Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: Mv7dZYFnTSZH11eWbWYG6TqloxN7bBBOlV2psM5rNI0=
Subject key identifier: A5:CA:98:CC:D8:F2:78:05:B4:B1:D2:BA:E6:CC:B2:3E:77:16:12:CF
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019A722653399681EA5E492CA585B8C32E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0588
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: yQ4WZBgtH7FrbSGjQr7jCcL3591J1bmWTwI5x26RIYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:53:39:96:81:ea:5e:49:2c:a5:85:b8:c3:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=a5ca98ccd8f27805b4b1d2bae6ccb23e771612cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:69:a1:5a:d3:80:bd:0a:38:61:e1:6d:7d:
fb:a6:5b:56:2e:fd:64:8c:0c:1f:df:be:66:09:b8:
1d:9b:da:16:df:61:d0:bd:e3:df:79:9c:06:7e:be:
9a:61:60:1e:e7:c7:f5:89:a5:b9:a9:a2:ff:d3:da:
9e:45:1e:10:22:18:f4:8b:f9:e8:16:f2:60:e2:f8:
92:a2:60:59:76:65:b6:bd:17:6e:f6:e1:c8:22:44:
8c:69:d9:49:f2:cc:8f:f8:bc:3a:76:01:4d:7f:6a:
06:29:b1:81:5d:fd:09:62:1a:60:e1:1c:89:aa:c3:
45:7d:db:4b:2d:ee:d8:69:37:b2:63:49:ed:82:e4:
36:4d:e3:c6:9e:a8:fa:75:58:e5:30:7b:39:1c:9f:
8c:53:33:13:da:10:22:41:95:54:a1:3e:01:f6:f1:
e9:57:ca:61:0f:2a:ca:db:b1:22:63:1d:32:73:61:
39:c3:12:ac:db:f5:f1:b5:ba:25:d7:18:40:d1:04:
2a:de:f7:68:68:c4:b3:a6:a2:4c:c7:91:52:12:aa:
26:04:0a:68:8b:99:f7:c2:b4:06:5e:e2:9c:57:f1:
f5:57:89:a9:81:8c:8e:09:c0:00:3d:2c:98:73:e1:
1a:ce:95:59:9d:f1:09:50:ac:0e:b2:ce:bc:13:28:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:98:CC:D8:F2:78:05:B4:B1:D2:BA:E6:CC:B2:3E:77:16:12:CF
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ab:af:cd:df:06:17:1e:c3:ef:b1:6d:99:78:d1:c8:aa:5d:
40:4d:1d:43:c3:d2:cc:bb:6f:71:4f:97:f8:18:e5:db:f8:4f:
3b:90:2c:2a:cc:2b:96:8c:86:ef:a3:ca:a9:d8:42:1d:74:39:
a7:0f:33:fc:bc:4d:eb:72:d2:7e:7a:ae:ec:29:ba:26:dc:46:
33:26:a5:e0:ff:fe:61:c9:15:16:51:a0:ed:e2:d8:ea:80:27:
e5:21:d0:24:ad:3f:05:05:44:94:1e:de:06:30:3a:4e:1c:38:
c5:93:9d:33:1e:10:25:4b:8f:05:3c:14:74:d7:6e:26:de:c2:
51:cd:8f:39:fc:9f:40:a0:ad:c9:1b:0b:e7:bd:64:91:a0:a2:
c3:64:4e:50:f0:e8:5b:45:8a:8b:02:4a:8b:ca:86:5d:55:5f:
3b:51:91:ef:08:34:6f:8b:e9:65:18:d6:0d:5f:c0:b0:7a:c9:
aa:c7:18:3c:67:09:9b:a9:16:60:ea:6c:72:41:dc:ff:ba:dc:
fa:aa:9f:ef:d1:66:a9:2d:94:e8:ca:76:9b:c8:79:62:41:73:
2c:22:db:74:c5:a8:86:e1:2e:2d:5d:06:ca:05:cb:c8:7f:42:
e3:a4:32:99:23:3b:22:41:ce:87:66:6e:4b:85:3c:ce:eb:e0:
00:43:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:18 2025 by rpki-client