Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: 8ZxAPU5sHhRmshyHz6MNjIcqRQIwB7+TQCM8wYGy+/o=
Subject key identifier: 99:F0:0D:CF:CA:CF:28:C2:2A:7D:FC:EA:C1:78:AD:7B:A8:D8:53:F1
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 0196BFDCE9B5AA014B3F8B64529D9DD19AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 039E
Signing time: Sun 11 May 2025 15:00:47 +0000
Manifest this update: Sun 11 May 2025 15:00:47 +0000
Manifest next update: Mon 12 May 2025 15:00:47 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: 7w9+tLbBqbmKwLEIo88tD4P3pErtAeXd9xo1Trl2YZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:e9:b5:aa:01:4b:3f:8b:64:52:9d:9d:d1:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: May 11 15:00:47 2025 GMT
Not After : May 12 15:00:47 2025 GMT
Subject: CN=99f00dcfcacf28c22a7dfceac178ad7ba8d853f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:5d:c8:0d:ef:41:01:f0:e6:24:bd:07:62:
51:03:c6:30:1d:2d:6b:cc:a0:13:43:49:ae:23:4b:
e8:66:fa:58:c5:d3:d4:5d:99:ea:f3:69:0c:5e:b1:
9f:28:d9:10:e8:ea:bb:9c:f4:51:fd:59:19:4b:16:
79:e8:d2:37:cd:75:90:1f:70:ae:6e:a4:bb:66:1f:
5d:9c:0b:3c:51:2f:3d:1c:45:41:62:38:e0:92:7a:
3d:84:72:95:3a:30:d5:6f:02:79:7a:c9:4d:7d:18:
f2:24:dc:04:ea:89:1c:a6:a8:ab:a9:0f:2c:80:33:
14:a8:be:a6:0d:2b:ca:87:7f:6d:8e:04:f4:9e:23:
0f:b0:40:fe:b1:7b:40:3f:69:d5:e1:61:04:71:98:
a1:d3:74:90:5c:4b:f2:1a:fc:81:5e:0b:3d:43:21:
4d:a5:d4:12:33:60:6c:01:0b:78:34:73:31:cc:76:
b0:fe:9f:5e:e9:c5:92:d2:a8:24:89:3c:1e:b7:34:
ae:8f:4a:5c:be:30:44:7e:e2:b5:be:3a:55:0b:2d:
2b:e7:d8:20:8c:82:c1:3a:57:18:28:64:fc:2f:57:
e9:d1:97:66:1a:7c:f9:49:ae:d6:8a:e8:d4:82:c8:
53:07:2b:7f:36:0b:08:de:e8:49:42:30:ab:81:8e:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:0D:CF:CA:CF:28:C2:2A:7D:FC:EA:C1:78:AD:7B:A8:D8:53:F1
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a1:eb:4d:59:97:11:95:b9:d0:a2:b6:e9:85:89:76:24:dd:
19:f4:05:43:12:9f:0c:73:4f:d2:9a:61:80:a8:f4:70:37:a4:
3b:2d:84:b6:5f:bc:7b:8f:53:a4:ad:c2:a8:1c:77:0f:e3:c1:
dd:e6:e7:b8:69:00:c5:83:f5:07:1e:cd:a7:c6:cd:4c:bf:91:
43:c4:9e:00:20:43:48:66:84:76:fa:9d:65:5b:7a:1c:6c:b3:
29:71:7e:a9:3c:a7:ff:a2:42:e0:a4:b9:c3:a9:1d:68:a4:f6:
36:b4:3f:bb:d7:2c:61:6b:45:ca:60:2b:16:fd:f7:da:16:e8:
53:da:a8:77:0c:9d:5f:ba:4e:c5:65:72:02:18:13:e2:f8:01:
fe:76:4d:83:65:b8:c5:03:3b:5d:54:e3:a3:e1:68:68:41:2f:
a7:47:cc:f8:0c:55:37:a1:ec:d4:ab:ed:13:4b:4f:f1:65:21:
86:6e:89:ff:97:8a:b7:d4:4b:3d:ce:80:3f:7d:52:6a:26:82:
7a:e7:f3:bf:3f:3f:f6:75:0f:c4:c6:d5:18:ca:07:84:66:80:
bd:a0:aa:f2:cc:2d:ca:66:ee:7a:3a:ff:fd:a1:63:ac:6d:fa:
01:10:b2:4d:ef:71:91:b0:8e:46:9c:ff:ad:4a:64:83:6b:46:
dc:8c:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:10:35 2025 by rpki-client