Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: 1D3MH13Oh2bE0EM3yUoWNpT0LvMYR+SAbtek9mmaVkg=
Subject key identifier: 59:1D:A8:FE:F7:16:EB:8E:2E:20:77:76:37:70:7E:2C:28:1F:DC:5A
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 0199FBEB6DD18D414A2D6C76F3676F54052D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 02C2
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: uBA1TP7bjtWdxlBjAJdd+kKbiv+AC5eYUOfTPxlMcHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6d:d1:8d:41:4a:2d:6c:76:f3:67:6f:54:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=591da8fef716eb8e2e20777637707e2c281fdc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:a0:5e:3b:ec:20:12:0f:29:2b:28:7c:6c:
5c:6e:01:e0:1e:56:29:af:c7:bc:a3:57:8f:a0:81:
80:e5:bd:81:14:99:73:61:c4:8d:b5:83:17:bb:3c:
d2:30:44:ac:7c:8a:5c:75:e5:4c:c4:82:79:d6:b0:
ee:4d:51:f2:f1:81:e0:a8:68:08:08:30:6f:3e:54:
fa:df:8f:7d:c4:31:5f:be:50:8d:e3:08:3f:f6:19:
79:9e:12:ba:b5:2d:6e:54:8b:f5:bb:01:97:2c:50:
c5:05:e1:d1:da:a6:96:ed:df:58:b6:58:96:2a:3b:
90:c4:8b:d1:81:5b:ff:ae:74:36:ac:a7:db:3d:a4:
39:7a:73:3e:c8:52:56:03:7a:de:53:f1:99:81:b1:
5c:c0:33:96:22:75:bd:ba:1b:8d:3c:c7:96:73:55:
f3:35:db:fc:6b:23:b1:db:b5:c7:73:90:14:c0:fd:
6b:2d:bb:82:6c:73:e5:f6:5a:01:c9:c3:ae:64:c7:
48:8d:fb:50:ce:b1:e4:27:68:d6:6f:1b:40:c2:ed:
6c:dd:0a:cf:a4:79:c0:af:50:dc:ca:08:81:6a:48:
6c:67:20:41:2c:c5:bf:5e:b2:bf:15:3d:54:d1:06:
4e:14:60:1f:43:6d:72:14:fc:e3:4a:3f:aa:c7:88:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:A8:FE:F7:16:EB:8E:2E:20:77:76:37:70:7E:2C:28:1F:DC:5A
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:13:d1:42:fa:4a:77:da:47:28:66:57:74:d5:a0:27:aa:62:
3f:c3:70:44:fd:44:52:a0:8f:04:a5:de:b8:28:09:2c:6d:c2:
ee:16:9d:1f:c8:b4:1a:1c:a8:4c:d6:91:a0:d8:f8:06:e5:55:
82:c5:99:51:70:95:9f:16:07:bb:0b:6d:38:31:14:72:c1:2d:
a4:dc:ee:6e:7a:47:ed:08:cb:58:f3:3b:21:59:a3:da:65:2c:
b6:ed:07:6a:d9:7d:f1:6e:f3:eb:59:24:bd:c7:50:aa:f9:73:
fe:cf:9b:29:25:1d:4e:b7:b3:5d:22:ca:44:16:c0:7b:38:0b:
1e:f3:98:15:b0:d2:14:03:6a:5a:18:bb:1c:54:1f:9d:b6:bb:
f0:e2:d5:5a:07:d0:59:ee:2d:be:1b:f4:8d:c4:d0:17:78:f8:
15:89:3d:66:c6:78:4f:bc:3e:84:da:0d:18:b9:80:70:a1:0c:
b9:9b:99:3d:93:7c:2f:7e:23:3e:eb:aa:43:5a:d7:64:d1:ba:
60:00:2d:3d:5f:90:d1:0f:b1:69:7b:17:7c:c3:88:05:2b:8c:
b9:36:50:af:ac:29:8e:02:2c:41:ff:b7:ee:09:52:5d:8a:dc:
82:66:3b:3b:df:c9:79:ee:03:50:29:68:07:2c:81:b0:d2:5f:
82:20:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:18 2025 by rpki-client