Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File: L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier: SH0SnaP9SI1zDdjjx4ypT/v0LP7+0/hzD8+jlAvlh4Y=
Subject key identifier: 4C:23:2C:A2:0F:0F:3D:E9:9A:92:B0:C5:6A:3F:02:F1:19:EA:E2:DA
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 019A71EF00A38DAD4CAA4D2896C921FAE7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number: 1134
Signing time: Tue 11 Nov 2025 08:01:19 +0000
Manifest this update: Tue 11 Nov 2025 08:01:19 +0000
Manifest next update: Wed 12 Nov 2025 08:01:19 +0000
Files and hashes: 1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: Ro67jdcVjR7YHpcOZWVOBGpe+rB21YY/9a356LpbZBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ef:00:a3:8d:ad:4c:aa:4d:28:96:c9:21:fa:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Nov 11 08:01:19 2025 GMT
Not After : Nov 12 08:01:19 2025 GMT
Subject: CN=4c232ca20f0f3de99a92b0c56a3f02f119eae2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:af:fd:74:65:5f:d6:0f:fb:35:b2:b4:70:
32:1b:a6:73:d1:80:2c:e1:40:fd:48:15:48:75:0e:
a8:eb:f9:ea:be:bd:c4:75:93:da:12:90:68:ad:6b:
b3:d6:17:73:d8:7d:a9:93:ce:47:1c:f1:66:3b:05:
50:52:e6:d5:3d:ef:f9:a1:7b:72:2c:f5:86:1a:2e:
6a:be:ee:5a:cd:b4:85:9f:5c:60:49:1f:e8:e3:3d:
1f:51:bb:33:ba:71:57:8a:d5:59:c4:df:e0:02:55:
1e:a8:7f:64:18:67:7f:96:c4:cb:5c:cf:7a:9e:52:
ee:a5:48:fb:e1:2d:89:eb:d8:64:e3:03:31:d6:2c:
0d:8e:71:6a:6f:21:f8:24:18:f4:a2:af:b1:54:61:
5b:f6:b1:8b:4c:40:e7:fc:d7:7c:a9:15:b7:0c:2c:
d4:f5:2f:63:ca:85:89:21:30:9b:c7:e7:c6:64:f0:
17:75:7b:04:5f:56:55:ea:e4:18:35:af:c1:37:f0:
eb:40:b1:88:b6:a2:7a:c3:54:4d:33:04:58:73:b4:
20:43:61:de:f5:71:3f:32:38:6d:5d:82:1d:d1:6e:
ad:64:05:a5:4d:09:6b:59:ee:34:48:eb:93:58:8c:
77:e8:c1:dd:be:c4:b0:73:74:80:f0:2d:b0:86:98:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:2C:A2:0F:0F:3D:E9:9A:92:B0:C5:6A:3F:02:F1:19:EA:E2:DA
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e6:a6:c2:41:9c:8d:8f:80:f1:4f:24:44:31:f5:2d:bc:39:
77:49:69:b4:59:e5:cb:97:e1:83:20:f1:4e:44:d7:68:f6:40:
b5:fe:4f:da:82:59:6a:a0:ab:94:06:64:13:15:97:1a:95:c6:
f1:32:39:fd:85:09:0f:fd:cc:89:f4:26:fe:bf:90:77:2a:5b:
8f:b5:4b:50:0f:85:93:6c:f0:f3:b6:92:11:3f:25:46:51:0e:
a4:5e:c9:63:f1:98:d9:49:85:65:47:de:b2:0a:b5:4a:27:76:
3a:be:dc:ee:72:cf:f6:27:86:a1:38:50:77:1f:4e:74:59:37:
3f:87:97:fa:73:62:24:66:36:c4:e2:6c:d2:43:8e:d7:fb:1a:
4c:31:0e:1f:3c:27:fa:b7:5a:ed:c1:a3:40:29:4d:51:bd:06:
d2:fe:b2:39:f0:95:50:aa:01:13:b4:37:4a:45:9e:60:f1:f4:
4a:5b:7e:7b:35:94:e6:ec:e6:11:44:ba:8f:26:d3:4c:39:3d:
f1:03:27:1c:5f:b6:e8:5a:ab:cf:5d:93:62:a3:e7:c1:30:78:
17:a5:b2:1a:a8:99:c2:bc:bc:73:1c:3a:09:56:90:42:bb:d0:
ad:7d:96:31:c4:9c:9a:ec:80:e7:95:b1:d3:61:b1:20:aa:ba:
18:6f:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:58 2025 by rpki-client