Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier: 5Mp6YYMKow88hKlqhrv9WBORR7P5rx0Q8tsp3UU9HtU=
Subject key identifier: D3:E2:E2:A3:E5:9A:B7:D3:24:48:7E:B3:E0:53:11:5E:AA:B9:DC:ED
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 0199FA6A7E0E46E32B871989CFDEB9C75EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number: 10
Signing time: Sun 19 Oct 2025 03:01:47 +0000
Manifest this update: Sun 19 Oct 2025 03:01:47 +0000
Manifest next update: Mon 20 Oct 2025 03:01:47 +0000
Files and hashes: 1: BTfaTJRkv38NK3OV8P41ApchwpU.roa (hash: YG+c62cfsP2iujTwoHOL3MZnp6ckxYppxq1JP02lQgk=)
2: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: hmT/fGEr84h/RcTfLPlMUmZINdNob/m9swD/nhNb8Tc=)
3: MhT_ic0uhnvyZeHmGUuSvJeWPpk.roa (hash: wzWvYEFygdswmUnUlDOzRDuit/r9AHiuR6372yT7GYk=)
4: tNh8YNIJ-t7wlK_o6eKwKtq426I.roa (hash: Bmf1Jl1G+qWmzgmuLyWRiOcoL0N7ljcIkRUAYdz1q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:7e:0e:46:e3:2b:87:19:89:cf:de:b9:c7:5e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Oct 19 03:01:47 2025 GMT
Not After : Oct 20 03:01:47 2025 GMT
Subject: CN=d3e2e2a3e59ab7d324487eb3e053115eaab9dced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:5a:b4:a7:e7:30:2c:cf:ce:6b:c7:3f:89:
5a:5e:c3:0c:ea:ca:5a:5e:aa:dd:fa:78:eb:4b:5d:
4f:bf:94:5e:d5:9d:5c:31:f3:76:66:9e:7b:a1:78:
a2:6c:a4:13:17:44:87:33:dd:6d:02:5e:7c:8b:f7:
5f:77:54:49:98:f2:d3:ca:fb:08:73:e3:49:de:88:
7a:24:02:63:3d:05:80:66:9a:e6:fc:d6:1e:86:db:
85:a3:a7:7a:2a:48:32:ae:61:d0:c9:b9:40:da:cd:
3d:e7:53:8f:24:33:9e:c5:6e:3f:b2:44:66:f2:a3:
f6:c3:85:6d:81:1c:40:8a:99:2e:6a:34:b6:5a:90:
3c:fa:23:8f:bc:78:0d:46:4e:e5:5c:8c:06:a4:ac:
bc:b6:aa:0e:56:4c:d1:7a:50:64:95:b8:8f:a7:6b:
c3:69:04:94:55:71:be:34:42:e5:20:ed:f1:2e:50:
69:23:d4:0f:6e:2d:b8:df:e6:00:40:60:b0:4a:71:
f3:5a:f4:b5:08:14:97:e8:35:ec:28:71:ad:42:b8:
2a:73:1d:4e:d6:60:dc:a3:b4:cf:a2:1a:82:50:51:
60:fb:2f:93:bf:0c:14:b5:3d:59:92:a7:be:e4:df:
70:23:eb:01:8f:a1:a4:3c:95:6f:10:fe:37:c2:23:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:E2:A3:E5:9A:B7:D3:24:48:7E:B3:E0:53:11:5E:AA:B9:DC:ED
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fc:7e:8d:a7:85:3e:3f:06:c1:08:c7:57:f8:73:f9:08:4e:
93:23:84:43:5a:ea:3b:af:06:f1:59:93:b3:82:18:04:e7:ce:
15:ba:97:4d:d1:b0:45:00:cb:4c:b3:b4:2a:9c:de:62:7b:c9:
1e:87:86:d4:44:ff:30:ed:66:1c:12:9f:ed:2a:25:8c:fe:9b:
ab:20:55:a1:ef:1d:b2:a5:da:7a:48:b4:fc:ab:a0:d6:6e:e7:
6b:b7:1d:c0:be:61:e2:db:92:cc:e2:dd:c9:ff:fc:ee:b8:08:
43:88:07:a1:cc:78:c8:cd:e4:35:5b:aa:f4:07:ab:3e:9e:ab:
a9:13:bc:44:63:a5:e2:a9:be:4e:ce:e8:49:fe:dc:b9:6b:74:
46:7e:30:bb:e4:dd:fe:1d:1f:0b:8f:af:02:c6:75:3d:8c:ae:
93:5b:aa:24:5a:a0:26:56:3a:c1:ef:2d:78:15:1d:16:69:dc:
56:3d:58:00:f8:af:f1:0d:8f:ee:d9:3e:87:5f:88:d3:c5:2b:
11:2c:ab:15:31:d8:66:7c:e5:50:46:c0:39:81:72:4a:05:e2:
4e:a6:65:aa:c8:14:e2:dc:9f:a8:fe:0d:bc:64:67:6a:7d:ab:
24:e0:af:5d:0b:e7:97:c8:36:ec:3b:0f:7e:07:42:25:04:86:
df:0b:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:22 2025 by rpki-client