Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: jcG5XFUCHOUl6X/kIjM7VJ2dmXbfRXW8wYZcyYrkJAE=
Subject key identifier: E6:C3:92:F0:49:81:D2:AA:B0:A1:5A:0E:CA:1B:C9:5A:5F:46:19:EA
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019A7113739FE958404DD3196EF9215BB6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: B5
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: mbbHQvKwswSyu3YWjYEDGBWGlUjAKAHbSwqszS7PDww=)
2: imHQYg5LjpecUXmRBf2wIK9f70s.roa (hash: fwrQLWCO0tBmX3/PkxZEuXo+JQaCjLY7jAbEzE71wJg=)
3: p-q5NK4QM7flBgA02ibMGvdXFDA.roa (hash: iyRzjTNAy9qfw8qmlS/eRrCPm/exDgyPpvjm/GwckYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:73:9f:e9:58:40:4d:d3:19:6e:f9:21:5b:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=e6c392f04981d2aab0a15a0eca1bc95a5f4619ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:f6:be:e5:8f:34:5f:19:8b:03:d4:85:f7:
70:b0:69:f6:25:05:99:c7:76:a1:cc:1c:5d:e5:11:
62:f4:68:24:64:81:ad:24:fa:1a:c6:84:20:ab:91:
aa:03:39:a3:d5:9d:54:a5:2a:7a:88:97:f6:58:80:
63:95:8b:3e:72:b4:8e:9a:be:ab:ab:8e:66:c5:8a:
ff:b7:9c:1a:75:2b:63:30:94:43:e4:a4:24:75:8d:
09:d0:d0:e3:05:e4:86:b3:b7:5d:16:53:4e:9d:c1:
94:87:15:b2:13:bd:49:0e:14:72:3c:0e:42:b9:41:
8f:d6:34:2c:73:e1:1a:bb:4a:86:24:c8:a4:27:9e:
3d:8f:4e:1b:24:dc:22:d8:2e:a5:9d:d0:5e:52:c7:
38:a1:ab:79:7e:1e:0b:df:b4:ed:2f:fd:4e:d5:cf:
db:a4:18:3a:09:3b:76:7d:cc:80:93:3f:ff:88:0e:
34:ff:1e:cf:27:64:72:f7:4b:59:fa:77:7a:7d:ba:
b2:56:11:b1:60:b9:32:07:62:74:46:ef:d3:79:db:
05:63:6a:c3:b3:01:f4:8b:ad:08:49:19:54:75:d1:
65:ce:50:f4:87:2d:28:37:bf:50:c3:6b:48:30:45:
d4:d9:12:4a:21:af:1d:06:36:b7:02:c8:1d:4a:f0:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:92:F0:49:81:D2:AA:B0:A1:5A:0E:CA:1B:C9:5A:5F:46:19:EA
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:79:2a:e3:a6:e6:44:00:c4:bd:bb:77:82:d9:cf:c3:c4:11:
ed:01:1c:b2:8e:5d:e8:18:67:11:d2:8c:45:24:32:ba:89:1e:
92:f0:e8:ce:1d:a6:c6:62:1e:35:1b:3c:1b:61:ef:a6:30:0b:
09:86:58:de:a0:71:d9:73:f9:10:00:05:cc:9d:2f:77:c9:e3:
6e:5c:a8:ff:be:9c:be:78:2a:7d:a2:4e:e4:6e:62:e5:47:16:
92:0b:f8:83:41:b7:71:e6:91:b1:28:9e:05:c3:06:26:33:9a:
e2:e7:57:5e:af:56:15:ac:45:6d:42:9d:5c:e5:d7:45:c6:2f:
2a:19:0e:66:5d:df:71:69:1c:18:04:99:16:b8:74:fe:69:c9:
21:d6:3d:8e:81:ca:87:d8:c3:33:26:39:ea:c2:c7:dd:04:5f:
c4:3c:d1:61:85:5e:bf:ce:2c:82:f7:96:51:fb:bd:30:c5:45:
b3:43:42:a7:63:c9:9d:79:bb:a8:61:b9:82:57:10:97:28:9d:
51:34:f3:68:11:8e:c1:27:72:d3:38:a7:19:f3:67:c9:a7:40:
c8:cd:d2:d8:4f:10:1a:cf:55:55:ba:d6:ad:b0:00:fe:4d:be:
34:c8:e0:3d:5e:9c:05:78:c3:08:95:88:4f:04:94:36:03:c4:
ba:84:e2:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE3Of6VhATdMZbvkhW7bRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmY4YzZmYjdmNTQ3MTcwYjY3OTYyNTc1Y2YyYmE4ZWQx
NWU1NDgwHhcNMjUxMTExMDQwMTMxWhcNMjUxMTEyMDQwMTMxWjAzMTEwLwYDVQQD
EyhlNmMzOTJmMDQ5ODFkMmFhYjBhMTVhMGVjYTFiYzk1YTVmNDYxOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRb2vuWPNF8ZiwPUhfdwsGn2JQWZ
x3ahzBxd5RFi9GgkZIGtJPoaxoQgq5GqAzmj1Z1UpSp6iJf2WIBjlYs+crSOmr6r
q45mxYr/t5wadStjMJRD5KQkdY0J0NDjBeSGs7ddFlNOncGUhxWyE71JDhRyPA5C
uUGP1jQsc+Eau0qGJMikJ549j04bJNwi2C6lndBeUsc4oat5fh4L37TtL/1O1c/b
pBg6CTt2fcyAkz//iA40/x7PJ2Ry90tZ+nd6fbqyVhGxYLkyB2J0Ru/TedsFY2rD
swH0i60ISRlUddFlzlD0hy0oN79Qw2tIMEXU2RJKIa8dBja3AsgdSvCRWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObDkvBJgdKqsKFaDsobyVpfRhnqMB8GA1UdIwQY
MBaAFC+/jG+39UcXC2eWJXXPK6jtFeVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzIt
ZjFlNGYyMWQ4NzAyLzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYjU2NTQtM2ViNy00ODM1LWFmMzItZjFlNGYyMWQ4NzAy
LzEvTDctTWI3ZjFSeGNMWjVZbGRjOHJxTzBWNVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXkq46bm
RADEvbt3gtnPw8QR7QEcso5d6BhnEdKMRSQyuokekvDozh2mxmIeNRs8G2HvpjAL
CYZY3qBx2XP5EAAFzJ0vd8njblyo/76cvngqfaJO5G5i5UcWkgv4g0G3ceaRsSie
BcMGJjOa4udXXq9WFaxFbUKdXOXXRcYvKhkOZl3fcWkcGASZFrh0/mnJIdY9joHK
h9jDMyY56sLH3QRfxDzRYYVev84sgveWUfu9MMVFs0NCp2PJnXm7qGG5glcQlyid
UTTzaBGOwSdy0zinGfNnyadAyM3S2E8QGs9VVbrWrbAA/k2+NMjgPV6cBXjDCJWI
TwSUNgPEuoTiug==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:55 2025 by rpki-client