Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
File: L4IFe98YT8Q6GjsF492Z_-KgvmA.mft (raw, json)
Hash identifier: nznYVg57+4gXOf2G4Akfip1tBBTDi5Qmon0uFKU3HPA=
Subject key identifier: EA:64:E7:92:F5:D3:EB:9C:E0:AD:E2:63:D4:7A:2F:7E:80:C2:E1:85
Authority key identifier: 2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
Certificate issuer: /CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Certificate serial: 019A7225E09834713E890E67B6E9DD53132A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
Manifest number: A7
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: JgS-n-wNqWZrJNFBUoK-xA0PR9k.roa (hash: /mEkB78+oSmFupgf2hrBJR3V+vJktDDVV7xA/T40FWQ=)
2: L4IFe98YT8Q6GjsF492Z_-KgvmA.crl (hash: yOlnJ/pOFUqFXKjJhkuQSqgJ5kKA1sLxqnhaPmGWl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e0:98:34:71:3e:89:0e:67:b6:e9:dd:53:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f82057bdf184fc43a1a3b05e3dd99ffe2a0be60
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=ea64e792f5d3eb9ce0ade263d47a2f7e80c2e185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:45:a9:a8:3a:ed:43:03:51:4c:8f:28:a1:
3e:0f:a2:c3:8e:01:2f:10:c4:c7:9e:3c:eb:42:95:
b4:c4:9e:5b:2f:5a:a8:4f:b0:15:17:cb:8d:90:9c:
ea:9e:77:90:94:81:fa:1a:64:89:83:b4:ce:f0:64:
b3:d4:4c:c6:99:4c:49:12:4a:c3:75:7d:63:3e:68:
0d:75:2f:83:93:d4:34:83:d0:ed:95:c0:a2:35:24:
31:0a:be:0a:23:cb:c7:96:68:54:f7:08:d3:48:7a:
8f:d4:47:42:37:60:c8:53:f8:4f:5f:ed:ad:e7:a0:
17:0b:17:10:cf:bf:a4:8b:92:75:b8:e8:93:ef:ec:
e4:97:ed:58:30:af:87:78:e7:77:ff:31:d4:49:57:
74:b9:38:1e:cb:fc:29:9b:33:ff:b7:50:c2:a9:ae:
a9:86:56:ce:ad:03:42:22:5a:3d:fd:8a:0a:db:dc:
58:3e:8f:f6:44:12:97:00:f2:b0:83:11:f9:cf:43:
e8:c6:a8:26:da:52:77:0b:56:ea:52:42:07:f9:b9:
2a:92:7b:58:d1:05:96:ee:84:88:82:1d:9b:ac:a4:
c7:ec:06:e5:d6:e1:95:57:bd:d5:7e:ae:5c:b9:9f:
84:19:f3:2d:d4:27:fe:2b:18:11:83:7a:cd:98:38:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:E7:92:F5:D3:EB:9C:E0:AD:E2:63:D4:7A:2F:7E:80:C2:E1:85
X509v3 Authority Key Identifier:
keyid:2F:82:05:7B:DF:18:4F:C4:3A:1A:3B:05:E3:DD:99:FF:E2:A0:BE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4IFe98YT8Q6GjsF492Z_-KgvmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/71c590-246d-4aab-9dde-86304f5fe52a/1/L4IFe98YT8Q6GjsF492Z_-KgvmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:73:dd:de:ea:5d:0d:b3:2a:d6:12:35:b2:e3:69:fe:7e:0f:
c0:ca:2c:da:ad:9f:50:d5:a6:18:fb:83:37:e0:e6:62:4c:f3:
78:83:cb:35:b4:e5:99:95:de:63:f1:5f:81:9f:b7:05:c7:53:
75:c0:62:4a:b8:a5:b3:f9:7e:aa:32:ce:85:ef:1d:e3:c8:2e:
d8:60:a4:14:fd:e3:34:e3:84:26:95:9e:5c:4c:d7:56:9d:40:
6b:d5:3c:47:c6:f1:b3:f3:c1:3b:3a:33:49:91:0b:54:d3:30:
69:b8:ce:64:09:fb:21:95:01:6d:c8:26:6f:17:5f:06:b1:8b:
0d:69:c7:55:bb:9f:a0:e1:b6:9b:9c:83:23:4b:d2:50:df:d7:
ef:b2:7d:d2:ea:4c:aa:b6:2a:d9:50:b2:f3:8c:7d:80:24:c3:
59:b1:f4:c9:a6:4d:e4:be:07:8b:8f:25:e0:31:eb:df:ca:c9:
7b:46:96:34:04:b6:a4:89:6b:55:83:b6:3f:d9:a9:2f:fc:9c:
fc:64:06:a9:7d:44:d8:05:fa:64:9a:de:c6:56:bf:d3:45:d3:
2b:bc:ea:5a:7d:06:4f:56:9c:18:dd:c3:12:e4:d4:2f:8a:9f:
47:be:7a:90:ee:bf:51:50:9d:af:d7:c5:9f:80:f6:ad:76:57:
52:82:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:52 2025 by rpki-client