Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: ddcUmv6uidqUXT3R/qQhJ3iHHDVysrN8vzQwZYyQ4Vk=
Subject key identifier: 1E:78:A5:77:D7:61:4F:2E:38:ED:F8:B3:A9:04:51:76:47:3A:B4:96
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01976DAB797A1092C6B52C06B10EB2F6E40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 03F8
Signing time: Sat 14 Jun 2025 09:00:43 +0000
Manifest this update: Sat 14 Jun 2025 09:00:43 +0000
Manifest next update: Sun 15 Jun 2025 09:00:43 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: g5VktB16n7k+dvja+geVq8ooCtQvrYmJLjhnO6YBOhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:79:7a:10:92:c6:b5:2c:06:b1:0e:b2:f6:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jun 14 09:00:43 2025 GMT
Not After : Jun 15 09:00:43 2025 GMT
Subject: CN=1e78a577d7614f2e38edf8b3a9045176473ab496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:ec:f5:fe:18:7c:87:8c:1c:c1:e6:d1:7c:
61:df:b8:ef:a4:f6:36:c6:a2:e9:36:d6:cb:e6:3b:
6d:fd:5b:02:7c:4c:81:ec:dd:c2:f9:0b:da:fe:85:
0c:58:ab:24:f4:e3:06:a6:a5:c5:26:2f:c4:6a:6c:
b0:17:5d:1b:90:99:c9:16:95:32:2e:8d:e0:3d:51:
3a:fc:46:4c:bd:f8:6a:d6:66:e3:4a:d4:f5:90:98:
b1:bc:42:98:3e:af:94:fc:e6:7f:93:b5:cc:5b:73:
6b:21:ba:7f:19:81:83:24:0b:68:73:71:d6:3c:9b:
39:2b:33:7f:8b:93:b1:7c:ad:d7:05:37:7f:0a:09:
fa:c3:f8:bc:58:b6:b6:11:3d:c2:b3:14:e5:16:8c:
66:39:3a:be:79:4f:dd:ea:1b:61:c3:a6:44:c9:13:
ef:09:ad:63:3a:6b:0a:70:3e:2c:af:98:01:2c:ad:
5c:48:b5:3b:bd:8a:03:63:09:ee:32:75:d6:d9:a5:
c0:15:47:dc:44:9c:4c:04:a2:38:aa:bf:da:21:a3:
29:07:d9:4f:cc:f4:b7:f4:58:22:e1:36:d3:d8:47:
3b:db:9f:bb:25:de:a0:ea:e8:5f:de:1d:ca:02:fd:
fc:f4:ee:1f:6f:0b:0f:6f:b1:1b:6e:f6:98:53:8d:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:A5:77:D7:61:4F:2E:38:ED:F8:B3:A9:04:51:76:47:3A:B4:96
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:d3:07:fd:19:0a:6c:c8:cc:20:01:7c:fc:0a:f9:85:84:
20:28:74:56:2b:ff:e7:13:f5:b8:c4:12:4b:b1:12:63:21:d8:
45:1e:03:bd:e0:2b:31:fa:3e:bd:95:ca:11:9a:b5:9a:41:22:
09:cc:be:09:f0:25:b7:28:20:e6:7a:99:45:ec:95:13:56:d7:
61:c7:02:1a:89:a4:70:fa:6b:b9:b1:ca:aa:77:5e:13:21:5e:
dd:22:ed:e5:61:ec:0b:c4:4e:1a:74:80:29:63:18:b7:43:66:
52:2e:47:e2:f6:f5:66:bf:26:8d:1c:89:99:66:18:bd:a8:f1:
84:f2:a2:f7:f8:6b:c0:38:48:bd:91:94:c4:ce:f9:5d:2f:e4:
50:1c:fa:0f:1a:f8:7c:42:25:94:02:63:4b:6d:15:5f:13:e5:
e4:dd:b3:cc:0e:4d:df:41:e5:5c:d2:83:a0:22:fa:0b:2c:f4:
57:6c:39:00:64:49:66:df:d1:cb:9c:c2:54:7c:b7:e2:3a:fd:
2a:81:47:1b:a0:dc:54:04:aa:6e:05:5b:08:ad:16:ec:38:a8:
60:07:50:27:83:fa:57:4b:18:08:99:f4:4f:d4:68:d4:ac:5e:
6b:cb:5b:cf:f5:db:30:c9:91:bc:3c:db:04:82:68:02:6b:9e:
49:62:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:00:15 2025 by rpki-client