Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: J0uGyPFra7Z5kFSyAvanw/W6ls41El6QNPWyeHf3EwI=
Subject key identifier: AF:5E:49:82:79:21:28:92:AD:32:3A:0D:BB:3D:68:BD:75:E8:1D:D1
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 0199FC21BEA82FF189E3FD4C0FB1EEF5C013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: y/pFPQcjD/alCTvgp9nGcJT+I2Na7ucXQVRYJDpPe+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:be:a8:2f:f1:89:e3:fd:4c:0f:b1:ee:f5:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=af5e498279212892ad323a0dbb3d68bd75e81dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:76:08:3c:bf:b5:fd:6d:9d:a2:a2:0b:f3:
dc:49:59:ce:80:35:5e:a2:6c:a0:d2:ae:ae:5f:16:
57:76:cd:0f:47:42:40:94:2a:5a:8b:d9:14:1f:1a:
d6:84:c5:53:38:07:25:6b:fc:02:91:d7:09:fd:60:
3a:8d:48:ab:1a:44:06:8c:ae:b7:66:c6:70:f0:a4:
43:e0:05:fc:67:e7:70:10:1e:4e:ac:ed:ec:bf:9a:
2a:dc:be:f7:00:6e:03:58:d0:87:23:86:22:2a:ce:
27:97:8b:37:ad:fa:3d:0c:5c:c2:6f:5b:cd:bc:0f:
01:26:c6:99:69:08:35:51:83:91:21:30:7c:30:9e:
82:da:07:6a:e6:f4:78:cd:84:3c:c2:1d:1f:d0:5a:
72:89:05:2b:89:20:79:6e:05:e6:f3:2e:1b:8d:89:
15:ba:54:0c:e9:e8:d1:b1:45:43:86:21:77:e2:81:
1f:3d:58:86:d4:50:97:d5:d5:7d:7f:2e:c6:b8:ea:
5a:77:ce:8a:0f:4b:06:3d:83:41:4a:d3:2c:eb:40:
4d:fe:39:ba:45:dd:1d:1c:dc:17:f8:5a:9e:4d:51:
30:2b:81:6a:a1:46:17:1c:4c:51:29:8a:c0:38:aa:
ca:7c:39:c5:e5:7a:f0:25:6d:92:7c:25:fb:b0:1f:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:49:82:79:21:28:92:AD:32:3A:0D:BB:3D:68:BD:75:E8:1D:D1
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:8f:56:cd:0a:e9:fc:9d:20:6c:94:32:66:07:9a:04:1b:
5f:c0:93:ce:36:15:6d:a1:2f:05:d7:44:c4:bf:0e:ed:d0:3c:
1d:d2:0d:7c:ae:a2:14:c0:1c:07:33:1e:1e:e8:04:19:48:e7:
75:98:78:15:64:9d:62:53:ad:6c:05:9e:47:9a:f2:b7:a8:b9:
73:a5:ff:a5:a1:c3:93:bd:4d:0c:26:41:0c:d7:ff:c7:ce:fe:
eb:d5:94:c8:93:fc:21:ef:19:ab:40:5e:28:25:8d:72:3c:9a:
6d:ac:1f:81:71:36:a3:a5:3f:0d:27:9c:9b:bf:46:42:8c:e9:
53:83:83:77:a1:f0:e3:31:b9:4d:99:aa:5c:6d:be:43:a5:fe:
2f:dc:95:bb:83:73:17:a4:c0:d4:de:39:a7:45:23:bf:ae:8b:
6a:c2:32:44:67:7f:c8:2f:1e:10:98:13:a7:81:36:e7:ab:a3:
73:73:6a:ee:f8:fb:56:d3:83:df:df:64:e8:4e:95:48:1c:1d:
57:7f:7f:e9:7b:14:ff:3f:f9:15:42:a0:14:49:ed:33:52:fc:
a5:36:52:63:c7:cc:ce:b8:ba:86:d2:61:0a:a6:30:24:5c:3b:
f3:88:f2:47:81:dc:fc:77:62:8c:cb:a0:e4:0f:2d:54:08:64:
bd:a9:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:46 2025 by rpki-client