Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File: L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier: sbMhylwCw8pDUk5TBPtMV3xij8gZ+wjwG5qebmeuzzg=
Subject key identifier: ED:5D:50:FA:78:B4:9B:AB:03:ED:6A:B8:74:2A:14:54:06:EE:08:DC
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer: /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial: 019A71B8CA2CC7ABBD512DD21D2591B13722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: /4yAsQBzSeulH3+IfnKPcQQCKHPvgDVw+2rFAIRTPr0=)
2: yz6_439OmIgbPGI_9SMl-hcB7SM.roa (hash: b+VVST8s13jCLV/LOSpCV8hcczaiQ8urh6lhnrg3Cso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ca:2c:c7:ab:bd:51:2d:d2:1d:25:91:b1:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=ed5d50fa78b49bab03ed6ab8742a145406ee08dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:03:ce:c3:85:9f:27:9c:a6:32:ee:fa:59:
b1:2f:84:b2:2b:10:b1:a6:5d:a1:ba:3e:e7:6f:e2:
4d:df:2d:04:6a:4e:8c:cb:bb:f1:f1:ac:79:10:5d:
2b:05:32:b4:1f:13:32:6e:e3:a7:a1:b8:ce:e2:ef:
88:85:db:aa:44:6f:62:eb:87:37:ea:b1:f3:cb:b2:
ac:5f:5b:e5:68:cd:5c:40:a5:f9:f7:0f:a5:f8:f3:
56:f5:d8:10:c0:15:ad:1c:26:16:c1:0d:92:74:ce:
48:86:d6:81:25:e6:6a:e6:1c:b2:8f:59:ac:2e:b8:
d0:03:d2:db:07:1b:98:0a:23:d1:77:4c:9a:34:48:
27:7c:d5:10:19:6e:7f:49:42:9b:bd:f5:5a:cd:27:
89:66:89:71:9f:8d:fa:ed:0b:62:3b:62:a0:00:1e:
84:7a:92:1b:59:ea:58:8c:de:52:35:e0:bc:be:ad:
d8:08:e4:b1:71:b9:f9:fb:a4:88:b2:9f:5a:3a:c5:
45:7c:b4:02:91:26:c4:75:56:09:26:09:c8:77:b1:
88:54:02:3f:6d:db:4c:b3:30:e9:16:38:21:96:cc:
6b:bd:88:e3:0d:82:62:87:cb:36:e6:05:78:e4:00:
65:09:67:2e:52:cd:a1:1f:55:54:ff:5e:cf:72:b1:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:50:FA:78:B4:9B:AB:03:ED:6A:B8:74:2A:14:54:06:EE:08:DC
X509v3 Authority Key Identifier:
keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:56:11:57:87:08:f6:12:fe:e0:4b:96:f2:de:bd:35:c0:
84:7e:7f:ad:dc:f5:ef:8a:72:31:45:c3:06:98:d5:85:1d:04:
63:0c:1c:c0:9c:d2:5c:f2:8e:4f:3b:73:99:bc:46:be:fd:a7:
ef:04:bc:6e:de:63:a5:2e:00:aa:ec:a7:d7:af:91:57:07:04:
a1:84:25:73:51:67:f9:be:6c:c2:6d:c5:f4:14:7d:db:40:f4:
aa:55:3e:e4:8d:c4:99:38:d2:3c:b4:bb:e7:17:98:d7:f7:40:
4d:de:34:ea:07:69:46:40:40:4a:80:ed:48:0d:37:5e:9b:59:
32:a0:fe:ee:65:1e:27:17:73:17:57:9c:93:f0:d8:70:65:fd:
a3:76:10:b8:37:8f:44:2a:8a:d9:aa:e9:01:18:cb:16:27:9f:
a0:0b:69:b9:cd:6b:b1:09:20:ba:69:6d:cc:76:ab:67:da:3c:
52:76:09:74:93:00:3e:bc:f6:13:9c:10:a2:fa:a7:6a:38:85:
4b:91:05:9e:83:20:d6:76:c2:39:ba:40:00:92:91:a5:4d:9d:
98:2e:af:51:aa:18:1a:d0:e4:74:61:1c:eb:30:54:68:b9:3f:
06:e5:2b:62:54:08:36:1c:03:8c:a4:4f:ae:74:3b:14:fb:c0:
70:cb:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:51 2025 by rpki-client