Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: FgvNHtUwHoIDVHsuurRJhaqx2e23HkvXFN1HmRyPVis=
Subject key identifier: EB:E9:A1:01:18:CD:5C:8F:D7:09:46:50:7E:6F:30:A9:3F:A5:8A:DC
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0198D7E10F8886766EA6572C36D9C3ABC402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 1374
Signing time: Sat 23 Aug 2025 17:01:47 +0000
Manifest this update: Sat 23 Aug 2025 17:01:47 +0000
Manifest next update: Sun 24 Aug 2025 17:01:47 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: /5717PQ+b2gUJ4/3SJNn0j5AvBj1WyZ95mJv5EIymUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:0f:88:86:76:6e:a6:57:2c:36:d9:c3:ab:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Aug 23 17:01:47 2025 GMT
Not After : Aug 24 17:01:47 2025 GMT
Subject: CN=ebe9a10118cd5c8fd70946507e6f30a93fa58adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:fc:fb:bb:ce:a3:8c:8f:39:02:0b:89:85:
be:9d:e6:dd:19:71:c0:9d:7d:5e:1e:fc:72:bc:08:
7d:fd:8f:74:bf:10:78:79:eb:53:da:0b:e8:d6:9b:
27:1c:ac:a2:41:10:24:b0:cb:85:42:21:4b:3d:c4:
f4:fd:42:c2:6f:fe:62:85:bd:63:7f:af:30:8d:ff:
d7:07:b8:2f:9e:79:ce:03:a8:55:42:16:86:cc:aa:
54:05:17:be:24:c5:8a:4c:90:8a:cd:52:c8:2a:fb:
97:72:85:a7:0a:f5:ab:5e:5b:fa:0f:8a:73:20:8d:
3d:df:e4:59:8a:f3:4d:e1:bc:6c:f4:e6:f5:38:8e:
72:aa:c1:7e:cb:13:14:c7:30:5a:a2:c8:7b:7e:5e:
eb:4f:fd:eb:0b:51:9c:7c:be:ce:87:2c:b8:28:b2:
b8:e6:9f:fb:1d:e1:1d:a9:bd:4b:c2:23:b3:7a:68:
3a:31:b7:7d:ce:3b:99:e9:fd:74:41:e7:64:8e:e5:
ae:26:26:14:d9:30:48:88:e6:5b:e6:80:b9:b1:c4:
b5:45:5c:28:6a:2f:5f:ef:be:78:9a:af:91:b4:e6:
a0:da:e6:6b:e0:d2:3b:8a:46:9b:7a:a3:9a:6b:bd:
08:ea:04:5c:23:a6:b3:55:b4:22:89:16:3c:cf:13:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:A1:01:18:CD:5C:8F:D7:09:46:50:7E:6F:30:A9:3F:A5:8A:DC
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1a:6b:48:b0:4b:8b:75:68:ff:0c:f4:4b:33:b4:13:38:37:
01:24:ba:ad:94:57:46:68:72:3c:d1:65:0f:f2:93:f3:95:67:
e7:2e:0f:f4:77:95:ac:53:5f:ae:b3:70:ea:5f:7e:0f:c8:b0:
9d:b1:79:ac:1e:31:a1:97:42:ff:d8:52:fc:0f:55:b3:39:bc:
99:4c:db:f8:fd:cb:18:c8:4a:d8:02:b0:78:84:d2:cf:52:80:
5a:a2:12:4a:d2:f6:d9:c5:ac:4a:c6:c0:78:a8:d2:32:a7:86:
cf:5d:33:c6:8f:87:7d:16:1c:a1:ef:53:80:23:d9:28:d9:ff:
40:f4:d7:98:6c:c7:b7:8d:fc:77:ca:c7:35:30:49:a6:49:ae:
e1:c1:29:d4:a4:3f:ce:d9:3d:d9:45:fa:e9:11:80:c6:37:d7:
86:9a:2a:75:68:d2:c0:d6:8f:f3:10:82:19:88:9f:24:84:4b:
02:ae:04:f6:92:c3:85:c3:85:ab:fa:cc:bd:5c:ef:eb:3c:e4:
2b:f3:11:18:d4:28:24:68:f7:e1:b6:5f:d1:fd:c8:df:8e:3f:
49:25:71:f6:ec:6e:9f:98:63:57:a4:5c:86:83:a7:da:83:60:
9f:87:31:b4:17:ff:df:dd:7f:e9:b9:eb:e1:63:09:5b:ef:e5:
c3:e3:bd:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4Q+IhnZuplcsNtnDq8QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjg3YTJjMzA5ZDc1NTUzYTQ2ZTEwMjU3NzVlOWFhNDFm
NmIzMzcwHhcNMjUwODIzMTcwMTQ3WhcNMjUwODI0MTcwMTQ3WjAzMTEwLwYDVQQD
EyhlYmU5YTEwMTE4Y2Q1YzhmZDcwOTQ2NTA3ZTZmMzBhOTNmYTU4YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2on8+7vOo4yPOQILiYW+nebdGXHA
nX1eHvxyvAh9/Y90vxB4eetT2gvo1psnHKyiQRAksMuFQiFLPcT0/ULCb/5ihb1j
f68wjf/XB7gvnnnOA6hVQhaGzKpUBRe+JMWKTJCKzVLIKvuXcoWnCvWrXlv6D4pz
II093+RZivNN4bxs9Ob1OI5yqsF+yxMUxzBaosh7fl7rT/3rC1GcfL7Ohyy4KLK4
5p/7HeEdqb1LwiOzemg6Mbd9zjuZ6f10QedkjuWuJiYU2TBIiOZb5oC5scS1RVwo
ai9f7754mq+RtOag2uZr4NI7ikabeqOaa70I6gRcI6azVbQiiRY8zxMIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvpoQEYzVyP1wlGUH5vMKk/pYrcMB8GA1UdIwQY
MBaAFC+4eiwwnXVVOkbhAld16apB9rM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMt
NzcxN2ViMzE5MTYwLzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zY2ZkOTQtN2Q1MS00NTlhLTgzOTMtNzcxN2ViMzE5MTYw
LzEvTDdoNkxEQ2RkVlU2UnVFQ1YzWHBxa0gyc3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBprSLBL
i3Vo/wz0SzO0Ezg3ASS6rZRXRmhyPNFlD/KT85Vn5y4P9HeVrFNfrrNw6l9+D8iw
nbF5rB4xoZdC/9hS/A9Vszm8mUzb+P3LGMhK2AKweITSz1KAWqISStL22cWsSsbA
eKjSMqeGz10zxo+HfRYcoe9TgCPZKNn/QPTXmGzHt438d8rHNTBJpkmu4cEp1KQ/
ztk92UX66RGAxjfXhpoqdWjSwNaP8xCCGYifJIRLAq4E9pLDhcOFq/rMvVzv6zzk
K/MRGNQoJGj34bZf0f3I344/SSVx9uxun5hjV6RchoOn2oNgn4cxtBf/391/6bnr
4WMJW+/lw+O9uw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:57 2025 by rpki-client