Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: cqu75i2VMzV//kqiteyb1Fm3/5mEZU8JwrXwf5v0rwc=
Subject key identifier: 3D:2F:57:75:0F:55:FB:B7:C7:77:D6:23:07:9F:7C:03:52:E4:83:F3
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 0198744FFBB299998DCB23185A2342A9CF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0480
Signing time: Mon 04 Aug 2025 09:00:55 +0000
Manifest this update: Mon 04 Aug 2025 09:00:55 +0000
Manifest next update: Tue 05 Aug 2025 09:00:55 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: cviBl60CaHR+OXsPfP1XAreuuXayQp2bR657ti6Wnfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:fb:b2:99:99:8d:cb:23:18:5a:23:42:a9:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Aug 4 09:00:55 2025 GMT
Not After : Aug 5 09:00:55 2025 GMT
Subject: CN=3d2f57750f55fbb7c777d623079f7c0352e483f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:36:da:59:4d:71:fd:9b:06:3c:4c:a5:d7:
b3:bf:d6:4b:c4:09:79:e9:78:a4:a1:38:73:b1:f0:
67:be:db:8f:08:cb:91:1b:26:ee:da:1d:f2:16:18:
7d:13:5b:37:19:ad:96:e6:20:26:56:d7:24:08:62:
ad:41:5f:95:ae:13:ad:45:5b:3c:1c:fe:b3:0f:87:
90:0a:47:a8:21:7a:dd:2b:97:fc:87:e8:56:a7:b3:
bb:6a:ba:d2:54:ed:02:a9:a9:28:1d:a9:e9:ff:cd:
38:fe:29:e2:1f:ae:60:e7:fa:f5:4d:51:b2:be:95:
22:1c:48:2c:bf:ba:08:78:88:0a:8a:b8:a3:30:20:
87:17:03:0e:30:39:9d:a1:38:61:dc:6d:05:b8:2b:
ff:88:34:24:15:4c:56:78:43:98:25:35:47:69:f8:
a0:aa:da:cb:79:46:27:26:a4:66:88:ae:2b:eb:a0:
02:d7:47:75:ec:e1:8b:9f:32:82:fa:69:97:c0:e8:
45:c7:cb:6d:cb:8a:db:51:97:ec:e4:03:44:6f:59:
6a:45:03:3d:9b:7e:ed:6a:4d:54:b7:8e:b9:22:b9:
d9:6f:f3:58:73:5c:2d:6f:94:31:dc:ac:31:c0:1c:
02:82:9c:95:e7:0c:d6:3f:79:68:d9:f0:31:1c:05:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:57:75:0F:55:FB:B7:C7:77:D6:23:07:9F:7C:03:52:E4:83:F3
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bb:68:d6:5f:71:64:ac:30:29:da:11:c3:90:ac:68:48:0d:
5b:14:56:96:1d:f1:1b:15:e1:ad:e6:55:da:1e:b9:78:d6:d4:
d1:d8:75:02:51:33:61:64:c4:d8:1d:51:81:55:c6:dd:2d:b5:
f6:77:bf:ef:2d:06:d3:85:9d:f0:bd:5c:51:59:27:d6:1b:92:
aa:94:ee:4a:5f:fc:83:b1:7f:d3:2b:f5:4e:f0:12:3b:c5:42:
82:f1:67:26:64:b1:22:f2:bf:18:a1:3c:47:d2:5d:d9:2e:95:
08:22:1f:46:65:98:8b:22:3b:72:1a:76:2a:38:26:43:93:25:
8f:f3:ae:95:98:9d:ee:2e:f8:50:49:9d:2b:00:40:65:4e:fd:
32:91:7d:c7:53:77:93:27:67:d4:1d:57:aa:07:8d:d6:66:5a:
f3:9b:2e:38:12:56:ba:9c:29:8d:1d:a5:87:13:87:d2:de:67:
44:7a:f2:95:ee:66:16:71:e5:ea:b7:a8:ee:bd:f5:4f:bb:12:
bf:fb:29:66:2b:57:f7:1a:d6:83:70:5b:a7:ed:e4:fa:5a:b0:
d6:ee:35:ac:75:f2:da:af:4f:07:1b:e6:00:c1:73:00:47:85:
fa:48:6c:59:ad:ef:e5:6b:73:87:72:ba:38:de:0d:3a:b4:e8:
c4:a4:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:52 2025 by rpki-client