
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: oUQnQsTGIhd+Q46yS+cq7uqw3bZwOKPKXssijca3Skc=
Subject key identifier: CD:96:CF:80:53:28:CD:F7:08:41:07:B7:6C:13:A6:0B:2F:DF:13:E4
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 0199FC590921AE6CF15FADDBCB13267D054A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 054B
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: GSQiQ9qkX/L92cA3QsT1Y1bUU0kDqQm3gANVKGqeeW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:09:21:ae:6c:f1:5f:ad:db:cb:13:26:7d:05:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=cd96cf805328cdf7084107b76c13a60b2fdf13e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:7d:c4:03:28:4a:54:f4:a6:df:29:09:4d:
d3:fc:8b:e7:b4:8f:16:12:2e:10:ab:57:b4:9a:4d:
0b:0f:e3:14:61:34:b0:f3:81:53:d3:ed:dd:5a:43:
06:e5:fd:9a:87:e5:b4:e5:29:3f:40:11:30:f6:1b:
43:08:40:85:66:68:0c:93:01:62:8a:eb:81:75:99:
42:9f:fb:0c:0e:ae:01:68:84:d5:ca:61:c5:6d:bb:
7f:ca:a4:11:ea:ea:9c:46:ea:0b:74:b2:e6:ff:a3:
58:51:e6:6a:e1:18:f6:38:c4:7b:ae:a7:a2:c8:22:
4e:99:9d:05:5c:1a:6f:35:ca:c7:9f:9c:75:05:dd:
58:c1:10:b0:90:94:2f:89:33:22:6f:91:a0:c4:0a:
79:ef:d8:f9:9c:72:2e:a6:2c:15:5b:9e:93:be:e1:
e4:b6:63:01:4b:4e:88:f0:a0:1c:af:8d:89:67:b8:
d0:a5:5e:c0:bf:8b:83:5c:d1:bb:57:fe:60:7b:f4:
0b:de:01:7a:4a:44:e8:69:db:cd:e1:f8:b1:20:59:
db:ae:18:4d:a0:ac:dd:92:15:b4:3e:9c:9f:e4:99:
e2:ce:2a:ab:7a:a5:92:b6:31:e2:89:68:e2:64:b3:
42:90:63:d5:22:e8:2c:7e:39:9f:3f:86:1a:42:95:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:96:CF:80:53:28:CD:F7:08:41:07:B7:6C:13:A6:0B:2F:DF:13:E4
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8e:ce:24:f3:ff:38:7e:72:44:e8:41:6d:6d:e6:38:b7:42:
8e:09:59:e0:6e:63:2f:69:52:e9:f2:c1:87:a5:fe:f0:0d:de:
c1:7f:d2:7a:4b:a9:c1:85:0f:e7:43:59:39:c6:00:6c:db:1d:
6a:08:b5:62:10:4b:46:31:42:b5:32:48:63:ca:84:76:b4:b5:
42:60:aa:e2:20:e1:07:ed:8b:23:2b:42:f9:74:ae:bc:7b:87:
4a:8c:cd:85:6a:38:5c:24:e6:6a:fb:b9:bf:ba:3b:ca:6e:af:
1e:a5:ae:b3:be:49:a2:69:b9:43:a1:46:ea:f2:a5:78:04:73:
81:af:d2:c8:d2:d8:e6:76:f8:53:36:5b:9c:df:8b:6a:27:99:
8b:38:6e:b1:bf:85:d1:79:9e:73:14:97:db:97:2d:4a:59:34:
da:5a:cc:fa:0a:0b:73:fa:a0:0a:31:aa:f1:3f:75:e3:ab:64:
5d:4a:05:a1:4c:82:75:58:ed:50:f3:b9:2c:c0:49:6e:cc:52:
c7:02:57:cd:5d:ef:a1:39:18:a3:6e:ff:68:44:4e:3a:16:12:
db:b9:0b:f6:4b:10:ef:e3:09:c7:70:dc:b7:59:4b:db:e0:c5:
b8:86:81:81:ce:a3:4f:55:45:b3:54:0f:6c:ec:8d:f5:0b:2a:
0b:91:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:06 2025 by rpki-client