Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: hFBoCp033MSxI3XvPXZS/m35JYUh9LqBjwOaA8CgtEY=
Subject key identifier: 48:A2:13:EC:5A:B6:C4:62:13:F2:9B:B7:68:C9:50:41:7C:3A:16:F9
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 0199FBEA79DC95CAA94BF2A6C59DE0724EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:11 +0000
Manifest this update: Sun 19 Oct 2025 10:01:11 +0000
Manifest next update: Mon 20 Oct 2025 10:01:11 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: jQ3vS/PKWmgcb3bCyzTuYtD6RlkpyP8cl8jk0zVtyq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:79:dc:95:ca:a9:4b:f2:a6:c5:9d:e0:72:4e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Oct 19 10:01:11 2025 GMT
Not After : Oct 20 10:01:11 2025 GMT
Subject: CN=48a213ec5ab6c46213f29bb768c950417c3a16f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:13:26:30:fc:72:e1:f9:77:4a:89:80:f1:
6c:2d:67:48:f1:48:2b:eb:27:54:9a:08:98:7c:f0:
10:74:50:44:4a:62:a4:b4:7f:cc:7f:01:bb:53:89:
53:f1:72:d1:b8:3e:fa:81:31:12:d0:e3:97:09:47:
32:3f:a7:a9:41:bf:6a:9a:92:2e:ad:27:a8:4f:f1:
bc:dc:8e:ef:f4:35:06:eb:bf:8a:17:e4:77:4e:4a:
5b:ce:a9:97:67:49:af:ce:0e:0d:ad:a4:e9:96:98:
d6:c9:cf:ee:b6:39:18:22:aa:f1:82:a7:17:21:05:
5d:dc:b2:6f:79:f0:fb:bc:ba:e5:b6:e0:49:75:6a:
4c:32:8b:eb:cf:9f:51:3a:64:2b:59:5c:e0:6e:87:
6c:c1:63:b5:bb:b1:ea:f2:6e:fd:35:2c:89:79:c9:
8e:2c:f7:1f:0e:ef:7e:6c:1c:ce:a1:6d:b1:19:89:
4b:fd:b0:43:de:6e:2d:e7:7f:3c:78:aa:70:b5:fb:
10:38:37:52:f2:62:02:54:87:71:aa:0b:79:44:8f:
7e:15:31:65:35:f7:dc:1c:06:bb:74:3e:99:3c:78:
2e:a3:ac:56:75:7c:46:fd:76:c3:dc:d2:47:17:20:
95:83:56:8d:4b:2e:cc:46:30:6e:19:04:a9:87:3d:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:13:EC:5A:B6:C4:62:13:F2:9B:B7:68:C9:50:41:7C:3A:16:F9
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:26:2d:a0:36:97:b5:51:8b:26:03:1b:c6:e3:eb:91:f4:30:
7e:3c:7b:01:91:53:7b:4a:89:ab:5b:f5:75:63:f8:d9:21:e9:
a0:75:6f:1d:16:21:ba:9b:45:a1:c3:75:56:72:14:50:c6:16:
c0:b1:21:bd:dc:38:d6:93:24:be:8e:0f:b7:0a:ac:5a:12:56:
dd:4b:ef:49:ea:09:a8:1f:26:be:c5:7f:45:79:0a:26:01:b7:
8b:c1:f1:62:06:e1:31:f5:85:b2:c1:1d:dc:69:71:2b:df:4e:
54:e2:c8:98:ae:d6:e8:59:82:2e:9f:55:43:95:3a:54:9f:f1:
ca:f7:29:e6:d5:f0:28:c1:ff:f2:69:13:ad:9a:ff:3d:ab:06:
ed:b5:64:da:cd:11:b1:49:3e:4e:df:13:4b:bc:15:87:76:71:
65:6c:3d:12:96:8a:d1:4c:5c:98:08:e0:c5:1c:69:0c:0d:fb:
1e:57:ab:d8:43:b9:a1:50:67:37:45:0b:c7:02:00:2b:b5:04:
0b:81:c0:f0:54:91:0e:ae:fa:af:95:43:35:7e:0a:96:8d:8a:
c4:76:07:fc:8d:3d:8f:c2:ea:57:48:02:3a:e8:f2:65:55:da:
6e:85:46:c1:1e:b3:81:f6:5f:ac:bc:b1:2a:4c:37:28:01:83:
23:a4:d7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76nnclcqpS/KmxZ3gck68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2E2NTkyYzBmZTM0ZmFiZWZjYzQzNzE5Mjg3Yjg0NGQ0
N2NhMDMwHhcNMjUxMDE5MTAwMTExWhcNMjUxMDIwMTAwMTExWjAzMTEwLwYDVQQD
Eyg0OGEyMTNlYzVhYjZjNDYyMTNmMjliYjc2OGM5NTA0MTdjM2ExNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX0TJjD8cuH5d0qJgPFsLWdI8Ugr
6ydUmgiYfPAQdFBESmKktH/MfwG7U4lT8XLRuD76gTES0OOXCUcyP6epQb9qmpIu
rSeoT/G83I7v9DUG67+KF+R3TkpbzqmXZ0mvzg4NraTplpjWyc/utjkYIqrxgqcX
IQVd3LJvefD7vLrltuBJdWpMMovrz59ROmQrWVzgbodswWO1u7Hq8m79NSyJecmO
LPcfDu9+bBzOoW2xGYlL/bBD3m4t5388eKpwtfsQODdS8mICVIdxqgt5RI9+FTFl
NffcHAa7dD6ZPHguo6xWdXxG/XbD3NJHFyCVg1aNSy7MRjBuGQSphz21WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiiE+xatsRiE/Kbt2jJUEF8Ohb5MB8GA1UdIwQY
MBaAFC/KZZLA/jT6vvzENxkoe4RNR8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2Ut
MWVjZDk5MThiM2E2LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83YmY2ODktODJmYy00ODE2LThlY2UtMWVjZDk5MThiM2E2
LzEvTDhwbGtzRC1OUHEtX01RM0dTaDdoRTFIeWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCYtoDaX
tVGLJgMbxuPrkfQwfjx7AZFTe0qJq1v1dWP42SHpoHVvHRYhuptFocN1VnIUUMYW
wLEhvdw41pMkvo4PtwqsWhJW3UvvSeoJqB8mvsV/RXkKJgG3i8HxYgbhMfWFssEd
3GlxK99OVOLImK7W6FmCLp9VQ5U6VJ/xyvcp5tXwKMH/8mkTrZr/PasG7bVk2s0R
sUk+Tt8TS7wVh3ZxZWw9EpaK0UxcmAjgxRxpDA37Hler2EO5oVBnN0ULxwIAK7UE
C4HA8FSRDq76r5VDNX4Klo2KxHYH/I09j8LqV0gCOujyZVXaboVGwR6zgfZfrLyx
Kkw3KAGDI6TXmw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:58 2025 by rpki-client