Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: BFhE7FxYHn8eXtMgwe1XBftlWuuU2If0vawhWu/dQvc=
Subject key identifier: 8B:FB:57:2E:05:29:59:26:E8:D9:41:65:03:DB:76:54:C1:16:74:DB
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0198D4A80931F7734DDF29A3EE9675EC53C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 044B
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: JXKXjs5freL2NCneq0B4F-Hx0ZA.roa (hash: F90Lr/0BqQT8Q5zPPmgDaP06VkhdQUxQgdbC1ZCRnUM=)
3: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: fWtNTkePGMrMvG2hbKQHUAvJ0l5FvXOXEQCGh6Io8UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:09:31:f7:73:4d:df:29:a3:ee:96:75:ec:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=8bfb572e05295926e8d9416503db7654c11674db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:3e:dd:aa:24:2d:2e:53:41:9f:65:c1:82:
6d:f8:ce:51:d3:e2:73:a1:dd:bc:d9:9e:4d:af:55:
5f:34:37:d6:e4:d8:c3:39:5c:f6:0b:03:d0:c5:7d:
5d:7f:e9:6c:d2:48:33:97:ea:ad:ad:23:5c:f6:67:
6e:16:90:29:29:2b:99:aa:76:15:d0:7f:ed:6b:70:
69:0e:4e:24:f3:b0:de:df:db:16:c1:09:01:48:74:
a0:71:49:dc:85:5b:0c:da:16:aa:1a:54:23:9c:67:
be:c1:a5:cb:13:9e:db:a1:e8:7a:19:af:d0:7c:7f:
eb:a7:44:ad:22:a1:38:0e:4b:ce:66:f7:58:06:08:
8d:a9:82:50:09:7c:30:90:22:79:33:69:06:2d:cb:
f2:20:a3:97:a8:d9:a7:3a:02:71:c4:42:0d:a7:7a:
25:85:17:f0:81:bd:1b:5a:b6:31:43:a1:ca:6f:5d:
95:e1:bc:d8:c8:f4:1c:6a:fb:94:74:d5:97:0f:d5:
98:43:cc:04:d8:5a:71:32:f8:13:d1:40:e0:79:c9:
27:97:0a:d7:cc:1b:a0:8b:5e:19:d4:67:79:71:2e:
a1:87:0a:38:db:bc:90:cd:cb:24:2e:0f:b1:b4:fd:
94:86:ff:61:2e:3c:c0:50:a1:c2:4f:dc:22:03:7c:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FB:57:2E:05:29:59:26:E8:D9:41:65:03:DB:76:54:C1:16:74:DB
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:be:98:c9:9f:e5:6f:a5:f2:b4:72:f4:ff:e2:e4:e0:01:
e4:18:63:15:94:f9:7f:ca:dc:29:d6:8e:eb:4b:50:6b:a0:20:
ff:2f:a6:83:f5:b6:b7:58:a1:d6:95:0d:98:35:0e:26:fc:f8:
41:5c:fb:6a:c4:b0:d2:81:23:f0:ec:50:be:92:3e:84:11:b9:
86:7e:40:09:1e:7f:b7:90:81:7b:91:62:c5:55:f6:21:4c:3e:
5a:cc:eb:a7:09:27:63:70:35:b0:16:9f:b0:23:12:9a:6d:c5:
2e:1a:f3:99:2d:9b:75:28:70:5c:98:03:dc:d4:cf:8a:5d:4f:
4b:e0:a1:fb:d5:5f:e6:c4:0b:38:ca:ed:fc:41:92:c3:a8:c4:
0f:dd:da:14:91:91:80:a4:8f:11:d1:e2:61:79:3a:8a:2c:c5:
6e:a1:36:73:55:eb:9a:c1:71:82:cf:1f:18:0a:a8:bd:75:c6:
da:27:df:ea:76:7b:3d:2f:1b:e7:df:04:c1:26:77:08:d8:90:
a5:2e:ed:c1:f2:05:97:dd:cd:99:87:91:2e:1d:ab:db:da:6f:
5a:b3:27:1c:53:20:5c:0e:95:ae:bd:f4:5c:64:f8:4f:7b:9f:
2e:18:cd:66:56:a9:b8:3b:c5:d6:2a:bf:59:ea:e6:f6:3d:c4:
54:f6:90:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqAkx93NN3ymj7pZ17FPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjUwODIzMDIwMDM4WhcNMjUwODI0MDIwMDM4WjAzMTEwLwYDVQQD
Eyg4YmZiNTcyZTA1Mjk1OTI2ZThkOTQxNjUwM2RiNzY1NGMxMTY3NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Tw+3aokLS5TQZ9lwYJt+M5R0+Jz
od282Z5Nr1VfNDfW5NjDOVz2CwPQxX1df+ls0kgzl+qtrSNc9mduFpApKSuZqnYV
0H/ta3BpDk4k87De39sWwQkBSHSgcUnchVsM2haqGlQjnGe+waXLE57boeh6Ga/Q
fH/rp0StIqE4DkvOZvdYBgiNqYJQCXwwkCJ5M2kGLcvyIKOXqNmnOgJxxEINp3ol
hRfwgb0bWrYxQ6HKb12V4bzYyPQcavuUdNWXD9WYQ8wE2FpxMvgT0UDgecknlwrX
zBugi14Z1Gd5cS6hhwo427yQzcskLg+xtP2Uhv9hLjzAUKHCT9wiA3zPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv7Vy4FKVkm6NlBZQPbdlTBFnTbMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRC+mMmf
5W+l8rRy9P/i5OAB5BhjFZT5f8rcKdaO60tQa6Ag/y+mg/W2t1ih1pUNmDUOJvz4
QVz7asSw0oEj8OxQvpI+hBG5hn5ACR5/t5CBe5FixVX2IUw+WszrpwknY3A1sBaf
sCMSmm3FLhrzmS2bdShwXJgD3NTPil1PS+Ch+9Vf5sQLOMrt/EGSw6jED93aFJGR
gKSPEdHiYXk6iizFbqE2c1XrmsFxgs8fGAqovXXG2iff6nZ7PS8b598EwSZ3CNiQ
pS7twfIFl93NmYeRLh2r29pvWrMnHFMgXA6Vrr30XGT4T3ufLhjNZlapuDvF1iq/
Werm9j3EVPaQ6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:37 2025 by rpki-client