Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: tPiT1QWLaT7IRc3R5rPtEgzcCOaKTmW7Xh4fRa8KisA=
Subject key identifier: 61:D6:3A:D6:09:E5:30:56:E1:03:29:51:6D:F3:A5:F3:B0:85:BA:95
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019921B0AF2A40EDBB34714102246124E3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:00:51 +0000
Manifest this update: Sun 07 Sep 2025 01:00:51 +0000
Manifest next update: Mon 08 Sep 2025 01:00:51 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: v6gP8B57Wh38McjkcV72BSCDB7KPAQXG4Pd4NkAJHSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:af:2a:40:ed:bb:34:71:41:02:24:61:24:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Sep 7 01:00:51 2025 GMT
Not After : Sep 8 01:00:51 2025 GMT
Subject: CN=61d63ad609e53056e10329516df3a5f3b085ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:be:28:d9:63:3f:de:b6:55:ff:09:50:12:
1a:9f:66:ea:e8:78:d1:15:a0:b2:bd:7a:52:7a:5c:
54:e4:94:cf:cb:1a:d0:5e:48:f2:39:86:d9:25:92:
8d:53:8b:e3:fe:39:66:58:95:78:38:73:e2:1e:cf:
a9:30:f2:7a:f7:ba:e2:f3:ed:4a:89:14:46:db:ce:
8a:40:85:11:30:42:e2:89:8d:5a:cf:17:11:70:2a:
99:26:2a:28:ee:52:ac:09:42:02:a1:3f:3f:e4:6e:
56:41:89:00:be:5a:1e:85:c5:9c:e9:47:4f:c3:96:
65:c8:5a:c2:94:e7:dd:32:f2:ec:5e:92:17:e0:83:
62:47:b4:61:9d:9f:06:d4:5c:ed:67:4f:7d:8d:ea:
c9:c3:5d:a6:69:44:db:48:d6:26:b6:b8:1e:81:de:
6d:68:eb:d7:59:b4:ac:0a:9c:1b:f7:7c:63:02:de:
f1:0c:37:da:ce:de:cf:42:c8:ed:de:83:a3:9c:15:
f1:77:f8:db:78:11:a2:4b:ae:27:dd:e0:43:5e:b5:
17:30:fb:7e:27:e9:07:9e:fa:dd:26:e1:ec:a7:c5:
ba:8c:9c:2f:54:16:d4:93:90:f5:05:2d:88:d3:ec:
31:2f:fc:c7:71:b6:e8:3e:76:c6:91:e3:44:08:8a:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:3A:D6:09:E5:30:56:E1:03:29:51:6D:F3:A5:F3:B0:85:BA:95
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ae:75:cf:77:95:1d:2e:67:7a:bc:1f:87:be:43:9f:66:83:
f2:97:5a:20:f0:19:62:c3:c1:e7:c3:22:62:cb:b9:25:98:30:
10:2a:ad:70:00:d0:a5:b0:35:83:ab:29:72:5c:61:d7:56:b1:
c0:a1:8a:8f:46:7d:3f:a0:0f:dc:1a:6c:82:3e:ae:cd:6e:3d:
50:3a:4c:7c:7e:ef:a7:ee:b7:f5:e1:d9:ff:52:2f:71:44:bc:
34:de:ca:66:04:d3:75:fe:56:28:34:10:2a:b9:00:a6:a6:4a:
ff:b0:18:81:e9:5c:ab:e2:d4:1c:f1:49:b2:68:79:6e:d6:24:
b4:40:62:2a:a2:b1:29:af:43:6b:ac:3c:ee:7d:9d:8c:1f:86:
06:eb:b8:95:57:f6:11:18:c9:1d:e0:85:17:2e:f4:b3:b6:2f:
7c:6b:3e:3c:be:8f:31:b9:49:44:fa:0a:3f:a5:a6:65:60:90:
2a:ff:32:64:2d:fd:e0:06:48:9e:64:20:31:f6:97:5c:26:b5:
a0:34:e7:7d:75:45:7f:83:a5:9e:42:07:15:2d:31:74:18:2b:
15:cd:37:ea:da:30:fe:17:f8:e9:df:25:03:bd:c0:db:7e:b7:
56:25:f8:01:7f:c3:67:0e:b6:6e:7c:0a:96:8d:10:fa:95:86:
97:d8:93:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:00 2025 by rpki-client