Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: 6ZOWrt/R5pey0J5ROc0mz7OMxQIEb4c+4xfbeeoER+c=
Subject key identifier: 8D:C8:ED:74:3F:D6:E9:84:AE:94:27:C9:1D:7B:93:21:4F:64:4F:19
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019A4D3CF5D346A8D5BD9A2D70C0984F8B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: Kle7wVyRhKYhilL7RveV4nw/0AmjzLOMrL/GDb1cIgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f5:d3:46:a8:d5:bd:9a:2d:70:c0:98:4f:8b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=8dc8ed743fd6e984ae9427c91d7b93214f644f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:c8:a9:e7:d8:b0:fe:2a:43:6f:be:16:c8:
df:90:ec:af:36:fe:33:13:08:8b:f7:13:c2:24:77:
13:09:cc:f9:ce:f7:7a:fc:f5:48:1e:f9:b5:f5:2a:
3e:4f:d9:96:e9:37:10:58:9d:52:e4:92:46:d4:ec:
33:07:12:e0:f5:1a:9d:9b:f6:94:d9:32:68:4c:f6:
70:ff:3a:68:cb:52:88:90:cb:61:41:78:03:eb:a5:
49:c0:31:3e:22:b1:59:7f:b4:b0:6a:c5:99:3c:c9:
94:78:25:4a:c7:91:e2:5a:47:7b:5a:67:83:23:33:
0e:e7:61:17:5f:6e:d5:6b:51:38:07:49:af:48:6c:
bc:a9:8e:a7:2e:72:6c:f5:af:8d:4a:c9:df:4c:71:
d0:66:1f:c4:6b:bd:4d:91:be:ad:d7:dd:30:02:47:
49:74:cf:06:58:a7:36:cb:6d:ae:06:66:a3:55:e1:
ac:3c:48:7a:ab:65:93:62:09:43:06:6c:30:32:29:
43:b3:38:45:f2:71:65:19:bf:56:b8:e0:ff:87:f1:
40:a9:1a:9b:1d:9d:66:14:61:5a:fb:0a:88:8d:69:
5d:50:44:7b:40:f9:0c:1f:43:44:77:12:5a:b2:75:
eb:3f:79:06:71:ba:00:42:65:eb:6c:50:3f:80:c4:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:ED:74:3F:D6:E9:84:AE:94:27:C9:1D:7B:93:21:4F:64:4F:19
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:57:1a:2c:ce:67:73:3a:3e:40:79:8f:f4:5e:d7:cd:46:c9:
23:fe:a3:99:77:bb:41:e3:7d:e5:0a:bb:e5:9c:7f:76:1c:2c:
38:b3:5c:56:44:ac:60:06:07:e4:f3:5a:c8:d2:fc:65:3b:23:
4b:f4:1d:99:31:4e:b3:dc:24:f4:3f:19:d1:4f:cf:a5:73:f7:
e0:6f:b2:8d:d6:c2:44:59:1f:a9:04:98:e0:74:72:fc:ee:72:
3f:92:e5:eb:f9:dd:34:a4:b9:cd:ec:1b:09:d8:09:ee:ac:c6:
08:aa:3e:0b:6c:69:ca:63:51:3f:c8:ea:fc:26:ee:58:7f:53:
54:09:81:c0:fa:35:87:be:30:4f:eb:15:d0:7a:2b:ca:78:46:
c1:90:6e:9e:d6:e8:b8:51:26:8e:ab:32:7b:e4:5c:b3:18:57:
4d:20:6a:28:c4:29:35:ec:a7:9a:4c:ad:13:c3:4c:88:67:65:
c4:c8:aa:04:94:e1:10:0a:56:77:08:94:d0:23:2b:14:04:4c:
cf:ba:7f:7a:42:01:14:e1:dc:58:0a:7f:19:6a:db:b8:60:ab:
a1:c2:59:0e:5c:96:b9:38:02:63:28:d1:39:3a:48:8c:c3:ad:
b1:b1:4e:5f:a2:d7:ae:65:4c:9d:46:9e:f9:3e:d6:ad:c8:6f:
41:0a:2b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPPXTRqjVvZotcMCYT4uEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjUxMTA0MDUwMDMxWhcNMjUxMTA1MDUwMDMxWjAzMTEwLwYDVQQD
Eyg4ZGM4ZWQ3NDNmZDZlOTg0YWU5NDI3YzkxZDdiOTMyMTRmNjQ0ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4vIqefYsP4qQ2++FsjfkOyvNv4z
EwiL9xPCJHcTCcz5zvd6/PVIHvm19So+T9mW6TcQWJ1S5JJG1OwzBxLg9Rqdm/aU
2TJoTPZw/zpoy1KIkMthQXgD66VJwDE+IrFZf7SwasWZPMmUeCVKx5HiWkd7WmeD
IzMO52EXX27Va1E4B0mvSGy8qY6nLnJs9a+NSsnfTHHQZh/Ea71Nkb6t190wAkdJ
dM8GWKc2y22uBmajVeGsPEh6q2WTYglDBmwwMilDszhF8nFlGb9WuOD/h/FAqRqb
HZ1mFGFa+wqIjWldUER7QPkMH0NEdxJasnXrP3kGcboAQmXrbFA/gMT9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3I7XQ/1umErpQnyR17kyFPZE8ZMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFcaLM5n
czo+QHmP9F7XzUbJI/6jmXe7QeN95Qq75Zx/dhwsOLNcVkSsYAYH5PNayNL8ZTsj
S/QdmTFOs9wk9D8Z0U/PpXP34G+yjdbCRFkfqQSY4HRy/O5yP5Ll6/ndNKS5zewb
CdgJ7qzGCKo+C2xpymNRP8jq/CbuWH9TVAmBwPo1h74wT+sV0HorynhGwZBuntbo
uFEmjqsye+RcsxhXTSBqKMQpNeynmkytE8NMiGdlxMiqBJThEApWdwiU0CMrFARM
z7p/ekIBFOHcWAp/GWrbuGCrocJZDlyWuTgCYyjROTpIjMOtsbFOX6LXrmVMnUae
+T7WrchvQQorPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:23 2025 by rpki-client