Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
File: Lw47dY4ki4AfwfMNNF1giwevG_Y.mft (raw, json)
Hash identifier: 7KHMUgNOZHVA/BGlJMm9gduDWfI96dCNEEKHhGYhRCc=
Subject key identifier: 7C:83:0A:6C:52:4A:D4:B5:18:45:FA:DE:EF:28:9A:7F:71:CB:1A:84
Authority key identifier: 2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
Certificate issuer: /CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Certificate serial: 019A0035D4C2845E7AF4DCEECC9A187F0B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
Manifest number: 070A
Signing time: Mon 20 Oct 2025 06:01:59 +0000
Manifest this update: Mon 20 Oct 2025 06:01:59 +0000
Manifest next update: Tue 21 Oct 2025 06:01:59 +0000
Files and hashes: 1: Lw47dY4ki4AfwfMNNF1giwevG_Y.crl (hash: h01TrhNIPcn40DOi+pxGvtu6jdCh8U3X9UF04VdEeB8=)
2: MBtZdpS4ymxgginyDhvfCoGQ29s.roa (hash: Taga/JoIPOZ2TxBr6cVw0HmmUo2VGq5/DtsPjFffmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:d4:c2:84:5e:7a:f4:dc:ee:cc:9a:18:7f:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Validity
Not Before: Oct 20 06:01:59 2025 GMT
Not After : Oct 21 06:01:59 2025 GMT
Subject: CN=7c830a6c524ad4b51845fadeef289a7f71cb1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:d1:bb:d9:2e:f3:a2:49:f4:3b:c6:53:fa:
43:53:b4:81:73:80:c2:86:d2:1b:b0:7a:64:1e:b8:
53:d8:e9:62:52:ce:c7:4c:94:f4:18:4f:11:42:f4:
30:97:cc:55:8e:28:f8:da:f9:7c:c0:36:b0:6c:54:
29:2b:72:8d:1e:3f:9b:f7:55:de:5a:46:2c:ee:49:
05:32:c0:1a:1e:db:3a:90:fc:a5:93:3a:90:2e:05:
99:a8:61:53:41:a1:32:05:1a:7d:fc:b3:79:bc:68:
a4:33:c1:55:54:7f:47:03:aa:d4:84:8d:b4:ae:a8:
02:8a:b8:51:eb:9f:82:c5:30:76:de:74:24:93:79:
eb:d0:a0:c4:25:c2:9f:35:34:ea:32:f5:33:3f:03:
1c:01:d2:c3:e7:26:7b:a4:33:bb:c3:c8:dc:36:7b:
63:fe:e0:09:4f:6a:73:e3:11:2e:43:fe:09:0e:1a:
9e:af:ca:98:81:ec:5d:6d:64:cd:f9:5e:57:33:0b:
2a:da:8a:35:d7:2e:8f:8f:b1:e1:82:a5:0f:81:c9:
8c:16:52:a2:e0:2c:22:d3:52:43:7f:a2:04:7e:f6:
aa:37:d6:dd:ac:1d:d3:02:d6:55:f5:a9:6e:f6:6a:
b0:41:ef:fe:e2:6b:7c:89:08:73:4b:94:ad:b1:24:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:0A:6C:52:4A:D4:B5:18:45:FA:DE:EF:28:9A:7F:71:CB:1A:84
X509v3 Authority Key Identifier:
keyid:2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b8:0f:25:d3:ae:ae:b9:3a:0a:4e:01:ff:33:34:44:92:f2:
93:be:49:e0:a7:df:30:05:d0:83:61:35:9d:b9:a6:36:0e:ed:
ae:2f:b6:68:41:43:19:1d:aa:29:c9:dd:5d:8a:a7:ae:da:76:
07:d6:73:6c:f6:1a:1a:ab:8c:88:6c:fc:ed:77:0b:56:48:d5:
d9:40:30:64:c7:c4:76:ab:d2:ae:3c:8f:5d:3d:69:cb:33:aa:
c8:79:88:22:2b:0d:25:bd:b5:24:29:a8:75:d8:42:0c:7b:44:
a8:43:16:bc:ac:5d:fe:fd:cd:ce:d5:9b:cd:15:68:71:fc:25:
c2:ba:82:74:a6:1a:3a:ff:88:80:d9:76:f3:4a:57:9c:05:bc:
94:52:37:42:c7:30:8d:c0:db:7f:7e:8a:47:6a:9b:aa:8d:df:
1f:05:86:5e:d1:23:6e:4b:be:e4:c9:4d:b4:46:6c:f6:40:9c:
f3:4e:d6:0f:b7:8c:04:7a:ca:14:8d:56:8e:e3:e4:81:a8:5e:
06:39:b8:ac:6e:cc:28:74:05:cd:60:45:08:de:fa:ac:35:93:
6e:c7:24:17:a3:f1:10:b4:e9:b0:3f:c1:7b:bf:24:d4:90:b5:
e0:c5:54:1d:aa:de:9b:aa:bf:02:73:3d:71:5f:c9:ee:fe:fd:
e4:7c:64:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:51 2025 by rpki-client