Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: lowW22Qh12/7BQBpbEgY4lInHUFLup3B/uNWBI7ZV/Q=
Subject key identifier: 39:09:27:93:EE:27:D6:D7:6F:63:49:53:94:82:59:3E:56:49:16:BB
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 0197B70EAACE8DBAF637D42D33E5F0BAD79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 041E
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: Pf8zZqghq+IV6AsBQseC2kG8x64EDixvsGKxPs8HCQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:aa:ce:8d:ba:f6:37:d4:2d:33:e5:f0:ba:d7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=39092793ee27d6d76f6349539482593e564916bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:9b:91:56:86:14:ce:f5:95:30:58:74:e7:
22:5e:78:be:e6:34:d3:2d:a3:79:cc:2c:0b:93:9c:
7e:06:84:ed:a9:ea:1b:16:93:a2:31:6f:8f:7a:98:
5c:11:61:f7:81:c9:d9:2d:9a:7f:0b:2b:91:c1:70:
f5:6c:59:2b:b0:54:a8:88:23:55:a5:55:8e:af:9a:
e8:6d:9d:1c:eb:77:74:f0:e7:1d:4d:b7:fb:76:e8:
37:7a:e8:2c:90:f2:63:78:20:eb:50:b7:a4:5b:c6:
43:16:58:80:3b:38:af:d2:fa:1c:30:b1:b6:79:b5:
04:ba:1b:35:78:a3:64:64:41:d4:24:35:4d:bb:17:
d5:81:45:e1:1b:93:71:1f:38:df:59:0d:3f:0a:d5:
d0:e7:82:72:53:1e:e4:ef:1e:cc:4b:6c:56:3f:a5:
38:9c:83:23:6d:c7:b4:e5:fa:6f:97:12:b7:f3:4d:
b8:56:45:1e:9a:72:16:d0:35:f0:b4:48:f7:9f:db:
ab:3a:d0:b9:1b:ff:4b:b1:50:5d:97:8b:43:bf:96:
aa:dd:20:87:e8:55:27:40:41:3f:4a:ff:0a:8f:04:
8c:5c:2f:ea:f1:96:29:0c:8e:67:7d:f6:4c:c1:f2:
82:d5:18:50:1d:30:1e:a4:a6:d8:d4:ef:ab:5c:4f:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:27:93:EE:27:D6:D7:6F:63:49:53:94:82:59:3E:56:49:16:BB
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:99:84:e3:7b:d6:0a:fe:ef:eb:92:c7:80:94:d6:38:bc:dc:
7a:d8:e0:64:4b:81:96:ad:94:18:46:55:f1:35:1b:aa:6c:0c:
63:e0:1f:35:5f:25:af:67:b4:6b:57:8a:39:f8:84:62:b1:fb:
f6:59:f7:31:57:bf:18:0f:2e:95:8a:6e:08:a2:bb:44:77:a0:
c7:24:4b:0a:68:e4:e1:71:19:c5:77:15:dc:55:fd:12:91:d5:
bc:fe:0b:c7:42:31:b3:13:fd:13:c0:a1:5c:1f:24:c1:e8:a6:
90:64:ac:a7:21:3f:e9:25:23:90:49:69:80:5b:ab:55:e4:a0:
fa:64:22:08:4a:51:d2:e6:c9:b9:bc:54:4d:f7:11:f6:3c:fe:
2e:13:fd:df:72:5f:21:fb:e5:ef:7c:2e:14:37:dc:86:a5:f5:
c9:dd:7f:a2:b6:3d:cc:f8:1d:ef:c9:3c:7c:89:2b:42:33:28:
31:bb:61:13:9b:5d:23:79:cc:6b:82:ee:cb:68:61:80:76:ad:
e9:4d:ca:47:30:0b:67:37:da:6f:68:f8:1f:47:95:c1:41:40:
e3:76:4b:75:3e:c0:4c:69:9e:94:a6:73:b5:8e:43:ea:40:ed:
ab:23:2d:10:97:83:f4:2b:44:7b:ec:60:7d:c9:99:12:36:88:
e3:a4:0a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:55 2025 by rpki-client