Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
File: L8tesBINBwkLEmJWxFo1KC1awKw.mft (raw, json)
Hash identifier: QNiwN9aGQgQsagkH5IZrNJKTLn2INBi1FULHiut6Ts0=
Subject key identifier: 8F:04:83:D4:D3:62:B1:F6:65:65:95:F2:C0:B3:0D:1C:0D:8B:D7:B1
Authority key identifier: 2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
Certificate issuer: /CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Certificate serial: 0199FDDA3DA57B1EB1A5047743F4C4365E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 19:02:42 +0000
Manifest this update: Sun 19 Oct 2025 19:02:42 +0000
Manifest next update: Mon 20 Oct 2025 19:02:42 +0000
Files and hashes: 1: L8tesBINBwkLEmJWxFo1KC1awKw.crl (hash: NhZzeofe4tpvi3auLfWxCaUHHEeq8qvmID8dMv70KbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:3d:a5:7b:1e:b1:a5:04:77:43:f4:c4:36:5e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Validity
Not Before: Oct 19 19:02:42 2025 GMT
Not After : Oct 20 19:02:42 2025 GMT
Subject: CN=8f0483d4d362b1f6656595f2c0b30d1c0d8bd7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:14:4f:f5:9d:5f:7e:69:35:90:73:a6:70:
a1:fe:b9:c8:9c:e9:c4:0e:cf:ec:e0:75:73:ab:71:
d9:e0:3d:80:99:2b:54:d4:b1:7d:7f:87:d2:2e:78:
3a:06:8a:16:fe:63:73:97:3b:d9:35:bd:3a:16:b5:
cc:12:74:d8:a4:59:0c:7e:b4:74:13:ca:e8:e0:0e:
ff:14:8e:0c:f9:d3:25:ff:0e:cc:06:80:cc:43:86:
bb:57:63:63:43:ee:39:a1:b8:b6:08:35:9f:12:48:
75:9d:4c:79:b1:8b:df:6a:f5:b4:16:8b:ee:ac:d9:
23:b2:01:db:76:33:bc:6a:fe:5f:0b:7e:57:1c:fc:
d9:ca:38:93:00:37:a3:46:a3:dc:2c:c0:96:21:93:
c7:01:cb:67:23:6d:f0:5e:63:56:4d:03:ce:f2:21:
54:95:da:ac:57:3e:4c:61:04:79:79:00:56:8a:4a:
32:fd:e4:4f:1c:99:e6:3a:e4:91:0c:ac:28:6e:e7:
80:2a:19:95:d7:42:a8:62:43:79:be:21:db:35:a2:
7f:7b:43:f9:17:6a:1d:09:c9:af:7c:71:bc:4a:7c:
3b:68:5e:36:8d:5f:8f:fc:c4:1b:90:cb:3d:5a:33:
58:75:f2:7b:b7:5a:19:f2:80:4b:67:f3:46:db:3c:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:83:D4:D3:62:B1:F6:65:65:95:F2:C0:B3:0D:1C:0D:8B:D7:B1
X509v3 Authority Key Identifier:
keyid:2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:43:f1:02:c5:00:6c:0c:f5:97:fb:a0:b6:41:e8:df:72:
a6:64:54:cd:46:ff:a1:cd:4b:a7:38:41:b7:0f:56:b7:a9:38:
4a:0c:0e:4c:2a:3a:0b:01:f8:3a:96:b3:15:53:4c:c2:0b:4a:
b2:38:bd:65:81:c0:4c:c1:41:b1:b7:79:af:78:41:f5:32:42:
71:03:38:0b:87:12:78:3c:b4:0f:8c:2a:59:2f:49:c4:78:db:
0d:58:e1:bf:01:b1:b6:15:f4:44:a6:3e:85:c7:24:eb:c3:18:
c5:47:5d:ea:36:da:bc:4c:29:d6:95:dd:81:f7:fe:05:44:15:
38:28:44:4c:cb:44:c5:77:d3:3c:34:c5:da:88:96:99:12:44:
d1:0c:1e:4c:2f:9c:46:2e:0a:9c:69:d9:b0:93:48:b3:e7:d5:
30:26:50:b9:d7:f1:99:0f:35:65:4b:98:a2:06:25:fd:6e:95:
1b:9b:42:c7:1f:09:55:46:8d:92:53:49:fd:f8:03:e8:80:b1:
51:72:af:d8:25:5c:16:cb:44:8a:36:17:db:45:bc:c7:1f:9b:
ac:e9:4d:43:1d:78:58:f3:59:fa:2e:8d:96:93:60:5a:9b:e4:
f7:64:10:25:bf:8f:86:ff:16:c2:cb:8b:ff:bd:ff:1c:c3:32:
11:a8:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:31 2025 by rpki-client