Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: gLZF7qSBMEmpINY0dVQCKHvDxYph+rqqMuRp+DJl2Is=
Subject key identifier: 61:78:33:FF:AB:E0:5E:FF:8B:0D:CA:5E:12:69:B9:17:B6:20:30:7F
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 019A725C8F1EBE4FAE8EC095FC9C379E8F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: Lof9VwFj3g2kCyMs1QDW047S4NuSYd+5parJVW8GWCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8f:1e:be:4f:ae:8e:c0:95:fc:9c:37:9e:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=617833ffabe05eff8b0dca5e1269b917b620307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:4e:57:d2:e5:a3:58:d5:71:f5:a6:92:5f:
3f:f2:2c:f1:fc:9e:be:98:d8:93:65:d2:76:df:f2:
eb:44:31:97:4c:75:8f:86:09:4b:cc:96:c9:56:51:
b0:6c:2f:e7:58:30:3f:0b:48:d9:5e:13:fc:84:2e:
06:6b:7d:e2:65:c1:be:63:88:dd:a8:0c:7f:4b:31:
2a:06:e8:8c:89:a2:8c:b4:c4:12:3d:a4:e7:db:ba:
65:9a:b6:f4:36:c4:00:a5:05:6a:4e:1f:f3:ae:99:
91:2b:7d:3e:8e:34:3e:fb:be:25:1e:53:58:f8:06:
53:0d:8d:a8:4d:75:d4:6e:89:3b:bf:2f:4b:30:f4:
49:0b:9a:70:9b:5c:5c:d3:3a:08:60:03:f7:16:d3:
32:e8:11:ba:13:71:dc:fb:b4:6b:1e:8b:51:75:56:
9e:5a:df:e7:5f:a8:e4:d1:fb:b0:63:d2:8f:66:65:
5b:32:81:2d:2b:23:e4:85:56:15:9f:c4:97:cb:bf:
b5:73:05:43:b7:43:69:54:57:10:b1:64:f0:72:cf:
e8:a6:26:24:25:2d:66:c6:3a:0e:a7:c3:af:0f:c5:
aa:8e:de:25:b5:95:54:c7:ec:52:00:f1:bf:fc:56:
2c:d4:69:63:ba:84:50:a5:78:09:1e:88:76:b6:9f:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:78:33:FF:AB:E0:5E:FF:8B:0D:CA:5E:12:69:B9:17:B6:20:30:7F
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:49:f8:68:85:c1:41:f5:27:bb:94:53:ba:9f:a1:21:cc:71:
1a:fa:ee:7d:d0:e9:36:5f:64:b5:6a:73:66:a6:6e:7f:6f:51:
30:01:37:6c:48:14:4b:98:67:17:69:d2:24:3c:da:d4:0d:0c:
2e:ef:b8:a9:db:20:b7:5b:9c:c1:6f:e9:e1:8e:5f:3a:2f:d2:
61:7e:5e:3b:b5:a2:90:95:7c:8f:7f:93:a2:94:3b:8e:40:a7:
db:10:50:1e:5b:1b:3b:6d:20:be:62:a0:ce:f5:e3:2c:aa:57:
94:a5:9b:e5:a4:52:a6:52:cd:ee:a4:f5:1c:d7:00:3f:a4:11:
5b:ed:10:d9:be:4a:d8:ec:da:4f:91:5b:65:c3:c4:c0:8d:88:
55:60:65:65:7a:69:4a:88:64:b7:97:23:4a:b2:bb:2c:1a:07:
ec:9f:46:93:1b:a7:b1:63:6d:10:8e:bc:73:7d:8f:8c:72:4f:
e2:9b:f6:50:4e:0f:29:70:af:58:12:94:d8:17:ab:3d:ae:0d:
c1:b8:8c:da:92:66:b8:d5:e3:9a:e6:a9:8d:a9:c6:94:75:04:
2c:89:aa:5a:2d:c9:46:cf:db:f5:36:63:90:23:78:54:17:3d:
1a:b9:83:f8:23:48:66:53:c3:26:1f:ae:4f:b2:4c:b7:fd:26:
5b:e4:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:49 2025 by rpki-client