Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: KaMtXKbyEEK3M7l0LE8z6vve/u0/g/CCQYG/jq0tb2w=
Subject key identifier: AD:15:E6:5E:B1:EA:77:82:C0:79:01:4D:EE:86:EA:D4:6E:18:60:7B
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 0199FC8FA03708EA777DAD3CAD76B7702D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: 4wPGsLgZBriKYzk11qaHv6KnyphmldJJA+n8pBmu3XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a0:37:08:ea:77:7d:ad:3c:ad:76:b7:70:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=ad15e65eb1ea7782c079014dee86ead46e18607b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:d5:67:a9:53:4a:92:f7:0c:92:9c:ea:64:
76:e5:63:0a:84:10:dc:8e:fe:bf:57:04:c2:ab:bc:
af:de:34:a3:c5:b0:03:0d:96:3a:bc:ee:8b:6d:63:
74:b3:10:57:e9:a2:32:2a:ae:c5:77:fd:a2:6d:aa:
b6:21:b0:f1:54:c5:37:55:af:7b:97:4b:fa:25:ba:
2a:47:f6:07:94:c1:53:41:f1:bd:45:4d:d0:fd:ac:
c1:64:a7:dd:20:1d:f4:3c:5d:2f:07:58:07:67:f6:
db:b3:07:b6:a4:be:8f:fb:b4:cc:1e:7e:ad:24:15:
2a:57:ee:98:54:03:b1:4b:ff:62:79:e6:b0:21:4b:
f5:ab:ef:37:71:c6:95:c8:65:e8:e8:5d:da:69:00:
7d:95:90:35:5f:7a:da:f9:25:46:24:d4:bb:3f:ac:
5f:9a:89:b1:f8:3c:70:c5:87:2d:14:75:21:a3:83:
c3:bf:04:05:07:07:8b:12:8d:6a:d2:06:c9:66:c3:
e9:8a:79:af:4e:85:7d:48:98:5d:27:98:60:69:6e:
94:d3:1d:89:c6:f1:34:db:af:f8:86:83:1e:b5:e8:
a7:1b:3f:d4:d3:ff:0d:88:14:de:a7:43:2b:03:d8:
06:3a:8f:99:b9:22:a1:1a:fa:cd:1a:2d:ca:05:47:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:15:E6:5E:B1:EA:77:82:C0:79:01:4D:EE:86:EA:D4:6E:18:60:7B
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f9:06:b8:14:67:a1:b2:0e:06:a1:5c:a6:8c:f5:1b:17:2c:
5b:b8:fd:12:cc:68:1d:2c:e8:ad:68:6a:e7:83:60:97:ed:ee:
5b:0b:fb:c3:af:f9:77:1e:97:bc:5a:dc:1c:2b:ac:e4:ff:50:
2f:0b:b7:03:c5:85:43:97:9f:b5:7a:37:68:44:ad:46:95:45:
a7:99:cb:aa:1f:5e:c8:b9:51:0b:7e:7c:f1:7a:f9:05:bc:b5:
c0:64:aa:bf:3f:13:46:cc:b4:4a:0e:e2:ab:a0:d5:df:80:60:
4b:b4:c8:9a:ae:2b:ad:df:ac:4f:63:92:41:a6:0c:26:de:db:
7c:51:27:0c:1b:f2:7a:f6:d2:53:60:78:32:39:01:47:e5:d6:
bc:1d:b9:a2:52:98:e6:4a:b7:ba:da:4a:e1:b2:80:bc:5e:88:
bb:27:35:47:ac:50:40:03:1d:17:c4:1f:fd:74:aa:c0:1d:94:
1a:5e:1b:9a:f7:22:ec:8b:bd:b2:6a:d6:5c:8b:df:2c:d2:35:
99:be:12:1c:8d:61:60:c2:28:78:ce:47:b7:c7:dd:35:3c:94:
c5:88:74:d4:95:77:d5:81:8f:68:e2:02:3a:17:e6:a3:7c:e5:
5e:d6:d4:81:76:d2:d6:69:5b:b5:ad:09:63:34:92:f1:d0:7e:
47:f3:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:44 2025 by rpki-client