Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File: L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier: XqpBuZW7G7xXPl3BG4ONY8X1M/jPY77opyGSfRSKz1A=
Subject key identifier: 94:54:BA:49:B1:A3:80:AB:3B:9B:E3:8A:DA:E3:38:03:FB:A4:DA:BE
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 0199FFFEB71A5DB780515017BEA93C2FE881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number: 10F9
Signing time: Mon 20 Oct 2025 05:01:46 +0000
Manifest this update: Mon 20 Oct 2025 05:01:46 +0000
Manifest next update: Tue 21 Oct 2025 05:01:46 +0000
Files and hashes: 1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: CyP0WI12P4v2814TsjaEBDpW5wy6AgmbovozuMB4aDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b7:1a:5d:b7:80:51:50:17:be:a9:3c:2f:e8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Oct 20 05:01:46 2025 GMT
Not After : Oct 21 05:01:46 2025 GMT
Subject: CN=9454ba49b1a380ab3b9be38adae33803fba4dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:32:cc:ab:7f:08:94:36:e5:81:17:50:87:
3e:61:b2:86:9b:a3:0c:7e:59:42:29:29:4a:fc:c6:
18:32:6c:5b:ac:6d:1a:11:02:55:4f:9f:50:1f:78:
e8:db:5e:cc:ee:85:fa:3f:e1:1c:33:25:69:9a:bc:
63:79:5e:55:11:44:56:f1:97:3a:e7:d6:6e:29:6f:
0e:13:70:ef:b4:2c:7a:40:16:6e:99:e8:33:a5:b4:
ce:20:41:fe:6f:15:8b:63:4e:b2:29:83:9d:5f:8e:
59:3b:64:67:12:b8:c0:49:6f:32:ee:b5:ac:c3:e0:
f9:bf:c9:ab:0e:67:d1:1d:d8:4c:2c:fc:39:71:af:
26:c3:b8:82:f7:af:10:68:b2:62:6d:d0:78:8f:06:
41:5b:38:47:07:a5:92:9d:fb:d0:7f:92:d8:60:54:
ba:cb:89:06:33:c8:a1:37:d2:d5:32:57:59:91:93:
4e:c2:eb:47:a3:b9:66:bd:31:50:9e:ab:6d:eb:6e:
c7:83:dc:d6:16:32:7f:ca:e4:c2:e5:a2:dd:34:4f:
dc:70:9f:95:e0:81:8d:25:22:13:5a:82:7f:8d:6f:
ed:d4:58:01:31:fd:e2:0f:0c:6c:43:3a:f4:e6:2a:
84:6e:f7:61:00:95:71:a5:65:fd:20:5c:7d:1a:51:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:54:BA:49:B1:A3:80:AB:3B:9B:E3:8A:DA:E3:38:03:FB:A4:DA:BE
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4c:32:1d:86:25:9e:34:75:6a:fd:98:70:f7:fb:df:32:95:
ef:a2:5e:fe:b4:99:0d:d4:4c:66:f1:84:20:19:d5:55:6f:9e:
93:1a:30:ac:3b:75:aa:22:ef:d3:2a:0e:a2:1d:4f:1f:26:e8:
79:b8:b6:0e:cc:25:73:82:3c:17:88:43:06:82:0b:2d:2a:48:
f1:92:71:da:63:4a:a3:7f:de:14:53:21:06:ec:5a:c5:8d:bb:
89:b2:d4:4a:72:d5:90:71:7b:19:9a:4b:19:fb:ff:6c:83:66:
75:1d:98:20:dd:fd:3b:90:27:be:78:86:38:30:aa:9e:b6:21:
cc:dc:0a:51:31:63:c9:ed:f4:62:22:4a:9e:27:d8:d8:a3:cd:
af:2e:1a:d0:1e:10:63:89:70:22:38:bd:23:45:41:e5:8a:cf:
8a:66:c1:f1:32:22:43:34:b5:2a:d4:ec:f7:9c:2b:75:0b:f5:
bc:7c:62:44:64:80:b1:0c:d5:e0:9c:5d:df:aa:4b:6d:2e:d4:
33:17:90:07:ff:60:c4:d5:c4:5d:08:41:8b:79:83:50:c5:53:
67:00:75:20:c2:3f:75:96:22:be:2b:80:8a:d7:bf:e7:d2:a2:
78:5c:76:38:cd:27:20:b9:ed:71:51:8f:38:1a:6a:3e:b8:d0:
96:79:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:48 2025 by rpki-client