Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier: GhoR80TiZhdcwtKLJaa2uHV94JOjhUCkWk74lK2CcwI=
Subject key identifier: 29:36:69:67:74:E9:3A:DD:1C:12:F8:15:B3:1D:DB:9D:68:9B:2C:B8
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 019A07EE44315F3DA4F2C6E8CAD7237554F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number: 17
Signing time: Tue 21 Oct 2025 18:00:46 +0000
Manifest this update: Tue 21 Oct 2025 18:00:46 +0000
Manifest next update: Wed 22 Oct 2025 18:00:46 +0000
Files and hashes: 1: BTfaTJRkv38NK3OV8P41ApchwpU.roa (hash: YG+c62cfsP2iujTwoHOL3MZnp6ckxYppxq1JP02lQgk=)
2: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: he/vXYsNsOjj/fCDXR9oUcMK0LoWvsPvlJx1up1v6Vg=)
3: MhT_ic0uhnvyZeHmGUuSvJeWPpk.roa (hash: wzWvYEFygdswmUnUlDOzRDuit/r9AHiuR6372yT7GYk=)
4: tNh8YNIJ-t7wlK_o6eKwKtq426I.roa (hash: Bmf1Jl1G+qWmzgmuLyWRiOcoL0N7ljcIkRUAYdz1q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:44:31:5f:3d:a4:f2:c6:e8:ca:d7:23:75:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Oct 21 18:00:46 2025 GMT
Not After : Oct 22 18:00:46 2025 GMT
Subject: CN=2936696774e93add1c12f815b31ddb9d689b2cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:ab:95:d3:5e:35:35:da:e2:7b:93:6b:49:
6d:29:27:74:f6:e5:da:1c:f3:66:22:ea:8d:2f:d6:
ea:28:af:bb:10:d6:2a:c3:b2:c8:c3:59:fe:9b:70:
a0:0f:ea:89:db:ef:fe:28:96:3b:5b:19:cc:8f:69:
26:90:d5:df:09:6c:aa:56:70:72:27:3e:ac:73:80:
4b:2a:48:7c:b5:9f:28:ec:12:c1:29:24:64:e0:15:
f7:a6:09:06:6a:17:c1:63:60:e7:d7:b4:77:ed:59:
df:20:97:bf:12:1a:de:d6:19:9f:ce:71:f3:4e:28:
dc:75:a2:58:c9:a8:7c:c1:71:1e:56:86:e5:7b:f8:
ac:78:ca:98:b7:fb:6b:91:92:0e:90:95:67:60:1a:
9d:f8:15:af:de:a9:ab:cf:39:eb:22:3f:82:d7:f0:
22:c8:f4:a7:45:a7:94:ce:bf:21:92:0f:dc:1b:7d:
22:27:d1:6b:10:1c:31:33:b5:22:c5:c4:91:8c:df:
c7:43:b8:4d:d9:30:00:ea:10:a7:3b:19:5b:86:83:
50:a8:12:66:14:2f:ca:cf:26:90:a7:73:4e:f9:4f:
2e:1c:e4:73:91:84:b8:7c:ac:40:6a:c7:95:e4:85:
0b:c0:4f:ca:73:36:50:2d:c6:b3:a2:5d:8a:fa:6f:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:69:67:74:E9:3A:DD:1C:12:F8:15:B3:1D:DB:9D:68:9B:2C:B8
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:5f:5b:b9:0c:27:b6:63:ec:e6:c2:fe:f6:a3:b5:1f:59:
0d:57:fb:d4:d5:c6:9c:bc:81:8d:8c:45:0b:7e:5c:d5:42:81:
c3:2f:08:a0:3a:b3:46:53:3e:8f:99:6a:8b:73:4c:9a:5a:f5:
1a:01:6c:3a:21:f9:31:2c:9e:cb:8a:f3:3c:aa:f0:c4:28:c4:
68:03:fa:5d:01:ac:ad:ad:53:fd:04:c7:cf:2c:84:a6:67:f8:
1e:f8:cb:96:74:5e:84:09:b1:44:5f:90:b7:e5:8f:71:f6:d0:
8f:a6:62:8a:f2:08:5b:b1:3c:9b:dd:a4:0a:c4:d4:db:9e:32:
e3:7e:fc:d2:8e:41:7d:8d:92:1a:63:82:4e:21:d9:f9:b7:29:
54:88:fe:81:16:a5:1b:2a:4a:12:44:1f:ad:7a:6e:a9:a8:e5:
af:1c:d8:89:6f:f8:c7:da:14:3b:c4:12:e6:52:bd:fa:af:a0:
cd:57:ac:c6:5a:4f:6d:56:b5:86:78:1e:92:95:d2:ca:7d:de:
b3:d9:39:06:c4:a6:7e:0a:0d:eb:4f:a5:95:6b:0b:59:29:92:
1a:84:36:87:b5:6a:7e:fe:90:55:2e:25:1f:48:40:73:64:bb:
ac:c5:ef:34:ea:8c:b8:77:c0:72:82:1e:f2:ec:97:f7:cb:1e:
d3:08:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:47:21 2025 by rpki-client