Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: eLStv+XALteS4pSLJQ5GN4dsmBp4gWCxjPmISlrVXn0=
Subject key identifier: E5:66:B2:DA:70:59:34:40:41:93:14:C8:DC:63:5B:2F:72:DA:1E:69
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 0199221F0534D8D99F3B9CD6C87A953505A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:01:22 +0000
Manifest this update: Sun 07 Sep 2025 03:01:22 +0000
Manifest next update: Mon 08 Sep 2025 03:01:22 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: qPt9jDcid4COMP9fkJnM8m9qhy/fCF12EH8pJ4Oms/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:05:34:d8:d9:9f:3b:9c:d6:c8:7a:95:35:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Sep 7 03:01:22 2025 GMT
Not After : Sep 8 03:01:22 2025 GMT
Subject: CN=e566b2da70593440419314c8dc635b2f72da1e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:c5:40:ad:bb:74:83:4d:8b:f3:fa:2b:1b:
7e:6a:99:e5:7c:a1:3b:dc:f7:bc:22:02:80:36:e5:
6a:c8:a3:1e:e9:ad:97:69:66:5a:80:12:3e:34:2d:
cd:91:e4:fe:cb:3e:cd:bc:a4:4d:be:64:57:28:10:
4b:d8:d5:52:94:98:63:da:be:1f:64:98:62:61:cc:
d1:ae:f0:8b:ba:ea:5c:77:cb:5e:bd:cd:8c:5d:19:
7e:91:1e:f0:80:25:4a:a8:52:3d:b2:be:44:20:fc:
c3:98:16:2c:61:aa:5c:c0:5f:77:30:f7:e7:7b:e5:
17:4b:7c:70:ff:ea:96:ed:5d:23:60:29:93:81:c7:
2d:8b:33:e8:6b:38:1d:ef:16:bd:97:d4:93:3c:8c:
15:78:82:c6:86:6e:1f:0e:60:9a:3b:22:70:ef:06:
94:df:94:91:90:d7:7f:08:b8:51:32:04:d1:e6:89:
64:82:04:b5:7f:1d:b4:67:ff:39:38:a4:59:03:38:
1f:1e:9d:e5:60:6e:f8:6e:e0:20:32:d5:80:d4:90:
40:05:b4:a2:42:11:4e:ea:ec:9e:91:30:e8:2e:87:
72:4f:d8:c0:ea:0a:43:38:20:63:d1:1f:e9:bf:75:
62:48:dc:35:b8:fd:84:69:9e:6b:bb:89:20:b5:39:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:66:B2:DA:70:59:34:40:41:93:14:C8:DC:63:5B:2F:72:DA:1E:69
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:05:0a:30:d6:2c:42:bd:b5:0b:54:53:bc:97:3b:36:99:a4:
11:46:2b:9c:d2:46:05:0f:06:d5:0f:b9:76:54:f6:4c:49:fd:
8d:8d:d5:d2:e9:95:b4:3a:91:a7:ad:02:e8:e7:1b:38:25:e5:
dc:6a:ef:c1:48:b5:92:5f:1c:67:58:07:f9:48:fb:af:92:7f:
82:0e:69:59:c6:7c:38:eb:d9:bf:7c:94:01:f6:16:c6:17:cc:
61:e5:6e:c3:0f:e2:f9:3d:77:37:f4:bf:36:f0:e6:1b:d0:2b:
98:6c:f7:c5:8f:5b:66:cf:3d:5a:db:d2:58:8c:d8:b7:a8:84:
f1:d5:cc:6a:54:12:c9:fc:28:16:95:10:a1:4e:8e:69:95:9c:
1f:b6:e3:8b:f2:0f:33:74:e0:9e:62:5b:ac:82:81:95:72:06:
63:8c:5c:c6:34:f5:05:04:c6:29:a0:3f:59:c5:d9:97:de:9b:
2c:c3:0a:1f:07:a9:5a:8b:b0:ed:18:31:98:10:7e:6a:a4:04:
02:ca:e8:a3:bd:f2:ff:8f:13:82:ca:d0:cd:4f:7b:d5:ec:fc:
86:8a:61:b7:cf:ca:2e:88:37:7e:5b:36:7c:ba:66:f7:41:5e:
e2:fd:a9:58:a8:4f:4e:84:a4:7c:8d:df:39:22:53:0c:e7:e3:
d9:de:73:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHwU02NmfO5zWyHqVNQWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjUwOTA3MDMwMTIyWhcNMjUwOTA4MDMwMTIyWjAzMTEwLwYDVQQD
EyhlNTY2YjJkYTcwNTkzNDQwNDE5MzE0YzhkYzYzNWIyZjcyZGExZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4HFQK27dINNi/P6Kxt+apnlfKE7
3Pe8IgKANuVqyKMe6a2XaWZagBI+NC3NkeT+yz7NvKRNvmRXKBBL2NVSlJhj2r4f
ZJhiYczRrvCLuupcd8tevc2MXRl+kR7wgCVKqFI9sr5EIPzDmBYsYapcwF93MPfn
e+UXS3xw/+qW7V0jYCmTgcctizPoazgd7xa9l9STPIwVeILGhm4fDmCaOyJw7waU
35SRkNd/CLhRMgTR5olkggS1fx20Z/85OKRZAzgfHp3lYG74buAgMtWA1JBABbSi
QhFO6uyekTDoLodyT9jA6gpDOCBj0R/pv3ViSNw1uP2EaZ5ru4kgtTlL+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVmstpwWTRAQZMUyNxjWy9y2h5pMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQUKMNYs
Qr21C1RTvJc7NpmkEUYrnNJGBQ8G1Q+5dlT2TEn9jY3V0umVtDqRp60C6OcbOCXl
3GrvwUi1kl8cZ1gH+Uj7r5J/gg5pWcZ8OOvZv3yUAfYWxhfMYeVuww/i+T13N/S/
NvDmG9ArmGz3xY9bZs89WtvSWIzYt6iE8dXMalQSyfwoFpUQoU6OaZWcH7bji/IP
M3TgnmJbrIKBlXIGY4xcxjT1BQTGKaA/WcXZl96bLMMKHwepWouw7RgxmBB+aqQE
Asroo73y/48TgsrQzU971ez8hopht8/KLog3fls2fLpm90Fe4v2pWKhPToSkfI3f
OSJTDOfj2d5z/A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:11 2025 by rpki-client