Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: 1JA8TJx0AQnYP1y026mgG/FK7mm3+3ypTMpHya6+UPw=
Subject key identifier: F4:4F:F0:6D:2D:80:65:F7:0D:1C:13:A5:30:30:49:24:59:BA:ED:D3
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 019748FA1861F473D1318252450512B1687F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 03E5
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: Yf7DIoGXIb9258Nd/8puEGYeccQ/b4yhbbNycnBrUEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:18:61:f4:73:d1:31:82:52:45:05:12:b1:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=f44ff06d2d8065f70d1c13a53030492459baedd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:7a:a1:5b:1e:f7:ca:56:8c:58:d1:78:e5:
56:7d:09:8a:fb:97:10:11:55:b7:eb:a8:a3:70:c5:
e0:00:f4:9c:72:dc:06:86:50:50:8e:d4:91:42:b4:
4d:7f:87:bf:9b:ea:fd:e2:75:8a:41:8a:21:e4:ff:
6c:3c:81:11:90:fe:ed:f4:79:64:9e:18:5c:71:8a:
5d:7c:cc:9a:a5:19:d5:17:97:de:3c:8b:59:64:2b:
e1:12:9b:88:d4:87:50:4b:bc:b4:05:8e:ac:a9:4e:
5a:70:9e:35:15:a2:47:66:b1:fb:2d:e8:ba:2d:4d:
47:d0:3a:ef:92:17:26:5e:61:d7:94:c9:cd:a6:67:
14:ac:02:74:49:f1:b1:19:8f:91:6b:cf:90:d0:8f:
4c:a3:44:90:4f:86:5e:08:b1:65:dc:12:db:59:41:
2d:e1:99:d9:7b:f8:8a:9f:d3:2b:dd:a4:46:53:9e:
81:11:c6:3f:38:9e:29:2f:a4:5d:10:74:2b:6a:53:
c9:f8:b5:36:0b:05:d9:a8:c7:83:cf:0d:3d:dc:8d:
b8:83:a3:1d:67:47:e8:27:65:1a:5d:69:0b:8f:fa:
c1:b0:cf:db:a7:30:1b:82:c4:2e:45:86:23:94:8f:
da:da:e8:fc:76:9c:f8:da:9c:e7:ad:0a:c4:7b:cf:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:F0:6D:2D:80:65:F7:0D:1C:13:A5:30:30:49:24:59:BA:ED:D3
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9b:d4:b6:21:f3:91:9c:ff:c5:0b:ca:91:73:ac:7c:88:57:
15:e8:33:9c:cc:ce:fa:dc:70:b9:ec:f9:46:10:86:a5:53:03:
2f:14:3a:c4:ff:82:43:1c:da:77:a6:3d:8b:d3:6b:69:d6:91:
98:5d:e6:92:5a:d5:20:5e:7d:c6:24:e4:54:34:87:8d:2d:13:
f2:96:42:29:85:13:8b:5e:c5:8a:b3:fd:f6:c3:00:e8:04:89:
1e:e1:a7:90:67:3e:08:3c:63:0f:e8:d2:93:ac:9c:b6:17:cc:
76:01:96:e8:45:d1:85:ee:76:d9:3d:dc:b6:a8:4e:cd:84:e4:
a1:aa:1e:cd:e2:df:87:f8:2e:35:97:97:db:b3:8d:b3:5c:f0:
af:89:72:fb:8f:af:c8:e1:32:cd:b2:78:77:c3:81:f6:74:31:
3d:e6:a4:e3:bf:e7:f7:fe:72:42:75:dc:6e:28:ce:d0:6f:8b:
f1:82:a2:48:15:11:75:2d:9b:6b:35:62:ed:30:50:c4:e7:28:
b5:34:13:e9:72:f9:17:bd:f7:8c:9a:f2:81:1c:f8:5f:4e:69:
fd:1c:2a:33:bc:63:72:cf:a3:8d:52:5d:02:00:e8:5c:20:7e:
38:d7:05:f8:94:84:9e:29:a8:f2:54:96:27:95:d2:88:dd:c5:
0f:04:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:48 2025 by rpki-client