Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
File: L8tesBINBwkLEmJWxFo1KC1awKw.mft (raw, json)
Hash identifier: 6mNPzP91WcicWP818gIQCvaslEwgzir1ZlRS4ydbzHs=
Subject key identifier: E4:88:6E:5A:59:C8:A5:A2:44:B4:BF:B8:DD:E3:5B:0E:E7:D4:72:C0
Authority key identifier: 2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
Certificate issuer: /CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Certificate serial: 0198D4729125F2D8CD52D224C5E1BCECAB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
Manifest number: FD
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: L8tesBINBwkLEmJWxFo1KC1awKw.crl (hash: smUtQ5fdT7xoC0pc/2Lvsf+sgpM6mHjGyuWUu/qrgys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:91:25:f2:d8:cd:52:d2:24:c5:e1:bc:ec:ab:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=e4886e5a59c8a5a244b4bfb8dde35b0ee7d472c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:e1:2e:fb:0d:9d:30:2d:6b:93:bf:60:bc:
46:e1:5c:ed:3a:1a:c1:a7:d6:fc:7e:cf:05:7a:c8:
25:43:2c:ac:0e:8e:45:df:47:a4:0e:34:c4:77:5c:
fb:a5:ec:80:35:6b:d9:dc:b2:11:16:3a:14:a6:ec:
ae:c4:5f:1d:15:0f:f6:5e:75:b8:c7:15:ee:93:f2:
2d:7d:88:0a:81:a6:b2:24:41:e8:12:e8:a6:42:4f:
17:c7:9c:87:c2:ca:68:0f:38:8d:ff:7e:18:5d:0b:
98:99:70:aa:77:c0:d8:4f:bc:bd:4c:31:ca:49:b1:
46:d6:c7:81:56:43:64:fd:89:3f:7a:fd:ff:a0:19:
ca:75:0e:50:d5:50:4d:e9:a8:04:a4:d9:2e:20:41:
7b:ab:48:1c:7a:95:29:71:a7:b1:d2:ad:ce:92:d0:
0c:49:a7:97:21:81:20:71:a6:95:8b:38:34:54:c2:
4f:96:24:fb:34:56:6b:cf:eb:3c:11:05:8a:9c:71:
ea:df:9f:7c:0b:d2:63:76:42:47:3f:7d:da:ae:e1:
7c:16:46:a3:4e:64:7b:9e:c7:2a:a2:b1:78:8c:12:
3f:56:cd:90:86:4b:66:e5:e2:c5:f5:f0:88:e1:ae:
63:07:69:a4:51:4f:36:20:51:a9:04:24:28:7c:9b:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:88:6E:5A:59:C8:A5:A2:44:B4:BF:B8:DD:E3:5B:0E:E7:D4:72:C0
X509v3 Authority Key Identifier:
keyid:2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:68:a6:ba:84:5d:b3:11:5e:13:2d:f8:26:28:79:84:85:f7:
3c:8f:ab:f5:0d:56:28:1c:96:d2:df:cd:8d:91:34:73:ee:3e:
f1:7a:59:ed:83:ce:62:e8:45:95:1e:25:be:31:0e:0a:9c:b2:
9c:f0:db:d3:31:98:e9:6f:4f:b4:5b:bf:5d:2e:e1:be:04:d0:
bb:14:db:15:d0:58:0d:02:b6:c6:2b:2e:f7:b1:ca:77:a8:25:
04:91:37:e9:7f:c4:1a:c1:b0:a9:1e:de:9a:4c:13:2d:ad:f2:
7d:5e:1c:59:fa:41:01:e9:9b:55:d0:7c:2a:da:9b:fb:98:de:
96:50:86:db:08:9f:ba:c8:b5:6c:15:f6:b3:89:18:21:81:0a:
6e:05:5f:05:76:81:c7:71:e7:64:d4:a6:80:94:43:8e:c5:7a:
19:f6:47:6d:99:b5:49:1a:9d:90:7b:3c:28:70:34:2b:72:c5:
8e:ac:4f:6a:c2:6f:eb:97:b5:7e:e9:5f:45:68:c1:0f:3b:f4:
e4:66:11:38:ee:a8:3a:a6:c0:e4:1d:af:77:9d:cb:d5:b0:73:
d6:17:d1:a1:e9:7b:04:2d:48:a3:8c:49:c9:48:d5:ab:62:5b:
6b:64:1f:26:dc:ee:60:f7:83:3c:06:47:f8:29:7a:97:7b:c9:
8a:fe:13:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcpEl8tjNUtIkxeG87KsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2I1ZWIwMTIwZDA3MDkwYjEyNjI1NmM0NWEzNTI4MmQ1
YWMwYWMwHhcNMjUwODIzMDEwMjE0WhcNMjUwODI0MDEwMjE0WjAzMTEwLwYDVQQD
EyhlNDg4NmU1YTU5YzhhNWEyNDRiNGJmYjhkZGUzNWIwZWU3ZDQ3MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJnhLvsNnTAta5O/YLxG4VztOhrB
p9b8fs8FesglQyysDo5F30ekDjTEd1z7peyANWvZ3LIRFjoUpuyuxF8dFQ/2XnW4
xxXuk/ItfYgKgaayJEHoEuimQk8Xx5yHwspoDziN/34YXQuYmXCqd8DYT7y9TDHK
SbFG1seBVkNk/Yk/ev3/oBnKdQ5Q1VBN6agEpNkuIEF7q0gcepUpcaex0q3OktAM
SaeXIYEgcaaVizg0VMJPliT7NFZrz+s8EQWKnHHq3598C9JjdkJHP33aruF8Fkaj
TmR7nscqorF4jBI/Vs2Qhktm5eLF9fCI4a5jB2mkUU82IFGpBCQofJuhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSIblpZyKWiRLS/uN3jWw7n1HLAMB8GA1UdIwQY
MBaAFC/LXrASDQcJCxJiVsRaNSgtWsCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDh0ZXNCSU5Cd2tMRW1KV3hGbzFLQzFhd0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iYjU5MTItMTdjNy00NjA3LTk0NzIt
ZTIxNTJlZGY5ZjljLzEvTDh0ZXNCSU5Cd2tMRW1KV3hGbzFLQzFhd0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iYjU5MTItMTdjNy00NjA3LTk0NzItZTIxNTJlZGY5Zjlj
LzEvTDh0ZXNCSU5Cd2tMRW1KV3hGbzFLQzFhd0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWimuoRd
sxFeEy34Jih5hIX3PI+r9Q1WKByW0t/NjZE0c+4+8XpZ7YPOYuhFlR4lvjEOCpyy
nPDb0zGY6W9PtFu/XS7hvgTQuxTbFdBYDQK2xisu97HKd6glBJE36X/EGsGwqR7e
mkwTLa3yfV4cWfpBAembVdB8Ktqb+5jellCG2wifusi1bBX2s4kYIYEKbgVfBXaB
x3HnZNSmgJRDjsV6GfZHbZm1SRqdkHs8KHA0K3LFjqxPasJv65e1fulfRWjBDzv0
5GYROO6oOqbA5B2vd53L1bBz1hfRoel7BC1Io4xJyUjVq2Jba2QfJtzuYPeDPAZH
+Cl6l3vJiv4TfA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:52 2025 by rpki-client