52:
2d:d6:f8:a6:b7:3b:b5:aa:af:da:d5:a2:9a:3c:4d:
1e:d7:91:85:05:c5:8d:4c:19:fb:f9:c0:7f:32:2e:
24:77:c5:40:4f:59:7d:99:9d:c2:97:b5:79:c2:4e:
bb:9c:12:2a:41:09:b7:77:f7:26:45:69:0b:88:04:
af:79:aa:fa:2a:29:84:02:86:d2:0e:ae:04:3e:1b:
d4:fa:60:d1:c1:cc:fd:1a:30:0e:d8:93:63:bb:bd:
3a:31:40:95:f0:f1:f3:4d:e8:6e:d6:1f:a6:7f:b7:
1b:e7:07:14:9e:05:80:e2:ee:80:5c:57:af:db:41:
d4:f8:ce:bb:33:b4:31:38:0a:0f:58:23:eb:ee:6b:
58:f2:9c:6f:20:e3:02:d4:8d:c3:c3:85:a4:1a:59:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:58:6C:B8:97:FD:95:77:89:4F:F8:4D:D9:8F:F8:95:5E:9A:98
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:06:a2:b2:c6:46:83:fb:01:31:a5:bd:1f:a2:14:4c:51:d4:
f6:59:36:60:5a:48:3a:e7:5e:a5:7d:1d:28:fa:9d:cd:ff:3e:
1b:9d:ba:77:dc:01:34:19:67:fe:b2:61:b3:e9:47:67:0f:59:
06:3e:df:f1:3c:1a:26:da:c2:a1:c6:7e:bd:ba:6d:fd:34:14:
e4:5f:d0:f2:4b:2e:ba:40:e7:14:04:ed:97:2a:32:53:f9:68:
07:a7:98:c6:9e:b4:f1:b9:14:eb:88:59:67:7e:d8:77:0f:a9:
b5:b4:56:a5:68:58:b7:57:13:4a:91:6d:55:5c:0e:c6:50:5f:
65:db:b4:b6:44:41:46:1c:38:a7:f4:e9:c5:57:e7:66:e0:59:
4c:d1:88:33:69:5e:80:2a:7c:04:ee:f0:a8:6d:97:d3:66:06:
6e:ec:b7:9b:0d:e0:1e:80:11:12:7e:bf:e0:9b:7d:8a:c9:a8:
75:77:0c:00:a8:27:ba:05:c7:07:c4:63:d4:c8:f0:85:3d:86:
b7:bc:e3:f7:23:48:96:64:48:6a:88:f6:bc:da:81:99:fc:41:
a7:3c:20:78:3c:15:bd:15:39:40:a4:a5:0d:f5:b8:85:6a:7e:
34:ec:c3:cd:92:be:98:c0:65:59:37:44:7d:4f:7f:1f:e2:f5:
34:8e:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:25 2025 by rpki-client