Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: b90OlOL+6dzMvGZtr0Im2BP+mqOPDnopqvcO8VBQDGU=
Subject key identifier: 2B:D7:45:DB:42:29:57:3F:59:D5:8A:F3:7E:BA:AB:DF:66:4C:10:D6
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0199FA6A88F506AD9CEA4D3E5673F9AF63A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 04E4
Signing time: Sun 19 Oct 2025 03:01:49 +0000
Manifest this update: Sun 19 Oct 2025 03:01:49 +0000
Manifest next update: Mon 20 Oct 2025 03:01:49 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: P1P3+ctoVVDrTM/Jh0fZ4K+2agNEPSpSRZ69/2FK/kw=)
3: WCk-xfRuVI_PDUs7_RW97jtHPbo.roa (hash: FTKPDp/dp7bSFFzQ95nQyoArI9ZwAhqlWawJed2N9pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:88:f5:06:ad:9c:ea:4d:3e:56:73:f9:af:63:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Oct 19 03:01:49 2025 GMT
Not After : Oct 20 03:01:49 2025 GMT
Subject: CN=2bd745db4229573f59d58af37ebaabdf664c10d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:2c:5e:e5:e3:5b:bb:5c:cf:02:24:29:2f:
12:a1:06:e6:33:99:0a:b8:5a:36:b3:61:84:75:ff:
04:df:e8:e4:7d:09:bc:62:78:7c:23:81:28:84:5a:
24:fc:ae:a6:24:7a:e2:08:4a:53:d9:e1:86:bd:61:
82:48:3d:8b:60:03:12:c8:9b:f3:8f:c7:36:2e:59:
07:98:72:31:7b:f8:d3:4d:40:c8:72:24:da:02:ec:
9e:71:43:a8:60:25:b3:a2:c8:6a:dd:59:43:53:0c:
1c:9c:6e:f7:6a:63:99:1f:a2:2f:8a:e7:d9:9b:a0:
fe:5c:c1:7f:16:ac:53:cd:91:8f:30:1c:2f:7c:0a:
c9:b2:24:6e:39:f7:4f:49:be:27:8b:6e:60:43:21:
9f:4b:2e:9b:bb:02:ec:b5:96:f2:5c:0f:dc:16:16:
9f:3d:ac:45:d5:cc:ed:27:fa:b1:bf:7a:e0:59:96:
09:36:83:a1:a4:16:07:03:01:82:54:03:95:2e:a5:
66:3a:1e:8b:03:23:55:5f:67:2d:8e:a1:00:11:22:
e4:f2:15:62:28:2f:d3:bd:ab:23:87:49:b1:d5:21:
48:4f:e7:98:f3:cb:7c:a5:b7:c9:77:0f:24:5d:90:
7e:aa:9c:32:9f:05:cb:fe:1c:7c:88:0f:e8:26:7c:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D7:45:DB:42:29:57:3F:59:D5:8A:F3:7E:BA:AB:DF:66:4C:10:D6
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:59:3e:a6:2d:2b:08:39:f0:bd:7c:3c:72:b9:91:e8:44:c0:
9c:8e:58:46:02:c8:25:08:17:4d:81:4e:4d:0d:4f:13:7b:a1:
07:74:79:bc:ca:aa:07:60:52:e3:38:06:0a:c6:cd:37:0d:ae:
f9:fc:e0:01:4c:24:04:61:eb:21:db:ca:6b:45:7e:8f:4e:ba:
c3:e3:14:8e:31:92:6c:e1:ae:4d:ad:f0:ed:4d:4b:c0:c2:d1:
c4:9b:7a:f9:03:ed:1d:2a:dd:86:4e:ce:e6:a3:d5:0d:c8:92:
f6:2c:17:7c:fa:b0:0c:f9:b3:0f:24:73:1c:90:0c:96:41:0d:
1e:f5:91:7b:4b:58:e2:61:a6:3e:9e:92:c6:79:59:a9:59:5a:
be:97:3a:2e:46:a7:bd:54:a6:e1:47:a6:e8:86:25:c2:0c:ed:
82:b1:d1:25:2a:1b:89:7a:62:02:d3:ef:0b:4b:05:28:2d:62:
56:82:65:bc:97:fb:f7:cd:03:70:8d:17:98:4c:7e:64:07:db:
8d:5e:a8:14:a0:95:f5:68:9a:1c:52:ae:c7:b3:3a:15:57:c2:
ea:f8:91:cf:e2:b4:8c:55:38:c9:9a:fe:33:78:7c:63:30:3e:
d3:d5:c6:a6:2e:f6:d9:d0:99:3f:a9:8e:d0:62:b6:a3:65:4e:
33:38:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:54 2025 by rpki-client