Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: XvL5WLguP6a1Ndv1nfzU2+e44QmBDp+iVd/ieqhVoHA=
Subject key identifier: 4A:2D:10:B6:B6:AE:0A:BC:A7:6A:2F:7E:6A:14:14:AB:F9:7C:A8:18
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 0199FFC8575E3467FD1EA8EDA77E49CE2F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 168C
Signing time: Mon 20 Oct 2025 04:02:23 +0000
Manifest this update: Mon 20 Oct 2025 04:02:23 +0000
Manifest next update: Tue 21 Oct 2025 04:02:23 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: fGRNZYvd6UwFjLTBkFl5LS8XDNzkD147B6BNvGAk6wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:57:5e:34:67:fd:1e:a8:ed:a7:7e:49:ce:2f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Oct 20 04:02:23 2025 GMT
Not After : Oct 21 04:02:23 2025 GMT
Subject: CN=4a2d10b6b6ae0abca76a2f7e6a1414abf97ca818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:a2:bb:92:3c:df:51:7c:de:a8:b7:76:89:
a7:8e:cf:5d:44:42:22:94:3d:38:fd:93:6c:6a:a0:
22:0c:7e:c0:5a:7a:27:6d:38:a8:95:6b:3d:d5:e1:
02:7e:cb:b2:8f:e7:8f:f6:89:a5:8b:29:46:f2:9d:
61:29:1f:ed:bc:2e:8a:71:e1:9d:8d:5e:65:d3:6b:
ec:06:d5:48:7a:d2:50:ae:ff:82:27:df:e3:57:a8:
0b:dd:2a:90:be:be:13:62:38:62:2e:fc:11:3b:92:
57:f4:30:1e:5a:ac:ad:9b:fc:e9:a6:f4:ca:a4:09:
7f:e5:56:88:69:85:cd:7d:da:ba:79:4d:1c:ff:4b:
80:49:9a:7a:14:13:b6:9f:82:b2:59:08:4b:a4:9e:
b2:b4:55:f4:0d:1f:5e:38:40:cb:ca:fd:d9:c3:5f:
26:3f:e3:48:16:ff:49:6d:7f:dd:3a:bd:f3:d5:b4:
c4:1b:a2:7f:8c:d1:c2:12:a4:1d:3c:3b:2d:92:73:
84:81:4a:c7:5f:ce:2e:42:96:c0:18:0e:85:f2:87:
c4:25:0e:30:74:fa:73:6e:aa:e8:e9:a5:74:fe:cb:
e7:89:82:12:85:54:d1:df:c6:18:f6:45:0c:63:45:
0d:ab:cc:eb:ba:17:8e:57:de:e2:a1:d4:eb:c6:b0:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:10:B6:B6:AE:0A:BC:A7:6A:2F:7E:6A:14:14:AB:F9:7C:A8:18
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:32:06:8c:68:c7:99:e3:dc:30:9f:a3:b0:47:f2:c6:37:
8c:a3:b8:a7:1c:88:95:f9:fe:3d:05:8c:72:7f:6b:4d:1a:55:
95:90:14:8c:bb:95:e6:5e:6c:d0:1e:5e:00:2b:55:b9:7e:e8:
c0:c2:e6:9a:79:f4:ed:6a:ad:e5:ff:a3:ac:86:f9:d6:f7:11:
4d:46:f2:a2:ca:83:e7:8f:43:8d:be:07:83:65:14:59:c5:b3:
79:ab:44:55:c7:ed:a7:12:ae:f5:67:ed:f7:3b:47:0c:9b:b0:
be:bb:d2:da:e1:4c:c9:41:5a:d2:0f:39:64:5f:2b:54:2c:fa:
19:15:47:ab:4a:13:0d:f4:83:8b:23:ec:27:e7:70:9a:57:2a:
f3:cf:2e:44:b6:e9:57:46:f1:db:60:8a:18:d5:21:26:1a:d4:
de:69:61:ab:32:14:13:ce:4c:17:07:7a:06:87:8c:58:ac:1a:
de:3a:a2:b3:98:a9:c4:0c:82:63:c9:fa:ff:af:ed:2b:1e:53:
b3:86:ca:e5:83:3c:55:c8:c4:d0:86:d4:0f:85:0c:de:0d:b0:
82:32:45:fc:ba:c8:e8:39:ee:4f:9d:a0:47:34:46:4f:14:10:
1c:73:cc:0f:7d:e5:0e:44:bd:e5:90:8a:96:58:e6:d9:08:aa:
04:be:57:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yFdeNGf9Hqjtp35Jzi9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3Yzc1N2YyZjNiMjI5MGJiYzI4ZDY1ZjliZGYwMDE2ZjYx
ZjEzOTcwHhcNMjUxMDIwMDQwMjIzWhcNMjUxMDIxMDQwMjIzWjAzMTEwLwYDVQQD
Eyg0YTJkMTBiNmI2YWUwYWJjYTc2YTJmN2U2YTE0MTRhYmY5N2NhODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnaiu5I831F83qi3domnjs9dREIi
lD04/ZNsaqAiDH7AWnonbTiolWs91eECfsuyj+eP9omliylG8p1hKR/tvC6KceGd
jV5l02vsBtVIetJQrv+CJ9/jV6gL3SqQvr4TYjhiLvwRO5JX9DAeWqytm/zppvTK
pAl/5VaIaYXNfdq6eU0c/0uASZp6FBO2n4KyWQhLpJ6ytFX0DR9eOEDLyv3Zw18m
P+NIFv9JbX/dOr3z1bTEG6J/jNHCEqQdPDstknOEgUrHX84uQpbAGA6F8ofEJQ4w
dPpzbqro6aV0/svniYIShVTR38YY9kUMY0UNq8zruheOV97iodTrxrB3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEotELa2rgq8p2ovfmoUFKv5fKgYMB8GA1UdIwQY
MBaAFJfHV/LzsikLvCjWX5vfABb2HxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYt
MjA5M2I2ZGZmYTY0LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83Y2FiMTUtYzkwNC00MjM2LTg5YWYtMjA5M2I2ZGZmYTY0
LzEvbDhkWDh2T3lLUXU4S05aZm05OEFGdllmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi8yBoxo
x5nj3DCfo7BH8sY3jKO4pxyIlfn+PQWMcn9rTRpVlZAUjLuV5l5s0B5eACtVuX7o
wMLmmnn07Wqt5f+jrIb51vcRTUbyosqD549Djb4Hg2UUWcWzeatEVcftpxKu9Wft
9ztHDJuwvrvS2uFMyUFa0g85ZF8rVCz6GRVHq0oTDfSDiyPsJ+dwmlcq888uRLbp
V0bx22CKGNUhJhrU3mlhqzIUE85MFwd6BoeMWKwa3jqis5ipxAyCY8n6/6/tKx5T
s4bK5YM8VcjE0IbUD4UM3g2wgjJF/LrI6DnuT52gRzRGTxQQHHPMD33lDkS95ZCK
lljm2QiqBL5X8g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:07 2025 by rpki-client