Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: xWbCdf0DjxmHy/tY4WgRKZteo9uEtAmLOGt+AOcs4Wg=
Subject key identifier: 9B:3A:57:19:15:AA:E0:AD:F3:77:A5:B2:67:FA:1E:06:89:1C:F6:AE
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 0198D4E029539AA4542237AAAA9825685ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 04B2
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: GbwwwnQL9tBT9KMIOviwGU72WVcfzMNL3fOHrDaRGDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:29:53:9a:a4:54:22:37:aa:aa:98:25:68:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=9b3a571915aae0adf377a5b267fa1e06891cf6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:f3:3f:c0:9f:02:7a:ab:ef:b3:03:61:93:
db:60:1a:88:67:6d:9f:da:88:c0:44:2d:1a:34:30:
43:d7:ad:45:31:7c:e4:c5:32:60:5d:40:50:ce:c8:
e7:fe:ee:fa:d5:c0:79:20:b5:1c:b7:c9:33:34:97:
e3:c4:a5:3b:9c:4e:89:43:4f:60:44:ea:d0:d0:9d:
a0:ba:71:67:e3:1c:22:14:df:7a:66:07:6d:c5:a7:
7f:c1:29:18:11:c1:cc:93:bb:06:84:d5:21:e9:25:
e0:14:59:78:a7:8e:17:03:5c:1e:70:7c:9f:72:4b:
13:fb:66:04:28:e6:62:b9:7f:1e:f1:89:82:1d:96:
9e:27:dd:d4:69:2c:d4:0b:1e:d6:cc:73:35:29:c6:
f4:cd:16:e1:f6:f8:10:29:0b:e3:ab:14:03:7d:5c:
cf:c4:af:76:c8:6a:88:fa:9e:37:47:99:51:5c:19:
66:fa:4a:39:f1:80:2c:5f:de:84:e7:f8:92:95:7e:
b1:ea:50:eb:ea:73:fc:9c:7b:a1:ea:89:08:57:a6:
87:73:22:2f:c9:af:69:b6:a8:d0:86:a2:4f:e2:4a:
dc:50:b1:e0:61:a1:8e:5a:1d:73:9b:84:4a:eb:ea:
12:1a:75:2e:92:9d:fa:9b:f2:a6:e3:5d:33:de:4e:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:57:19:15:AA:E0:AD:F3:77:A5:B2:67:FA:1E:06:89:1C:F6:AE
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:1b:58:d8:99:7f:1d:c4:e9:2b:a2:2a:a3:e7:4f:93:31:
d0:89:b9:f5:6f:d4:ea:6d:df:3f:17:92:ad:88:95:3d:76:9f:
bd:6d:1b:53:b2:fc:b2:08:26:79:ae:8b:95:5f:c7:0e:64:d0:
d3:27:71:28:e1:e0:17:bd:21:d5:7b:20:53:cb:10:76:d8:2d:
97:f5:f0:4e:cd:b0:17:c6:b4:6b:db:2d:f8:a5:e5:3f:3c:db:
67:9e:3e:d0:8c:be:e9:12:c9:49:c6:e3:9d:17:0c:c5:59:de:
6a:b1:93:1b:f3:d9:dc:db:b3:ac:9e:e4:54:d7:cb:0b:d7:fe:
fc:fc:b5:48:69:62:d1:b0:f0:bc:02:7f:0d:75:39:f7:e7:f2:
53:8f:da:52:49:24:56:88:5e:56:ee:55:b0:ba:40:96:09:e1:
f6:0a:71:dd:a0:2a:e7:fc:e7:06:98:3f:9d:ae:ba:13:63:ba:
99:90:87:3e:a2:fb:36:bb:78:c4:b8:16:45:7a:87:e4:d9:17:
1e:f5:76:f4:49:83:a4:70:8e:ea:76:1d:99:e5:44:13:ed:c3:
66:9f:f3:34:47:58:f4:14:db:67:21:f8:64:5b:dc:72:a3:d6:
22:74:a0:f1:40:ac:c5:00:9f:bd:77:d5:b4:4e:a2:43:24:25:
7e:6b:28:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ClTmqRUIjeqqpglaFrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzRiY2RkNTMxMmY4YTdjMzNkZTRiN2Q3NWMxNWI0Y2Ji
YzFkZGEwHhcNMjUwODIzMDMwMTU3WhcNMjUwODI0MDMwMTU3WjAzMTEwLwYDVQQD
Eyg5YjNhNTcxOTE1YWFlMGFkZjM3N2E1YjI2N2ZhMWUwNjg5MWNmNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomDzP8CfAnqr77MDYZPbYBqIZ22f
2ojARC0aNDBD161FMXzkxTJgXUBQzsjn/u761cB5ILUct8kzNJfjxKU7nE6JQ09g
ROrQ0J2gunFn4xwiFN96Zgdtxad/wSkYEcHMk7sGhNUh6SXgFFl4p44XA1wecHyf
cksT+2YEKOZiuX8e8YmCHZaeJ93UaSzUCx7WzHM1Kcb0zRbh9vgQKQvjqxQDfVzP
xK92yGqI+p43R5lRXBlm+ko58YAsX96E5/iSlX6x6lDr6nP8nHuh6okIV6aHcyIv
ya9ptqjQhqJP4krcULHgYaGOWh1zm4RK6+oSGnUukp36m/Km410z3k6cfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs6VxkVquCt83elsmf6HgaJHPauMB8GA1UdIwQY
MBaAFJfEvN1TEvinwz3kt9dcFbTLvB3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUt
ZTkzYmRiOGQ5Yzg1LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NDc3NWYtMzdhNi00YTg2LTlmZTUtZTkzYmRiOGQ5Yzg1
LzEvbDhTODNWTVMtS2ZEUGVTMzExd1Z0TXU4SGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxcbWNiZ
fx3E6SuiKqPnT5Mx0Im59W/U6m3fPxeSrYiVPXafvW0bU7L8sggmea6LlV/HDmTQ
0ydxKOHgF70h1XsgU8sQdtgtl/XwTs2wF8a0a9st+KXlPzzbZ54+0Iy+6RLJScbj
nRcMxVnearGTG/PZ3NuzrJ7kVNfLC9f+/Py1SGli0bDwvAJ/DXU59+fyU4/aUkkk
VoheVu5VsLpAlgnh9gpx3aAq5/znBpg/na66E2O6mZCHPqL7Nrt4xLgWRXqH5NkX
HvV29EmDpHCO6nYdmeVEE+3DZp/zNEdY9BTbZyH4ZFvccqPWInSg8UCsxQCfvXfV
tE6iQyQlfmso5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:07 2025 by rpki-client