Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: i6KhmeJ2OVGTb2O1VNII75gVj4PgEKYnDLSjhr4dRyE=
Subject key identifier: DC:F3:57:53:B5:A5:4A:8D:E3:5F:A2:5F:79:9D:9F:9F:22:6F:6F:73
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0197B6A22E55D25A0C69C1B818401D20D532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 03B6
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: A5FHU2xdzBR51dxPQSE7qoaCQzSleL5n/WtTAlLO/0I=)
3: vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa (hash: YQeo8wdHJXObNNl1+pafBMrUYC0XtdN/sbIQwRl/hu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2e:55:d2:5a:0c:69:c1:b8:18:40:1d:20:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=dcf35753b5a54a8de35fa25f799d9f9f226f6f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:1b:59:c9:ef:c0:17:49:40:95:ad:f7:3d:
3b:9b:97:aa:fd:36:ec:a1:96:9d:90:d6:ec:98:da:
a9:25:f0:eb:62:77:bc:bd:51:69:19:c9:a0:4f:86:
b7:ca:cf:95:cb:dc:ca:64:27:e4:99:6c:7f:56:67:
00:65:a6:78:39:88:e7:41:db:dd:f4:ed:f7:c0:02:
77:d0:48:24:44:42:8b:71:9b:b2:9e:d6:00:e6:5a:
0c:7d:6c:fb:c0:11:1f:ab:21:15:8b:a5:dc:6f:72:
5b:07:e1:f3:1a:b5:00:ee:2d:b2:32:c0:da:64:8f:
3d:dd:26:0c:91:a3:7f:49:50:3c:57:a9:c5:b6:4e:
60:b2:04:59:22:e1:e9:56:80:e6:31:03:6e:20:97:
c9:61:44:58:f3:a9:ae:1c:4f:5c:98:cc:79:03:f2:
b0:d0:66:e1:fc:f8:59:b4:d2:2a:01:c2:f7:3d:f6:
fa:a8:80:89:d7:b0:31:19:ef:4a:c4:9b:e4:0d:91:
c6:74:22:58:6c:37:9b:33:4e:71:f1:25:30:b0:4c:
9d:4b:a0:1b:d0:65:17:d5:24:12:41:b0:9c:91:16:
9e:b6:14:2d:b8:6a:24:10:d8:3d:44:31:cc:a6:bb:
79:c4:17:39:d8:c2:b4:d2:10:75:89:fa:de:c2:28:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:57:53:B5:A5:4A:8D:E3:5F:A2:5F:79:9D:9F:9F:22:6F:6F:73
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:49:70:3e:89:a8:38:68:e4:1f:fc:c0:0b:6f:f6:ac:e8:2f:
43:e4:d5:10:da:a5:97:8c:25:29:98:40:16:61:16:e0:ed:61:
b5:42:a4:97:ab:71:35:a1:63:67:c2:ae:70:47:97:91:e7:f8:
a7:9d:94:41:11:65:fd:55:b8:24:ed:60:52:c0:d5:8c:b9:f3:
52:a2:23:d2:50:a6:61:38:1e:44:fa:62:10:52:56:ea:b1:6d:
04:c3:c1:04:67:50:9e:20:ea:6e:b9:bd:3f:cc:08:9f:af:8f:
b0:95:e0:04:03:ff:a9:7a:e5:6f:71:56:be:8a:8a:87:19:1f:
09:fc:e5:b5:97:2c:a8:d5:3e:3d:c0:40:9c:e8:b6:97:eb:51:
64:67:16:7b:8b:09:36:60:7d:52:0e:a9:df:77:72:97:73:e2:
48:da:a2:e8:9e:4c:a9:01:46:ab:ab:4a:d7:f1:73:57:52:a8:
5a:59:0c:91:cd:0d:66:d7:be:d4:76:51:d4:37:7b:cf:9e:d3:
85:9b:8a:90:d4:75:1c:f2:15:e5:d8:78:b0:d7:55:48:e2:20:
23:f4:7c:a5:34:11:e3:20:20:00:c0:27:22:f9:13:4e:02:7a:
29:06:68:81:f5:66:c5:3d:64:e0:f0:e3:ec:c4:29:50:1d:a3:
d8:20:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:17 2025 by rpki-client