Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: XQx2AgtbNSI9xG1RohT0Yg/YYf711xBZMb/EeElKUUo=
Subject key identifier: 58:C6:FB:F6:2C:37:9F:F9:18:BE:DD:FF:75:00:B3:56:66:0F:8B:75
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01991C535181DB6464FCB1D59E7F05156BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 04D7
Signing time: Sat 06 Sep 2025 00:00:46 +0000
Manifest this update: Sat 06 Sep 2025 00:00:46 +0000
Manifest next update: Sun 07 Sep 2025 00:00:46 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: QD/7gjNpx4KL4q/VXhMx5Hfr6ZJgxWRYNfvGTOCubiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:53:51:81:db:64:64:fc:b1:d5:9e:7f:05:15:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Sep 6 00:00:46 2025 GMT
Not After : Sep 7 00:00:46 2025 GMT
Subject: CN=58c6fbf62c379ff918beddff7500b356660f8b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:2f:5f:d6:9c:d1:5a:25:5e:ef:1c:49:99:
4f:fc:64:2e:c5:26:a3:e1:8d:af:69:e3:59:e4:bc:
ca:a0:96:24:63:4a:9e:5b:ec:24:70:a8:0e:9b:20:
72:e9:93:4d:62:2c:e8:76:d1:11:c9:10:92:97:8e:
aa:67:30:d6:e2:be:02:63:1a:a7:ea:81:67:2d:c1:
6b:a8:94:fe:63:31:e8:96:b2:40:59:75:36:54:48:
33:b2:6d:28:03:b4:71:d9:a4:c7:95:f8:cc:c3:9f:
97:09:f1:65:d0:76:95:c3:ae:80:c2:6d:09:43:12:
ce:54:90:a2:7d:ba:9b:1c:65:0d:e8:ec:b5:a1:1a:
84:ab:4f:85:22:14:49:96:7e:0e:c9:ae:4b:6f:ed:
6d:08:57:1e:2a:27:fd:d6:d4:6e:c4:5d:7d:80:73:
80:14:0e:28:d1:26:c5:5f:21:4b:ac:28:85:3e:30:
43:cc:83:25:b4:f1:46:f9:b4:3a:46:9b:56:93:be:
50:7d:ae:1e:ea:01:28:ee:96:73:0c:b0:27:b9:68:
c2:3f:ec:c1:07:0a:42:0d:ae:df:e2:32:53:ca:e4:
b3:4b:37:69:69:d8:2b:61:35:4f:c3:8c:8e:1a:65:
f2:a6:47:72:67:96:fc:83:8b:21:b9:ae:8b:fa:f0:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C6:FB:F6:2C:37:9F:F9:18:BE:DD:FF:75:00:B3:56:66:0F:8B:75
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:00:03:68:5e:47:89:15:ec:2e:1a:22:02:e8:e9:1e:b4:
1a:74:1e:11:fb:76:77:75:e8:2d:1f:89:f8:5e:9d:12:b4:d4:
75:6c:34:27:51:73:85:37:78:87:75:b7:5a:e5:5d:e1:21:91:
69:1c:ea:40:d5:85:ea:4c:42:82:2a:2d:cb:89:ce:f0:bc:20:
06:1d:d1:75:8f:98:05:e3:8d:88:02:e9:41:1d:7d:ef:5b:24:
17:89:a7:83:8d:ca:2a:1d:26:3a:84:67:0f:53:ed:af:03:09:
8c:85:91:42:c8:01:69:25:27:f9:0d:c7:db:8c:4a:91:92:ae:
5a:d2:f9:ca:8e:08:5e:84:f4:ae:d7:c4:36:12:47:f7:4e:07:
1f:6c:40:6c:35:a3:82:47:41:a4:64:a7:80:46:a9:88:70:bf:
dc:31:77:c9:4e:8c:bd:8e:0d:d1:69:09:d9:f4:c2:09:5b:6a:
d5:3f:f9:d8:bb:08:68:bf:4c:28:a9:63:51:2b:49:fa:74:1e:
df:79:6c:82:a3:f0:a4:7a:9e:43:d3:02:a4:56:35:59:61:fb:
1e:29:be:49:0e:ef:ee:1a:06:bd:5d:ab:91:ba:40:6d:84:0a:
0f:de:62:27:6b:80:6a:bc:3b:81:1b:03:2a:6a:c3:db:d6:85:
db:be:be:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkcU1GB22Rk/LHVnn8FFWvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji
YzFkZGEwHhcNMjUwOTA2MDAwMDQ2WhcNMjUwOTA3MDAwMDQ2WjAzMTEwLwYDVQQD
Eyg1OGM2ZmJmNjJjMzc5ZmY5MThiZWRkZmY3NTAwYjM1NjY2MGY4Yjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/kvX9ac0VolXu8cSZlP/GQuxSaj
4Y2vaeNZ5LzKoJYkY0qeW+wkcKgOmyBy6ZNNYizodtERyRCSl46qZzDW4r4CYxqn
6oFnLcFrqJT+YzHolrJAWXU2VEgzsm0oA7Rx2aTHlfjMw5+XCfFl0HaVw66Awm0J
QxLOVJCifbqbHGUN6Oy1oRqEq0+FIhRJln4Oya5Lb+1tCFceKif91tRuxF19gHOA
FA4o0SbFXyFLrCiFPjBDzIMltPFG+bQ6RptWk75Qfa4e6gEo7pZzDLAnuWjCP+zB
BwpCDa7f4jJTyuSzSzdpadgrYTVPw4yOGmXypkdyZ5b8g4shua6L+vDpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjG+/YsN5/5GL7d/3UAs1ZmD4t1MB8GA1UdIwQY
MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt
ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1
LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAgAA2he
R4kV7C4aIgLo6R60GnQeEft2d3XoLR+J+F6dErTUdWw0J1FzhTd4h3W3WuVd4SGR
aRzqQNWF6kxCgioty4nO8LwgBh3RdY+YBeONiALpQR1971skF4mng43KKh0mOoRn
D1PtrwMJjIWRQsgBaSUn+Q3H24xKkZKuWtL5yo4IXoT0rtfENhJH904HH2xAbDWj
gkdBpGSngEapiHC/3DF3yU6MvY4N0WkJ2fTCCVtq1T/52LsIaL9MKKljUStJ+nQe
33lsgqPwpHqeQ9MCpFY1WWH7Him+SQ7v7hoGvV2rkbpAbYQKD95iJ2uAarw7gRsD
KmrD29aF276+dQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:06:12 2025 by rpki-client