Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: 7K2079z27rQDlBKYVQM2cd+hc6vZXr7gSGQSdm5vlhI=
Subject key identifier: 8B:04:FD:6C:C4:5D:48:F6:51:21:6E:0B:D2:77:59:56:5B:F0:BC:5E
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0199233122DC9403BBE50E2D0441F6BEEF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 139B
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: DYlGTW/uhweYadbSgK+MQ13+23wYW7a1WJC7efcz8bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:22:dc:94:03:bb:e5:0e:2d:04:41:f6:be:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=8b04fd6cc45d48f651216e0bd27759565bf0bc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:dc:5f:aa:dd:47:e6:06:75:c3:82:43:41:
e9:8e:71:d6:2b:b6:ae:86:35:30:bc:6d:11:e0:df:
b3:cc:b6:ee:59:e8:9a:0d:63:a0:ec:fa:62:ad:94:
21:6b:89:62:01:cd:57:7b:2c:a2:29:2a:5e:10:fb:
52:7c:bf:ae:47:31:0a:4b:d2:ba:12:3e:9b:03:09:
ba:48:7b:84:7b:6a:ea:70:c5:b7:a6:4b:2c:b7:c2:
78:a1:74:ec:98:06:a6:8c:c7:e1:01:fd:15:56:e6:
00:74:a1:70:9c:2a:de:2f:3f:e5:d6:df:f8:d7:c9:
6c:1b:8e:02:0e:b6:d5:2e:02:89:a0:2a:70:60:7d:
b0:66:16:d2:d0:39:fa:27:9f:77:ea:2e:7d:71:86:
98:b7:c6:dd:c2:e6:a6:2a:b3:41:60:be:00:e6:a1:
7c:d7:e8:4c:b5:bd:64:47:2f:f6:69:94:94:b4:77:
f6:9a:15:4d:1d:cb:25:fa:a5:8f:ae:0e:2f:c6:1e:
22:99:82:73:2f:b7:ef:59:c2:35:55:85:8c:e0:b1:
e2:af:4b:b8:a3:fd:3b:e9:cf:d5:e6:52:07:90:0b:
9b:5b:5b:ca:46:30:dc:4f:fe:d4:c6:9f:aa:2d:72:
a0:6d:b6:6e:0b:fa:ad:9f:b7:3d:76:f8:b0:de:4b:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:FD:6C:C4:5D:48:F6:51:21:6E:0B:D2:77:59:56:5B:F0:BC:5E
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:02:32:bd:88:7c:9c:88:09:2f:90:20:59:ae:9e:be:17:1e:
15:46:3e:cf:29:f0:e6:e1:02:24:70:f4:2e:9e:81:55:99:b5:
9b:c8:83:7d:4e:e6:3b:20:96:0f:94:b6:a8:ff:8c:8b:ac:e2:
c0:77:94:68:31:a0:04:02:ab:c3:d4:29:3a:b3:44:b1:f3:3a:
62:8d:0b:05:5d:77:9c:90:76:31:2a:39:ca:06:bf:76:35:e1:
4e:21:b2:31:8d:9b:65:44:cc:c8:17:a6:2d:da:2f:f6:6e:35:
09:ec:6b:43:7c:c9:ef:f4:29:9b:cb:22:ff:7b:03:74:6a:3a:
46:af:7e:e4:18:72:ab:4e:e7:be:7b:38:17:96:dc:fe:64:ae:
59:6b:4a:c0:18:b4:9e:4f:38:3d:d0:f6:69:48:c9:f6:82:24:
c9:1f:fa:19:67:0a:2f:f1:2d:09:26:25:4d:13:c0:be:fb:40:
87:04:7d:25:cb:42:ea:f7:58:b6:9d:7d:3e:6d:c1:c9:9f:e3:
89:27:4d:2a:7d:2e:dc:89:74:5f:a0:18:6c:42:2b:38:ce:8f:
ce:e6:0c:98:7d:eb:2b:54:e5:f3:d5:6e:5d:c5:03:50:bd:85:
64:23:d0:b2:64:4d:28:fa:85:20:a0:7e:6f:ca:72:a3:52:7d:
c8:bb:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:02 2025 by rpki-client