Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: S5cZo3M5lnShYKKjEjQAdKesXiwJNDdmotwcbMglCYw=
Subject key identifier: 68:49:34:7E:37:CA:77:F8:6A:C7:45:19:D7:01:DD:DB:F0:77:1B:BF
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0199FD33F859A04E11AF9CC131A9B395137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: IWPwSKJhCgOZwkPwKy+7vDf9gSe+Xt5Wh0lcSLXtrrI=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f8:59:a0:4e:11:af:9c:c1:31:a9:b3:95:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=6849347e37ca77f86ac74519d701dddbf0771bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:50:c3:ce:b8:3f:50:a5:d7:18:88:00:8f:
4e:62:59:9d:01:4f:7a:29:27:f0:3c:07:04:b0:36:
7a:29:20:fd:99:38:25:e3:c6:50:e2:d8:83:4a:9e:
c0:ef:13:f3:d1:27:dd:e1:d2:1a:50:b4:52:ea:51:
e7:a2:89:85:b5:63:92:f9:6c:e5:87:f9:e1:cd:ba:
a7:de:57:58:93:af:a3:ea:cf:b5:c4:a3:fc:4c:64:
b2:44:23:d5:ec:ec:6f:c9:4f:46:ee:e6:f6:5f:a7:
3f:b2:bf:72:4b:63:9d:fa:0f:71:3d:0f:42:99:f5:
21:18:4e:c2:8e:eb:eb:8b:bb:a3:26:9f:fb:d5:6f:
cb:cd:21:89:0c:c6:af:65:c7:1b:bd:92:34:e1:9a:
57:5f:8f:5d:35:3a:02:79:8b:18:53:63:24:40:0d:
db:1f:45:1b:4b:c3:1c:80:1a:8e:d9:5d:d1:15:0b:
96:4b:d2:ac:10:97:5e:80:9a:d2:ee:da:99:61:dd:
b5:e5:b6:d1:26:05:69:b9:3c:2e:1c:9b:ab:ec:d2:
37:1f:9d:43:cc:c6:92:b3:99:10:2b:44:53:8a:4f:
e8:52:0b:94:ae:e9:f2:d2:4e:23:ad:ba:66:47:80:
9a:a3:04:d6:7e:80:a1:11:6b:f6:da:1b:56:15:48:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:34:7E:37:CA:77:F8:6A:C7:45:19:D7:01:DD:DB:F0:77:1B:BF
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e8:d6:3e:30:57:a3:f5:82:47:5a:fa:7e:79:16:a5:64:96:
33:a2:57:1a:d6:56:ef:b3:40:9a:03:95:e5:b2:05:9f:b1:b9:
d7:5c:09:95:d2:55:f8:0c:0b:2f:1c:e4:fa:c2:59:a0:1f:b6:
2c:56:0f:45:71:e8:8b:04:6a:5c:f0:bb:05:46:6d:a9:8d:39:
7a:f4:74:82:aa:29:a9:41:52:7f:b1:47:bc:02:10:4c:1e:1d:
62:43:80:ea:b5:e8:7c:6f:24:80:3b:3f:a7:fc:ae:37:f8:b7:
31:6c:62:aa:b5:a5:49:3f:b9:20:5a:11:21:7c:6c:c9:1e:7c:
cf:d1:91:9d:89:13:6b:1e:59:b5:b2:ea:dd:c9:b7:63:7f:45:
9e:05:8a:84:90:7a:d6:45:1f:31:ba:dd:eb:24:53:ca:89:21:
ac:c3:2e:65:fb:76:50:ad:88:7c:d5:18:00:3a:96:61:9c:03:
39:03:cd:cb:df:19:d3:14:7c:ab:dd:9d:7d:75:9e:13:d9:39:
ba:07:bb:56:cd:0b:aa:ec:1f:1f:ae:c1:09:e9:9d:43:0f:c2:
69:51:69:eb:54:20:02:1d:c5:00:02:8c:f7:29:4a:8a:83:37:
c0:9b:ec:2b:2a:ce:76:82:a0:ea:ab:6e:96:7c:31:11:b8:05:
d3:25:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:29 2025 by rpki-client