Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: qS+RwqUW1UGcsMD2sJX5vACWvbk9DziCxNeqSb1WxDM=
Subject key identifier: 5E:4E:96:1B:4C:03:C2:92:6B:93:F5:31:2A:49:C6:4B:4B:96:B4:D6
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0198458982D2E9F22EC48AC3B674013CE98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 0400
Signing time: Sat 26 Jul 2025 07:01:36 +0000
Manifest this update: Sat 26 Jul 2025 07:01:36 +0000
Manifest next update: Sun 27 Jul 2025 07:01:36 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: Z2O2oEEmcB+AxciMbAGnlPBEVR9CDVOz4mVS/Pv0tbQ=)
3: vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa (hash: YQeo8wdHJXObNNl1+pafBMrUYC0XtdN/sbIQwRl/hu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:82:d2:e9:f2:2e:c4:8a:c3:b6:74:01:3c:e9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jul 26 07:01:36 2025 GMT
Not After : Jul 27 07:01:36 2025 GMT
Subject: CN=5e4e961b4c03c2926b93f5312a49c64b4b96b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:98:c8:73:6f:9e:30:32:c7:4c:c4:52:99:
a0:ef:b6:e1:97:cc:4f:29:86:1c:ef:86:0b:48:d4:
09:ff:48:19:00:a3:08:23:58:4e:df:bc:d0:9d:fe:
70:c3:05:92:c7:9d:4d:cb:20:e0:2c:e0:7e:83:4f:
39:49:db:d9:62:89:42:c1:1e:70:7c:fe:1b:61:0a:
1b:e1:fe:fa:36:b7:3d:1f:04:44:c4:1b:71:3d:ea:
2b:a4:73:5e:f1:9c:92:7f:29:9f:d0:41:1d:9f:0e:
a0:93:56:48:08:5b:18:e8:46:2d:66:cb:e8:57:d7:
66:21:94:e7:94:c1:4c:33:8a:e8:de:5e:3e:21:96:
c2:bc:41:1b:13:d7:08:db:d6:65:20:ea:d6:01:71:
38:3f:cc:d0:8e:c6:5a:7c:4b:e2:a3:de:03:8e:e7:
95:83:35:6b:73:38:fe:98:70:51:96:f1:04:8e:94:
82:42:36:79:1d:b9:f5:df:12:8f:0e:3f:2d:a6:6f:
86:4e:35:16:06:a3:19:41:43:5d:ad:00:fe:cb:de:
e8:8b:20:2b:7e:c6:e5:43:45:8c:05:0a:5f:86:a2:
d7:29:d4:25:d6:bf:e5:f5:fc:70:67:10:8a:0c:68:
0e:f7:49:bf:40:7f:ae:cb:af:c4:b0:53:3e:8e:c6:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:96:1B:4C:03:C2:92:6B:93:F5:31:2A:49:C6:4B:4B:96:B4:D6
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e0:84:79:12:c8:fe:48:39:43:c8:e3:26:89:98:ba:ed:ea:
d4:55:df:ab:a7:8b:c5:0d:5c:04:14:3c:16:c3:6f:cc:0f:55:
5d:0c:27:b8:f7:38:bf:8a:92:91:61:72:ed:15:81:be:e3:21:
f4:dd:16:76:81:c1:3e:16:df:33:68:ec:30:69:4d:92:c2:3f:
17:21:c9:c0:ae:5e:33:bb:bb:ae:67:14:64:e7:e8:20:d8:41:
98:e3:b6:5d:ca:b7:52:a4:06:3a:01:af:46:39:c3:74:1b:28:
13:eb:f6:72:c5:62:fb:ff:b7:3f:d7:73:79:02:d6:52:98:11:
29:34:62:23:89:e8:e3:dd:1a:e8:a5:bf:85:3f:b7:dd:60:1b:
73:f7:e4:c6:3b:8f:ce:04:1d:87:08:52:49:3a:ba:2e:58:68:
f7:70:76:1c:9d:2a:2c:02:c2:48:cf:cc:b4:6b:93:b8:09:53:
7f:2e:bf:76:b2:34:28:cf:b4:7a:8d:ff:58:c8:4c:0a:80:08:
f3:2d:92:76:1d:0e:db:b2:dc:10:27:37:84:47:13:b1:97:f0:
23:d3:8b:26:64:59:06:fd:e3:e7:00:11:94:8f:46:56:b4:16:
90:95:4c:13:56:34:0f:bc:5f:37:f9:b0:ce:66:44:cf:8b:e9:
e1:bc:36:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiYLS6fIuxIrDtnQBPOmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjUwNzI2MDcwMTM2WhcNMjUwNzI3MDcwMTM2WjAzMTEwLwYDVQQD
Eyg1ZTRlOTYxYjRjMDNjMjkyNmI5M2Y1MzEyYTQ5YzY0YjRiOTZiNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CKYyHNvnjAyx0zEUpmg77bhl8xP
KYYc74YLSNQJ/0gZAKMII1hO37zQnf5wwwWSx51NyyDgLOB+g085SdvZYolCwR5w
fP4bYQob4f76Nrc9HwRExBtxPeorpHNe8ZySfymf0EEdnw6gk1ZICFsY6EYtZsvo
V9dmIZTnlMFMM4ro3l4+IZbCvEEbE9cI29ZlIOrWAXE4P8zQjsZafEvio94DjueV
gzVrczj+mHBRlvEEjpSCQjZ5Hbn13xKPDj8tpm+GTjUWBqMZQUNdrQD+y97oiyAr
fsblQ0WMBQpfhqLXKdQl1r/l9fxwZxCKDGgO90m/QH+uy6/EsFM+jsarJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5OlhtMA8KSa5P1MSpJxktLlrTWMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeCEeRLI
/kg5Q8jjJomYuu3q1FXfq6eLxQ1cBBQ8FsNvzA9VXQwnuPc4v4qSkWFy7RWBvuMh
9N0WdoHBPhbfM2jsMGlNksI/FyHJwK5eM7u7rmcUZOfoINhBmOO2Xcq3UqQGOgGv
RjnDdBsoE+v2csVi+/+3P9dzeQLWUpgRKTRiI4no490a6KW/hT+33WAbc/fkxjuP
zgQdhwhSSTq6Llho93B2HJ0qLALCSM/MtGuTuAlTfy6/drI0KM+0eo3/WMhMCoAI
8y2Sdh0O27LcECc3hEcTsZfwI9OLJmRZBv3j5wARlI9GVrQWkJVME1Y0D7xfN/mw
zmZEz4vp4bw2KA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:56:08 2025 by rpki-client