Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
File: Lr_2z7gya0RylaEbEHhoIS5mX90.mft (raw, json)
Hash identifier: PSHFkrsSXyOHYqIpKhaVDIlxAvtPPzQs3J0wMYYEhsk=
Subject key identifier: BC:40:1E:EA:85:3C:1B:6D:FA:E0:B0:08:79:1E:AA:F4:5A:F0:06:AD
Authority key identifier: 2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
Certificate issuer: /CN=2ebff6cfb8326b447295a11b107868212e665fdd
Certificate serial: 019A00A2CE13FB94D8F2A624209D8E59C686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
Manifest number: 07C4
Signing time: Mon 20 Oct 2025 08:01:00 +0000
Manifest this update: Mon 20 Oct 2025 08:01:00 +0000
Manifest next update: Tue 21 Oct 2025 08:01:00 +0000
Files and hashes: 1: 2EHY0ANqI6GjPJ3q8F_H43sabIk.roa (hash: 6KKbNu6n/lBjRM28xxVSQgucF7edE6uzeJUy5fL1Psg=)
2: Lr_2z7gya0RylaEbEHhoIS5mX90.crl (hash: c4IkvN7E2mnNEy09xWkk6gjaXK+CLa/tsL6pTDYCLhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:ce:13:fb:94:d8:f2:a6:24:20:9d:8e:59:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebff6cfb8326b447295a11b107868212e665fdd
Validity
Not Before: Oct 20 08:01:00 2025 GMT
Not After : Oct 21 08:01:00 2025 GMT
Subject: CN=bc401eea853c1b6dfae0b008791eaaf45af006ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:36:36:f2:fd:c4:d8:cb:38:3c:40:cf:60:
37:61:6f:43:97:6a:1e:9e:d8:6a:4d:93:cf:e6:ac:
3f:36:2e:9e:1d:f9:ad:ee:a8:86:6e:f4:50:d4:6c:
e0:22:30:dd:36:c2:02:47:bb:46:e8:da:5b:2a:d1:
2e:d4:0f:fe:f1:c4:26:c8:82:0c:cc:f8:a8:33:d7:
98:d4:09:74:e1:11:97:c8:4e:fb:2c:d7:ee:c9:cb:
21:09:89:85:3a:a4:bf:06:21:84:d6:10:87:ce:6d:
da:d0:d2:41:f7:dd:f6:57:b0:d4:6c:3d:ad:0b:77:
67:83:21:90:81:40:eb:d0:be:7c:10:2d:c6:3e:36:
ca:f6:21:f3:3d:39:42:6f:6e:35:dc:0d:6a:85:53:
e9:e6:75:37:c4:c5:e3:03:82:c4:81:b4:dd:dc:58:
5f:bd:26:3d:3c:c2:76:8e:fe:42:0b:67:50:e6:6e:
56:55:cb:ff:30:ae:8d:2e:63:ef:03:b1:bb:cd:8b:
36:a3:ea:24:7f:56:62:a0:fe:d7:7c:38:26:ba:09:
26:8b:48:34:bd:44:37:de:89:93:0f:38:1f:75:48:
55:42:2f:c1:0d:83:a0:22:d1:5c:63:ef:81:4e:2b:
f0:96:fb:f1:34:2f:2f:ba:58:f5:47:c9:46:d5:90:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:1E:EA:85:3C:1B:6D:FA:E0:B0:08:79:1E:AA:F4:5A:F0:06:AD
X509v3 Authority Key Identifier:
keyid:2E:BF:F6:CF:B8:32:6B:44:72:95:A1:1B:10:78:68:21:2E:66:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr_2z7gya0RylaEbEHhoIS5mX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2dafbc-52ee-4c7b-b006-a786cebe20d3/1/Lr_2z7gya0RylaEbEHhoIS5mX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b2:8d:1d:ba:e9:80:b2:d3:95:f9:3e:fb:9d:2a:30:d1:87:
68:e7:d6:dd:b8:09:ac:47:bc:e5:fb:22:f2:81:52:9e:34:a0:
6b:bb:70:e9:98:51:65:84:59:18:2c:d9:71:65:9e:99:b5:04:
f1:06:09:0b:1a:2c:80:78:69:45:12:b7:73:42:bd:09:28:df:
60:5c:e9:72:88:8d:f9:78:a4:9b:3d:87:6a:f8:69:47:32:12:
ed:ed:10:98:a7:b5:ea:42:df:d3:12:91:8b:3a:00:2e:29:d7:
c0:1b:ae:0f:22:c0:e5:ae:2d:bf:56:f9:39:53:76:d4:25:38:
0d:cc:ea:6b:44:f6:bf:a4:37:e5:fe:9e:d4:58:ea:20:03:b7:
2a:11:8a:bd:49:99:b6:24:17:9d:e4:ea:05:82:e3:b4:22:a3:
f1:47:73:e5:0c:67:a2:4c:d8:b1:db:cd:74:5a:a5:2f:0f:e1:
6f:73:60:1e:de:d2:62:85:fb:33:63:ff:4e:bc:c8:97:36:2e:
c8:38:39:1f:5f:6c:6f:53:fc:05:01:ee:bd:1d:d9:fd:e1:53:
00:0b:17:d6:a3:18:9f:31:4c:55:16:01:ee:16:5a:95:09:57:
c9:51:6d:af:7d:7d:a4:b9:8a:c2:0c:72:a6:2e:59:2b:f4:7b:
f6:95:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:46 2025 by rpki-client