Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: Y/s5e2CzJq4L1TRrvRvHz04kwyAMcj53uFk7qMIck0E=
Subject key identifier: 83:CB:4D:53:DA:C0:25:01:E3:20:35:77:BA:45:16:37:A8:07:E9:14
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 01987B9BE791FC874A22F97C5764D5FCABF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 15C3
Signing time: Tue 05 Aug 2025 19:01:11 +0000
Manifest this update: Tue 05 Aug 2025 19:01:11 +0000
Manifest next update: Wed 06 Aug 2025 19:01:11 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: +lebg/jWeKVUleULW5wXfO983BQDgyLOZeKPHWIlc5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:e7:91:fc:87:4a:22:f9:7c:57:64:d5:fc:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Aug 5 19:01:11 2025 GMT
Not After : Aug 6 19:01:11 2025 GMT
Subject: CN=83cb4d53dac02501e3203577ba451637a807e914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:7c:ae:81:c1:72:fe:2e:62:8a:10:5d:35:
03:1d:1f:14:98:64:3f:34:9a:7a:72:3a:fb:0b:c8:
fc:90:8d:2f:4c:b7:60:ac:72:49:48:5b:55:21:5e:
c8:a5:54:f2:cd:ee:f3:68:dc:92:02:1b:1f:b8:8c:
cf:d2:0c:5e:07:85:9a:db:b6:b6:7d:92:f2:c8:60:
08:6d:de:cc:05:e8:3c:05:36:07:3a:4a:3c:d6:6f:
e7:45:17:e3:fc:d4:76:81:ce:70:72:12:67:ea:36:
c2:9b:0f:40:22:76:c7:33:08:ee:e9:c5:b5:a2:c1:
ee:ef:82:43:3a:48:da:73:69:76:9e:39:19:51:7a:
93:80:d3:26:65:45:57:13:3e:45:32:ed:42:92:08:
21:e6:92:53:ea:ed:a0:89:58:da:43:93:6c:76:ef:
6c:2f:14:e6:e1:63:fe:d0:b4:cb:45:fe:62:4c:47:
f0:a4:d7:39:9a:8e:1e:48:d5:e9:54:96:a3:b1:11:
e1:04:65:b7:94:a1:39:27:6b:78:d9:13:45:f6:2b:
82:9a:aa:e3:bf:7d:6a:56:88:88:eb:5b:f5:86:b8:
b4:56:56:6c:14:9c:d4:65:46:e1:42:e5:8c:e3:4a:
51:83:8f:83:c7:ba:5a:6d:a3:17:7e:b4:47:ed:3c:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CB:4D:53:DA:C0:25:01:E3:20:35:77:BA:45:16:37:A8:07:E9:14
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b2:bb:16:09:a5:e1:84:e3:f1:88:a5:73:d9:d0:27:d4:bc:
9c:90:b2:de:73:3c:85:b1:ce:55:6b:00:55:a8:76:05:7b:ce:
76:ac:ff:e4:2b:34:d4:01:7d:49:67:09:df:82:63:22:64:52:
7a:fc:af:0f:a9:06:4b:15:04:97:4a:ba:e9:05:18:17:79:bc:
c8:0d:78:47:f3:4d:bf:5b:ac:3f:14:8b:69:24:59:79:2b:06:
4d:75:d4:2f:86:cc:32:10:e8:f1:87:0d:21:8a:88:22:20:6f:
be:dc:8c:15:c2:b6:54:13:fc:a0:dc:f6:00:8c:32:99:aa:08:
bd:71:3d:3c:88:b6:39:ff:db:ce:a2:42:be:e8:4a:cb:e9:d2:
3f:3d:1d:07:0e:7c:e3:d3:63:55:d2:b5:f0:c3:0f:43:ad:50:
bf:de:a6:b4:de:1b:fe:09:38:3f:36:d6:48:74:2a:f9:a3:3f:
37:15:73:3e:16:9d:d1:97:a2:c5:73:3a:c0:0b:61:7d:e0:da:
7b:66:3c:c9:15:b5:45:1a:87:02:12:1a:39:bd:9b:ac:45:2a:
97:f0:16:1b:fc:55:18:76:76:db:c6:12:9f:e7:23:a9:41:7a:
10:1a:f4:2a:e1:b7:ba:ca:76:79:53:04:83:16:b9:ed:7f:e6:
07:9a:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:54 2025 by rpki-client