Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: GzM1wgcArWM7ry/8hfwtVrKZybOfwzxeqkZKb14ZNnc=
Subject key identifier: BC:1E:3F:C3:71:3D:68:A6:02:91:68:8D:D8:9F:25:70:83:03:C5:D3
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019A71B8BBC29B8A7971D2DD462991D20833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: Rw4PI+xJnqt3IOVJepwKcQaOx8XRZTg3B+jyQayMqhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bb:c2:9b:8a:79:71:d2:dd:46:29:91:d2:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=bc1e3fc3713d68a60291688dd89f25708303c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:2a:a0:b9:ef:5a:b2:19:56:84:46:af:8e:
b0:dd:08:48:e7:30:dc:d5:2c:04:8c:8b:5e:b9:9c:
3f:f2:44:f1:32:37:bb:1f:7b:6e:61:8f:3c:d7:77:
fc:05:46:20:49:87:76:6d:0d:af:13:e7:43:72:00:
ce:17:18:6f:15:d4:e9:fa:f3:49:63:0f:e9:fc:52:
bb:7d:e8:5d:0a:67:f2:e1:1d:23:fb:03:d3:54:90:
5b:7c:32:f1:23:9f:68:a7:25:eb:b5:ca:58:4c:f8:
b8:36:ba:aa:cc:a7:a4:c6:0d:96:57:00:db:db:cd:
ec:ba:22:1f:82:0f:28:65:32:f2:9f:a0:c7:9b:4f:
c8:fe:de:22:24:26:af:7e:67:7a:ce:a9:ff:25:4b:
cc:59:1d:be:de:b3:9d:2c:cc:51:41:33:0e:47:c5:
d1:a1:1c:a9:b9:74:bf:bb:ae:c3:c9:2b:d4:7d:62:
8d:3c:85:0a:06:4f:82:c9:a8:99:6c:0a:9c:7e:8d:
0d:f0:e9:6b:f2:4f:4f:e8:a1:07:c6:3f:7b:de:5c:
a7:03:0e:d6:ba:06:1c:79:c7:0d:f7:84:3f:3d:de:
7c:5c:c3:e0:60:e9:93:d3:55:87:e7:f0:f7:e5:f0:
22:f7:2a:3e:21:b4:58:5b:48:e9:61:34:9e:2c:8d:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:3F:C3:71:3D:68:A6:02:91:68:8D:D8:9F:25:70:83:03:C5:D3
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:45:a1:de:14:4d:c2:1f:86:bd:4d:00:86:a7:92:67:13:38:
ed:60:a6:bc:36:d5:ec:e8:0f:5a:08:68:f5:66:d0:45:99:cf:
e5:08:cb:0a:18:07:ea:eb:03:76:81:b2:08:69:3f:8e:3a:22:
1f:39:10:b9:de:0a:88:18:6d:00:74:e3:81:61:89:ce:5e:a0:
f9:e9:aa:21:a5:1a:8a:66:9c:01:be:88:fa:18:4f:f1:41:2d:
fd:f9:e0:63:e7:eb:63:3a:73:f3:e7:56:4c:ec:a9:f0:42:2d:
3d:51:1e:ee:0c:e0:01:e4:c4:ec:6b:c2:e9:78:65:c2:be:ea:
8b:8c:10:8a:f5:00:55:2b:c0:00:12:5f:4b:f2:0d:ed:ef:0f:
af:98:d7:31:43:be:c8:8d:ff:14:49:41:56:94:00:5d:71:66:
6c:4c:c2:e0:d2:30:c3:6d:62:15:ba:59:6a:aa:7d:06:ac:6a:
05:67:76:e1:37:7a:07:57:b4:73:48:48:88:76:0b:37:10:5b:
6b:83:68:33:23:3c:6b:03:aa:2c:da:a9:9c:31:a7:81:f5:4a:
5c:ec:30:0a:11:35:6e:bf:21:72:a1:c5:db:bf:d2:67:7e:f0:
49:2c:59:c7:e9:9e:f3:18:de:ef:40:aa:1e:7a:6e:ab:bb:99:
09:12:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:19 2025 by rpki-client