Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: SKYZBqjPUzzU4H8fK+PruCgtZ1o4S1dKO8B6hg8yhEs=
Subject key identifier: 9D:FA:59:14:71:6D:31:DB:78:00:89:46:05:BD:77:78:0E:98:25:0E
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019A71EEF7E51D1F3AA751CBB96570847405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 0522
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: UXzkBscIK4GRYLJrtGGPQC8MGBnnzV+gigGSMg5VwtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f7:e5:1d:1f:3a:a7:51:cb:b9:65:70:84:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=9dfa5914716d31db7800894605bd77780e98250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:7a:89:6b:4a:20:66:c9:2b:10:80:a0:0c:
90:75:73:bd:38:be:23:a0:bb:72:42:de:a7:1e:b9:
bc:c8:3c:b6:e6:92:73:58:11:be:b8:e2:44:93:a1:
c2:c4:88:5b:03:2a:b7:f6:bf:8a:18:bc:57:8a:f5:
e3:70:67:cc:39:a4:06:1e:6a:77:f7:44:d7:f3:60:
3b:1a:b7:c2:43:4e:33:2e:17:7d:da:c2:58:f2:ff:
b1:a3:ea:86:6d:eb:a2:ad:4f:97:25:25:7c:d4:77:
2a:7a:e2:8a:8d:fb:ca:ec:a7:33:a0:ef:64:c5:db:
fb:f3:16:f9:3c:4e:81:c5:0e:90:92:5c:08:e0:9e:
7d:ff:22:7e:9c:14:bc:34:60:b7:fe:ec:98:67:b0:
d6:cc:a5:69:90:7c:24:57:d3:b7:20:39:84:29:85:
41:bc:b6:22:72:86:f8:a7:1f:9d:53:27:88:66:1d:
dc:f0:0c:25:06:02:22:56:a8:3e:1f:93:f3:1a:1a:
e4:e6:05:35:20:c2:92:d6:59:72:ec:80:2a:c7:e5:
d6:06:0f:ed:57:5f:2a:15:f2:39:ec:5d:a8:69:f2:
30:ae:2c:07:df:10:cd:f9:a7:a5:a5:51:0b:b6:8c:
74:fd:a0:bd:54:9a:71:e0:18:14:f1:78:25:80:5b:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:59:14:71:6D:31:DB:78:00:89:46:05:BD:77:78:0E:98:25:0E
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:79:67:c2:08:36:d0:ef:f7:05:ce:c5:eb:4e:05:71:d5:ee:
33:6e:5e:b0:89:32:33:30:fe:67:a9:96:0d:af:96:02:18:64:
68:ea:03:7d:87:1b:4f:29:c9:4d:fe:46:8d:e8:f6:54:4a:f2:
e3:23:70:59:bc:97:dd:c2:a6:52:65:6f:71:fa:8a:16:ae:2e:
83:c2:82:2d:91:69:8a:a1:b3:9c:7b:5b:f7:23:5c:b6:1f:32:
78:e7:50:90:93:12:2a:7b:b8:85:f3:fa:5c:69:b4:ea:e2:ba:
3e:98:74:1e:a0:1e:c0:b0:4f:d7:ab:1a:9a:33:47:7a:10:c7:
fc:b8:b1:0c:00:7b:98:50:f8:82:1d:83:ca:0b:e5:69:eb:da:
c7:21:c7:2b:12:d8:bb:fd:8f:c0:2c:1f:42:0a:d4:e5:dd:01:
03:b9:70:10:86:bc:95:17:1f:1a:2e:1e:f1:91:4a:55:e6:19:
ff:ed:69:a3:c8:52:d7:28:22:49:0a:ac:cc:b9:44:c8:cd:93:
dd:f0:f3:ff:91:85:59:2d:97:c2:2a:29:8d:76:fd:45:56:fb:
f3:8e:4f:5b:85:ac:34:5d:de:02:6e:36:40:41:4b:93:ae:0b:
97:82:c8:8c:eb:82:01:ab:5f:f1:a0:3c:41:b6:31:6f:46:5f:
6c:83:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:34 2025 by rpki-client