Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: sdb4bzgVBNGqjcOwbUl6aC4RsDqSmbH4y1ZSRfIzkGY=
Subject key identifier: 30:61:2C:64:14:E6:66:46:B5:B6:CD:54:AE:55:1B:E2:DF:7D:23:C5
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 0199FB4594486B868DFF31D21C723EDBD997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 78
Signing time: Sun 19 Oct 2025 07:01:05 +0000
Manifest this update: Sun 19 Oct 2025 07:01:05 +0000
Manifest next update: Mon 20 Oct 2025 07:01:05 +0000
Files and hashes: 1: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: rNh6aAskQLl9QyUzoZ0ZwhOpsVTiJMJciqBRq0xocmg=)
2: imHQYg5LjpecUXmRBf2wIK9f70s.roa (hash: fwrQLWCO0tBmX3/PkxZEuXo+JQaCjLY7jAbEzE71wJg=)
3: p-q5NK4QM7flBgA02ibMGvdXFDA.roa (hash: iyRzjTNAy9qfw8qmlS/eRrCPm/exDgyPpvjm/GwckYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:94:48:6b:86:8d:ff:31:d2:1c:72:3e:db:d9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Oct 19 07:01:05 2025 GMT
Not After : Oct 20 07:01:05 2025 GMT
Subject: CN=30612c6414e66646b5b6cd54ae551be2df7d23c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:04:c2:b3:be:29:ce:6e:93:f1:a2:e1:44:
b1:14:bd:eb:35:0c:d8:58:a7:39:38:ef:60:dc:c3:
d0:15:bc:96:55:fb:6b:d8:cc:d9:d9:c6:bd:b3:28:
95:cd:c2:fe:17:00:11:cd:64:86:67:91:36:e6:5a:
db:e1:55:08:b5:51:7a:d5:2b:89:ef:cd:ee:c8:10:
21:05:10:fb:2c:7a:22:b7:27:cc:5e:22:b6:9f:cc:
f6:d8:3b:0a:18:ec:b6:43:ad:b8:4c:96:c7:a6:24:
41:aa:29:81:4b:b1:13:e4:ab:22:a0:78:fb:cf:19:
a9:7d:ae:0c:7f:77:3d:3e:b6:60:ef:cf:fc:9e:4b:
6b:0a:46:f4:30:ea:a6:f9:39:62:30:77:f5:77:80:
ae:ff:90:00:af:f6:f8:ee:78:32:59:c4:23:41:61:
7a:0a:db:01:c5:4c:11:0d:0b:5c:1a:f8:ba:87:c9:
d4:36:ff:28:3d:18:3d:87:38:44:95:5b:b9:33:e0:
db:2c:7b:7f:fb:31:4e:1d:20:27:35:06:6e:14:2a:
cf:6e:e7:68:df:f6:e7:8a:86:07:c0:2e:bd:18:2f:
47:47:c9:cb:ae:ba:8d:36:45:9a:b1:fb:c2:5a:9f:
ca:09:1b:d8:99:63:c6:88:fd:76:b0:3a:7b:7b:2a:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:61:2C:64:14:E6:66:46:B5:B6:CD:54:AE:55:1B:E2:DF:7D:23:C5
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:7b:16:b9:ad:9d:06:89:70:4f:b7:af:b1:87:60:22:ea:
ff:87:7c:93:fa:a4:4c:b9:5d:e7:ae:dd:ff:d6:d3:3b:16:02:
7f:bd:d6:e4:11:f7:02:0c:5f:d3:ee:05:18:5e:70:27:aa:af:
30:34:b9:70:48:e4:fa:32:1d:13:aa:f8:35:61:f4:e5:cb:b4:
f1:5f:6c:87:b2:7f:a0:43:39:8f:b6:77:a6:a3:30:42:dd:49:
c4:e3:f9:c9:86:68:c8:ea:e8:1f:4c:33:d3:f4:a8:76:02:25:
14:55:7b:b5:7c:ad:7e:35:5f:c6:9c:b6:4b:cb:de:20:ca:a6:
c4:74:1c:36:5b:c8:d7:13:c3:ff:bc:5d:eb:97:3a:c9:3b:02:
62:ee:62:8d:e2:7a:63:d7:b3:f3:03:a7:05:ce:84:6c:d6:fe:
66:bc:38:10:d7:30:66:30:3d:89:ba:10:63:99:26:e9:ef:69:
8e:07:34:a5:2b:3e:c1:0f:0a:7b:eb:e4:a8:5e:ee:37:20:ce:
c8:f3:f1:37:f0:e4:71:7d:72:cf:54:92:b6:3f:5a:cd:07:95:
a3:a3:00:a4:cb:d6:92:0d:29:5f:b6:78:6e:5e:06:8a:07:32:
c5:95:b5:48:74:32:d0:54:05:31:74:21:d0:fc:7a:11:d8:43:
a9:a2:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:33 2025 by rpki-client