Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: 95xUKc7SJsBXIg87OptxbPZKsnGno+ZkWSVQ3mmcl6c=
Subject key identifier: CC:12:E3:1E:B7:FA:C4:59:1E:AD:EB:D7:AF:BA:BA:3E:B6:A6:38:F4
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0199FB458EBFE3974B3DA5CBCB32AC5AA622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 140B
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: qVT5bVFAvMl7m2ohJDiCtYUYJmw9/K0wQ+jjWCYFEio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8e:bf:e3:97:4b:3d:a5:cb:cb:32:ac:5a:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=cc12e31eb7fac4591eadebd7afbaba3eb6a638f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:50:19:45:dd:b4:61:ff:9e:70:5e:66:f0:
fc:22:2b:a9:19:a0:bc:17:d4:a6:57:f9:64:ff:76:
0d:00:20:ba:cb:0e:29:f5:9f:70:e9:f9:49:86:b0:
fc:a8:8d:00:07:be:78:0c:3e:c1:cb:50:10:ea:c8:
1d:a9:1d:cf:23:75:25:dd:82:e0:1f:8c:ee:ce:b4:
2a:7b:65:3c:b4:36:f2:8a:2a:6e:84:33:a0:3a:89:
a9:1c:51:cc:fa:73:85:36:40:f4:c1:72:42:13:18:
52:25:de:8f:36:11:e9:c9:14:a0:06:19:80:80:85:
d8:a0:c6:db:3f:b4:ae:ad:a3:63:fb:92:5d:8f:8c:
ea:bf:b0:cb:00:f0:0f:52:67:23:89:12:dc:5d:20:
68:59:0d:5a:a2:74:07:03:25:3f:32:a4:d5:88:1d:
0c:fe:bb:62:4c:dd:49:27:97:ff:fe:3d:f2:23:ef:
01:1f:e2:69:d0:4c:f4:0a:29:8f:cc:29:90:ee:9c:
28:46:6b:c9:80:ee:3b:25:a2:d1:21:e5:a1:8c:17:
a3:39:b1:97:20:b2:c3:e9:0e:16:50:70:52:62:da:
d2:f8:70:d1:29:63:7f:78:23:0c:4a:44:15:f8:b0:
57:68:e8:77:7d:23:a2:81:19:8d:7e:85:ba:37:85:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:E3:1E:B7:FA:C4:59:1E:AD:EB:D7:AF:BA:BA:3E:B6:A6:38:F4
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:12:fa:80:78:e2:a4:f0:1b:ff:a4:7b:11:6d:84:a5:c4:6d:
b7:b9:6e:7e:c0:0b:5f:d7:34:06:b6:f2:a4:6e:5b:83:23:47:
f7:46:b2:99:4a:b0:bb:a8:9d:d3:46:bf:2a:c6:c3:06:22:23:
00:08:7a:b8:d2:5a:cf:da:3b:54:6e:14:b9:40:56:90:38:26:
a4:d1:3a:ec:bf:ae:c6:5e:fd:43:6e:f3:67:51:ef:e1:1a:19:
61:7d:81:8a:fd:f0:91:50:89:60:00:c0:b3:c6:ec:6a:fc:a8:
81:f1:0a:c3:b4:8d:a6:e4:89:ce:87:48:18:9f:b6:5f:51:52:
cd:5e:f5:e9:59:fd:1a:6f:2f:94:f6:72:6c:1e:2c:7c:76:fe:
7d:49:d8:32:f8:b2:d2:20:f5:27:bf:b0:f7:c9:fb:b9:98:4a:
46:04:4e:df:28:54:9c:6c:4e:07:6e:bf:99:68:c1:fd:63:a1:
72:b9:27:f3:6a:b3:79:03:1f:8c:70:30:67:d7:cf:8f:b3:d1:
ac:7c:ec:83:97:ef:5f:41:0e:60:07:e6:07:7f:4c:93:4c:e9:
b2:4c:41:e1:d8:d7:f8:cb:f9:b6:a8:f0:bb:20:91:77:c7:b9:
2a:3e:6e:de:71:c4:d2:52:60:f0:f2:e9:be:ad:ee:83:52:30:
b4:96:40:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RY6/45dLPaXLyzKsWqYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjg3YTJjMzA5ZDc1NTUzYTQ2ZTEwMjU3NzVlOWFhNDFm
NmIzMzcwHhcNMjUxMDE5MDcwMTAzWhcNMjUxMDIwMDcwMTAzWjAzMTEwLwYDVQQD
EyhjYzEyZTMxZWI3ZmFjNDU5MWVhZGViZDdhZmJhYmEzZWI2YTYzOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73JQGUXdtGH/nnBeZvD8IiupGaC8
F9SmV/lk/3YNACC6yw4p9Z9w6flJhrD8qI0AB754DD7By1AQ6sgdqR3PI3Ul3YLg
H4zuzrQqe2U8tDbyiipuhDOgOompHFHM+nOFNkD0wXJCExhSJd6PNhHpyRSgBhmA
gIXYoMbbP7SuraNj+5Jdj4zqv7DLAPAPUmcjiRLcXSBoWQ1aonQHAyU/MqTViB0M
/rtiTN1JJ5f//j3yI+8BH+Jp0Ez0CimPzCmQ7pwoRmvJgO47JaLRIeWhjBejObGX
ILLD6Q4WUHBSYtrS+HDRKWN/eCMMSkQV+LBXaOh3fSOigRmNfoW6N4WBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwS4x63+sRZHq3r16+6uj62pjj0MB8GA1UdIwQY
MBaAFC+4eiwwnXVVOkbhAld16apB9rM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMt
NzcxN2ViMzE5MTYwLzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMtNzcxN2ViMzE5MTYw
LzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBL6gHji
pPAb/6R7EW2EpcRtt7lufsALX9c0BrbypG5bgyNH90aymUqwu6id00a/KsbDBiIj
AAh6uNJaz9o7VG4UuUBWkDgmpNE67L+uxl79Q27zZ1Hv4RoZYX2Biv3wkVCJYADA
s8bsavyogfEKw7SNpuSJzodIGJ+2X1FSzV716Vn9Gm8vlPZybB4sfHb+fUnYMviy
0iD1J7+w98n7uZhKRgRO3yhUnGxOB26/mWjB/WOhcrkn82qzeQMfjHAwZ9fPj7PR
rHzsg5fvX0EOYAfmB39Mk0zpskxB4djX+Mv5tqjwuyCRd8e5Kj5u3nHE0lJg8PLp
vq3ug1IwtJZAjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:12 2025 by rpki-client