Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: BKFZ3IoQOqqZ4zDpRN3uAVDJ0zYMLN3PFHRnjqNUvSU=
Subject key identifier: 51:2D:BF:07:AE:8C:5A:D5:0C:C7:A4:0D:9F:57:23:50:C1:3B:FD:FA
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019896A59A2B8D72A99573930BE8716AB987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:01:31 +0000
Manifest this update: Mon 11 Aug 2025 01:01:31 +0000
Manifest next update: Tue 12 Aug 2025 01:01:31 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: BOXo6OuyyinkNBN6PB46W2ArFVw+UaVPvbiu4kaYqdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:9a:2b:8d:72:a9:95:73:93:0b:e8:71:6a:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Aug 11 01:01:31 2025 GMT
Not After : Aug 12 01:01:31 2025 GMT
Subject: CN=512dbf07ae8c5ad50cc7a40d9f572350c13bfdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:98:5b:27:e1:60:6a:22:71:14:67:5b:91:
34:a7:5e:31:c4:b4:a5:cb:7b:8e:92:11:68:52:a1:
39:63:4a:d7:de:f0:62:f5:b9:2c:89:d0:4e:93:da:
ab:35:c6:27:f4:ff:1f:3d:3f:82:41:72:8f:d1:6c:
0e:8b:82:3e:8c:b0:ef:b0:aa:6b:96:05:61:9c:fd:
cf:7e:42:60:4b:a8:cc:18:8a:e9:e8:dc:74:b1:ed:
b9:28:bc:58:82:6a:84:62:63:83:49:73:87:e8:0c:
98:ee:af:0f:5b:2b:8c:ef:f6:b6:a7:b7:cb:a2:be:
a0:10:6c:cc:ed:27:1e:07:33:dc:e6:fc:39:83:74:
ef:de:3d:fa:4a:89:b2:5f:bf:37:4c:c3:7f:50:b7:
60:7a:29:4c:d3:e7:dc:3d:5f:9a:64:dc:f8:88:26:
e2:19:39:8f:23:a9:15:bf:50:0a:a7:69:88:ec:28:
fc:82:f7:9c:f2:45:26:0e:1f:3b:9f:9b:db:ba:6f:
28:d2:44:8b:9b:a8:60:80:fd:da:5f:a0:03:e1:ab:
b5:a0:56:d5:8b:15:c8:20:b5:2a:33:d7:b0:f9:2c:
9f:92:69:27:81:a6:79:12:47:7d:db:6b:de:3a:ff:
a2:1d:b9:da:80:ff:f8:21:88:df:b4:15:cf:04:57:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:BF:07:AE:8C:5A:D5:0C:C7:A4:0D:9F:57:23:50:C1:3B:FD:FA
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:3a:39:56:5f:82:4d:f8:de:eb:7f:eb:72:e5:da:fb:4c:
bf:2e:0f:ae:6c:d9:8f:a6:0a:39:44:fc:9f:0a:cf:ee:0d:56:
2a:e7:97:70:27:36:51:4c:7a:80:d9:cc:79:4d:98:f0:b9:fb:
7c:fc:f2:d7:5a:a9:9c:d9:75:bc:4a:01:5d:74:9b:70:79:75:
65:f1:92:be:a9:97:a9:95:75:0e:33:08:0c:fc:67:9c:dd:37:
82:36:e5:91:6c:f6:4f:ef:d8:c8:20:e3:1e:30:88:c7:e6:2b:
da:f0:d7:e8:c7:f1:9f:45:e7:ab:fb:ae:aa:87:ce:74:19:e9:
ce:0b:24:83:a4:2a:01:e8:ee:0f:98:e8:5d:56:99:84:25:ab:
ce:8d:93:6a:10:9b:16:b8:bc:d9:17:36:ca:5d:2c:8c:24:27:
dc:5e:d7:17:6d:6d:7b:84:8e:44:78:50:3b:b9:f4:1b:ff:d4:
6f:b5:e6:80:62:45:d4:89:74:f4:f4:aa:76:b6:ea:68:b0:d2:
70:b0:d7:1c:58:63:5c:19:29:61:ad:60:a9:12:66:79:9e:81:
cc:4f:2a:f4:c8:ea:95:85:b8:e2:c6:3f:3d:9f:33:2a:ac:6c:
47:cf:ff:fa:da:aa:cb:76:ef:94:77:ea:7e:55:cc:1d:08:2b:
55:72:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:06 2025 by rpki-client