Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: gTpp5PBJluJAZFVpGUXhzqZY0kbjpQtSwvBUBvs4jfU=
Subject key identifier: 64:42:E3:99:9D:D8:2C:F3:BE:0E:64:88:8C:1E:A8:F5:C9:96:8F:08
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 01992E90CE8EBD26C0C01623F6DDD956AD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: 0E
Signing time: Tue 09 Sep 2025 13:01:05 +0000
Manifest this update: Tue 09 Sep 2025 13:01:05 +0000
Manifest next update: Wed 10 Sep 2025 13:01:05 +0000
Files and hashes: 1: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: B9yiBJKYbU1StZftiQFeU/fK155ZQbdLUustakTsJeM=)
2: imHQYg5LjpecUXmRBf2wIK9f70s.roa (hash: fwrQLWCO0tBmX3/PkxZEuXo+JQaCjLY7jAbEzE71wJg=)
3: p-q5NK4QM7flBgA02ibMGvdXFDA.roa (hash: iyRzjTNAy9qfw8qmlS/eRrCPm/exDgyPpvjm/GwckYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:ce:8e:bd:26:c0:c0:16:23:f6:dd:d9:56:ad:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Sep 9 13:01:05 2025 GMT
Not After : Sep 10 13:01:05 2025 GMT
Subject: CN=6442e3999dd82cf3be0e64888c1ea8f5c9968f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:d8:4a:9c:e1:b0:df:b6:db:39:e9:bb:3a:
be:67:25:1f:b8:41:35:ac:77:a8:f9:0d:3f:d5:f3:
ef:a3:d1:95:a3:ae:a7:09:48:ef:a2:6d:0a:dc:82:
0c:84:55:e7:8b:3c:74:96:01:d3:f6:82:71:c8:10:
82:9c:0a:52:5c:e3:db:69:7e:a2:d1:c6:15:d1:3a:
7b:26:71:a5:8f:36:ba:90:ca:6f:fd:f9:46:07:dd:
7a:7f:17:51:b6:e3:7d:66:68:ff:2b:f6:00:aa:81:
83:d1:97:d1:8c:e3:e5:56:b7:a6:66:1a:69:e3:26:
1d:6d:ed:b3:bb:d0:0d:93:5d:fd:df:68:ed:c1:26:
fd:2f:df:89:92:1e:03:cf:e8:96:27:66:b0:31:be:
63:64:11:43:8f:0d:f5:2f:a0:b0:4b:ec:f0:aa:f2:
07:d1:ab:dd:e7:d5:63:c0:42:f1:c3:42:97:0a:75:
8a:1d:46:2a:67:03:cd:ba:23:9e:91:d5:ad:40:7a:
84:17:87:2b:35:29:0f:56:01:c5:ee:84:d0:59:f9:
a4:5d:38:01:44:c7:3a:00:66:28:d1:1b:37:a6:ab:
8a:51:c1:0e:37:18:a0:d1:69:4b:a8:bc:14:85:72:
31:7a:a0:25:1d:be:a9:c3:9f:52:4e:80:88:80:a8:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:E3:99:9D:D8:2C:F3:BE:0E:64:88:8C:1E:A8:F5:C9:96:8F:08
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:f6:10:9d:00:15:dd:b2:ca:a1:3a:1c:a5:e0:e9:53:e3:
6c:ab:c9:ba:f6:cf:cc:16:61:35:c0:1b:72:9f:f9:5f:dc:6f:
68:12:ed:74:e0:51:49:a1:5a:6e:5e:36:a4:a1:ca:39:cd:2e:
7b:39:48:d2:f5:8b:94:31:da:13:f9:a6:55:05:4c:fb:42:86:
5c:1c:41:82:96:bc:ee:c6:2e:5c:5c:e3:92:ef:91:11:70:e6:
c5:c7:d2:cb:8b:43:96:cc:19:ce:71:2e:56:6b:da:45:36:00:
27:01:74:4a:50:56:d1:ed:eb:fd:70:95:81:33:e9:6d:af:11:
54:f6:30:bf:a4:bf:44:74:5b:84:a2:d7:95:5a:30:75:0c:a1:
8a:1f:33:7c:8f:0c:16:a3:ad:eb:31:8d:b4:fe:8e:c9:4a:9e:
8d:bf:2d:8d:09:b6:9e:9c:5c:87:66:02:8a:40:79:22:19:bf:
4d:93:c1:b7:25:49:4e:e2:23:25:cc:bb:1b:6c:b4:51:2e:5e:
06:24:b5:76:d1:29:45:19:55:c1:a4:bf:20:9e:ac:4a:22:f5:
41:ee:70:02:66:1c:e4:ab:8c:f7:f7:fd:22:e5:09:fa:7e:ac:
49:21:d7:b2:02:a1:5d:6e:76:c6:05:47:73:8c:68:5f:5d:1a:
1b:95:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:50:05 2025 by rpki-client