Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: GfZ3YVvYkSzkeB9MfYCoG/q657gjC5Fonaz6DnNeMFc=
Subject key identifier: 9B:92:9C:E5:64:38:A4:EB:6A:1B:9A:2D:CB:C5:F3:5C:2C:41:98:AC
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019A4EF5210ED94A3490E4CB4226C8870F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: Mu3VvIFK108TDadmwm/A2yGmuUzSua6+OS8ciiE5+WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:21:0e:d9:4a:34:90:e4:cb:42:26:c8:87:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=9b929ce56438a4eb6a1b9a2dcbc5f35c2c4198ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:43:ea:76:b7:8b:ef:b4:6f:8e:62:90:73:
b2:39:52:da:7d:97:b5:59:be:d1:4e:0e:ff:7d:f4:
62:36:91:4e:87:f6:03:96:89:f3:d6:34:76:16:02:
c1:54:2c:3c:28:98:92:09:6f:47:72:9a:df:5d:a8:
2d:30:7a:a0:8c:dc:ea:2e:00:2a:6d:8f:f9:c0:41:
87:db:35:ae:c1:96:7a:b5:ad:a5:29:0c:9e:4e:4d:
64:fd:11:59:66:d3:8f:ba:5d:c2:b8:1a:0d:cc:49:
78:83:7d:98:05:ec:ac:b9:f7:07:b8:b8:66:b0:25:
43:16:e9:09:1e:73:cd:b0:bd:d0:53:cd:52:0d:b0:
94:c5:b7:10:ba:82:5b:16:f6:10:07:79:41:a3:07:
3b:6f:b1:5a:e1:3e:43:7c:7a:f0:d3:7a:33:2e:81:
87:63:74:f2:9f:57:1e:28:1e:41:ff:14:4d:9b:19:
47:28:ce:cd:1a:04:d4:bb:02:64:06:9b:3e:f8:99:
a8:65:99:a2:ee:ce:68:e1:77:93:90:22:bb:6b:9d:
f4:4e:95:fd:6f:ba:49:28:52:8d:4a:9b:eb:4e:1c:
e9:b3:78:35:d4:dc:ba:0e:0d:2b:3d:d2:8c:d1:d2:
39:1f:49:53:bd:41:21:2c:22:25:09:ac:3e:e6:61:
d0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:92:9C:E5:64:38:A4:EB:6A:1B:9A:2D:CB:C5:F3:5C:2C:41:98:AC
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:60:c7:85:a5:74:5d:82:ba:46:84:d8:66:58:38:d6:4d:64:
9c:64:54:09:59:ba:76:09:a8:d3:12:f1:42:91:14:7f:3a:aa:
87:42:66:df:7c:8a:82:0c:77:ab:45:d3:d2:d0:c2:23:a4:13:
d0:92:e2:3b:e6:db:f9:a3:00:54:01:0e:dd:6c:f9:73:76:a8:
e6:ae:95:ac:35:e8:ac:ff:45:87:14:fb:c8:93:23:67:8d:dd:
8a:71:b3:2b:f4:34:81:c5:bd:34:21:16:36:ee:39:2f:0e:08:
2e:d5:fd:19:8d:4d:06:13:b2:2c:50:ba:12:4b:ec:1e:b2:a1:
0f:68:50:6e:5b:0c:41:1a:6d:b4:51:b5:40:30:23:8f:73:8d:
b5:79:66:13:6a:7d:a2:54:5e:ca:61:6c:30:13:70:bc:67:8a:
c9:8d:82:21:cc:45:11:e9:bd:9d:31:c1:83:7c:0b:8e:e4:70:
fc:1e:ad:85:e6:07:1f:aa:1d:12:11:6f:ef:0a:b4:65:6e:a6:
ea:01:8b:cd:91:82:4d:63:b3:a6:df:75:78:5c:4a:b9:22:ae:
a5:59:05:f4:88:45:65:33:2f:2b:ee:0c:4d:3c:8b:da:5c:c4:
7e:b1:e5:51:76:65:1f:97:c0:a5:b2:39:61:72:1f:02:f9:07:
30:9f:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:33 2025 by rpki-client