Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: XexNciaVUPoyu4jE1odDadgMgUC9fRmwq1r3ge4b3AQ=
Subject key identifier: EC:56:6C:24:26:4B:41:5A:FC:34:17:4C:F8:A2:1C:BD:78:05:76:E2
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 0198D4DFD88EA1BC3DD8E37B66B1604C4087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: IPrEJftqSfellOROMWt0Pn4S+1lu9P24GImzUj5IRiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d8:8e:a1:bc:3d:d8:e3:7b:66:b1:60:4c:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=ec566c24264b415afc34174cf8a21cbd780576e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:aa:69:89:5c:7c:a2:4a:ee:08:e8:f9:d3:6a:
54:93:f8:87:e9:78:8c:35:ed:a4:22:f4:f5:85:80:
91:e7:c3:a4:77:df:e7:72:49:d0:bc:d9:3a:5c:48:
b0:41:16:4f:85:2f:1f:41:55:39:bf:e4:66:58:ab:
c5:13:fe:e7:f0:aa:03:89:a0:30:1d:d6:22:7a:57:
8e:68:e3:d5:8a:0e:f9:84:20:ca:31:f4:47:2e:1f:
b5:ff:da:f3:be:ba:34:af:55:f3:a6:06:d9:e5:53:
59:bb:fa:a6:27:43:4b:7c:ed:f6:e5:a4:44:e0:5e:
be:33:fc:29:9c:1d:15:1b:f5:27:c1:14:56:cd:35:
d1:4d:82:f6:ff:45:47:e5:0e:6e:06:c2:36:9c:af:
a1:0f:b8:4d:8b:74:05:a7:6d:f6:68:99:05:da:11:
2f:09:fe:81:3e:e6:ec:40:7d:26:9a:b1:0d:ec:15:
4b:5e:af:12:0c:fe:26:5a:ce:a0:56:86:fd:ad:15:
78:58:ee:9a:22:91:57:1d:33:b2:65:4a:5a:5d:85:
98:8c:f9:bf:55:1d:c4:34:0b:f6:9d:09:1d:2a:4b:
d3:9d:4d:52:3b:51:a0:49:9e:89:6a:8e:d9:ee:3a:
44:aa:cd:a2:81:bf:65:33:81:35:8d:43:ff:bd:59:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:6C:24:26:4B:41:5A:FC:34:17:4C:F8:A2:1C:BD:78:05:76:E2
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8d:82:07:7f:01:0b:ff:3b:99:4e:b5:43:59:b8:03:d7:03:
d9:94:fe:2f:da:dc:f3:01:d0:25:50:b7:a3:df:08:e4:1d:0a:
fb:6e:14:62:f4:b3:26:80:17:bc:db:b3:68:4f:41:1a:66:42:
14:cc:b5:95:5b:cf:5a:1a:47:7e:37:19:82:a8:c0:96:2d:d4:
e4:0c:ca:66:14:de:50:d7:68:0c:bf:d8:c8:20:3d:57:c6:c1:
dc:b6:e9:7a:00:c5:87:23:45:8f:fa:74:d3:39:5e:7d:7f:f1:
8f:f4:79:ff:cd:31:fe:18:ff:f0:14:2d:c4:e3:cb:d8:eb:5f:
bc:76:f0:26:d1:b4:51:2d:f0:a1:67:20:60:41:3c:6f:07:f9:
a2:da:bf:3b:d9:cd:e9:8f:a2:a7:dd:a7:70:59:40:04:43:9b:
28:55:35:59:ac:37:1d:23:b0:4f:b9:ea:2b:d6:50:0a:76:89:
67:18:89:6c:7a:37:f7:96:ed:f3:ee:ad:88:07:19:d4:74:4a:
98:6f:ee:9d:68:ef:cf:17:ab:5b:a4:87:35:47:61:29:da:55:
d1:a0:76:ba:56:ab:2d:4c:05:c3:59:f2:b0:6a:74:08:f6:35:
90:2c:e0:e5:54:a0:ba:0d:0d:e1:1e:52:45:87:05:f4:95:5f:
dc:8d:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:01 2025 by rpki-client