Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: LnhWAXk+XsZ1OjsWUKkfwS4o+wgHbouQPH7ewYFBFe8=
Subject key identifier: 94:5C:77:DB:25:84:05:F7:D1:CA:9D:B8:9F:51:C6:AE:8F:9F:CB:CB
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019A71EE9C0736E834B525752CFAD7520EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: gDwBvgyZa50vDU1mOdRorJFp13VXd+jVuQtbNj9J+LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9c:07:36:e8:34:b5:25:75:2c:fa:d7:52:0e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=945c77db258405f7d1ca9db89f51c6ae8f9fcbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:24:f8:93:64:99:ad:13:ac:3e:c5:d1:88:
9c:c3:1f:3c:da:27:e5:b8:a8:6f:db:27:ee:d6:13:
86:c4:ab:a4:80:89:83:92:4d:4f:35:63:b8:19:02:
de:8a:cd:27:e1:2f:6e:a1:a4:4e:4c:fb:6a:0c:34:
46:b2:f5:9b:5c:77:eb:80:60:c2:db:81:a5:34:a9:
ef:34:4a:4b:f0:92:86:37:bf:b6:58:04:5e:6e:4f:
36:8a:e0:54:74:47:2f:80:1a:ed:a7:f7:e8:8c:0e:
78:14:a6:3d:61:4e:4a:60:b7:a6:9b:59:4e:3a:c2:
ed:2e:2e:fe:8b:70:64:18:df:15:12:e2:3c:e9:b8:
42:3f:3b:4f:11:ec:d9:a1:b1:45:03:83:57:e6:8e:
9b:22:94:3b:57:a1:92:a3:3e:9c:d9:17:71:e9:18:
a2:77:51:18:12:f9:e8:a5:2b:ff:5e:f3:ea:be:d7:
19:73:49:88:a4:21:d0:de:a5:a0:76:7f:4d:e1:8a:
85:ff:ed:23:5d:54:9b:c9:97:c5:51:63:a1:3b:67:
a9:8a:60:55:1d:c4:3a:5a:d7:19:9a:36:65:b6:84:
66:86:b6:37:16:39:79:52:2c:7b:a8:5b:e1:f7:bb:
35:1c:41:4e:cf:58:da:9b:2c:23:dc:af:75:c3:9a:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:77:DB:25:84:05:F7:D1:CA:9D:B8:9F:51:C6:AE:8F:9F:CB:CB
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:72:f8:a8:82:6f:cf:56:49:66:f5:f7:ec:a1:ec:2d:65:c5:
c6:cf:38:59:07:73:b9:51:40:47:23:5c:e4:32:cb:81:77:0c:
6b:2e:46:65:c7:39:aa:b9:87:c6:f9:ce:8b:ac:86:45:0c:9f:
6f:ca:ec:1a:ac:c3:d6:9b:56:e9:bf:66:8a:da:c2:e9:d3:3c:
98:02:64:61:d1:7b:2e:a4:5b:35:c5:44:69:24:a7:51:48:67:
76:27:9c:76:5c:fe:c6:e0:12:e8:bc:f9:68:b1:9d:b0:c4:07:
29:19:cb:eb:12:15:3d:03:75:0d:22:d7:d8:19:af:01:48:f9:
71:dc:75:fe:1c:4b:39:94:b8:11:f5:d6:f5:b0:6a:83:1f:b1:
e3:0d:f9:e9:e9:bc:8f:18:c6:43:a5:c0:48:e5:d5:92:ec:93:
e1:48:ed:3a:d8:32:fa:ae:3f:76:b3:14:aa:7f:22:5f:3a:9a:
bb:37:46:b1:5b:5e:ef:28:03:a0:85:39:4a:d0:6c:dd:c0:07:
68:ab:1a:52:8f:01:93:a7:56:b9:cd:dc:8b:d4:91:98:f1:81:
95:84:39:61:14:b6:56:45:65:51:7b:a4:4f:32:48:bd:3b:03:
44:51:60:76:00:e5:fd:d8:5d:7c:56:d1:4b:d1:9e:3a:0a:78:
49:d6:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:37 2025 by rpki-client