Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: m/tLcL8jp8i4EdtIGyzQSYxaAoWc5AhnQUveSkh3eUk=
Subject key identifier: 2E:B9:4F:84:C7:54:21:63:B9:D7:84:BD:31:CB:FA:99:CE:D2:6B:B2
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 019A21E4ED7BCDE1AB3E659BA2839EB8B8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 19:00:42 +0000
Manifest this update: Sun 26 Oct 2025 19:00:42 +0000
Manifest next update: Mon 27 Oct 2025 19:00:42 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: IeFYQSdWh4jdJtKEYAwmFXmhsXr3N7RIX/FoPOJtw58=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:ed:7b:cd:e1:ab:3e:65:9b:a2:83:9e:b8:b8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Oct 26 19:00:42 2025 GMT
Not After : Oct 27 19:00:42 2025 GMT
Subject: CN=2eb94f84c7542163b9d784bd31cbfa99ced26bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:d8:e2:f8:e2:a2:90:5b:f6:33:1a:23:b5:
89:12:5a:9a:ec:7f:89:50:36:ff:91:f4:16:aa:35:
88:75:b0:09:35:f7:e2:19:45:13:9d:c8:c2:1f:16:
93:84:45:fe:39:f9:4a:2b:ec:b9:53:fe:c8:0e:7d:
8e:09:a5:52:6d:1b:0c:25:20:ea:f7:e5:dc:d7:79:
c7:7f:11:e3:8f:c9:f0:a9:46:05:15:6b:e9:e1:a4:
1c:0c:87:2f:bd:98:63:bc:fa:64:ab:3c:62:dc:57:
be:87:cf:c2:43:26:88:e4:92:07:ca:cd:ab:83:8b:
79:3a:49:96:cc:05:cd:3d:a5:96:2b:2e:49:3c:5e:
98:c1:de:94:22:23:7a:42:a4:c2:d8:02:0b:9e:8b:
8c:a9:9c:f9:95:7b:10:13:f3:fb:0a:db:53:a9:13:
ef:67:db:ca:e6:f2:2f:f3:c5:02:dc:da:00:0f:28:
f3:21:c5:26:26:af:30:22:3a:1e:8a:76:9d:1e:e1:
61:93:eb:43:bc:c3:d2:5e:a6:94:75:98:6f:34:1e:
bf:e8:a5:d3:6e:85:4d:d6:e1:4c:75:0b:58:50:13:
1a:d8:89:e3:41:4f:d9:50:76:3f:36:75:0f:ed:25:
23:71:a7:07:f8:c3:a5:b4:79:39:37:43:56:25:53:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B9:4F:84:C7:54:21:63:B9:D7:84:BD:31:CB:FA:99:CE:D2:6B:B2
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:e2:66:e9:bb:3f:62:d8:10:70:20:82:1f:42:46:b3:03:
6b:ef:91:56:d3:9c:a1:20:16:34:0f:8e:28:2e:5b:c7:2a:35:
ef:9f:58:70:82:62:36:01:c4:cb:8a:ce:5f:21:c1:e4:0c:5e:
64:f6:1c:53:75:b2:e2:15:02:7a:d3:ba:c5:d1:58:88:36:c0:
1f:4e:0d:71:9e:79:3d:6e:eb:47:c4:6a:9c:96:1b:ac:6c:c1:
8b:af:d1:1b:cc:9a:61:9e:f3:34:55:ca:cb:7d:4e:65:95:e6:
67:53:e0:ec:97:92:a0:61:de:dc:02:7d:9f:5b:28:4f:b7:2b:
69:3c:de:fa:8b:50:be:ed:77:fe:9f:e2:bc:b3:5f:56:ab:9b:
b5:9b:bb:6b:b8:bb:5f:58:c2:25:d5:14:87:b5:73:74:9f:cf:
05:4b:29:75:05:b9:6f:39:09:20:c5:e4:fb:18:7b:d1:08:df:
65:cd:ea:b6:04:d9:d5:74:d4:0c:31:14:2a:45:ca:3a:32:54:
48:c5:9c:e2:c1:9a:05:d4:46:92:1d:fe:2d:a1:55:4c:68:ab:
76:9b:b9:38:dd:d5:3c:75:14:5b:11:2d:33:8a:bb:97:5c:36:
e3:40:bf:d2:1e:d4:3f:3e:39:aa:c9:13:be:d4:1e:2a:6d:27:
83:8d:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:58:23 2025 by rpki-client