Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File: l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier: ar06IRTvSers6EB/puMmgzAPcL5HJnREAPjUhfjCXJU=
Subject key identifier: 40:80:CA:DF:7F:72:39:16:FF:A6:45:09:0E:EF:B0:49:BB:91:55:F5
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer: /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial: 019A70DC56B52095B6DD983E571B4397640D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:19 +0000
Manifest this update: Tue 11 Nov 2025 03:01:19 +0000
Manifest next update: Wed 12 Nov 2025 03:01:19 +0000
Files and hashes: 1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: 1bST54T+e80y5KU9H+kTK1DRA9k1uZEZswyDD7csejA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:56:b5:20:95:b6:dd:98:3e:57:1b:43:97:64:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Validity
Not Before: Nov 11 03:01:19 2025 GMT
Not After : Nov 12 03:01:19 2025 GMT
Subject: CN=4080cadf7f723916ffa645090eefb049bb9155f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:57:65:ae:01:c4:7c:91:07:eb:a8:95:be:
56:da:ec:b8:99:84:ea:ab:49:c7:83:de:ec:36:7a:
30:d9:70:aa:ef:64:21:10:4f:6b:ef:fd:42:5d:87:
a0:25:70:e7:d9:75:9c:11:d7:5a:d5:ff:d1:f6:13:
41:4f:bb:0d:2e:aa:3c:0d:7d:8b:86:d4:a7:4c:f0:
96:09:9e:94:ee:0c:8c:64:70:07:f1:b7:72:26:06:
5f:f9:2f:78:e3:d4:44:c9:64:a7:5a:96:7a:bf:87:
10:b8:ed:cf:70:fc:34:e7:ef:75:61:0e:e7:be:15:
ad:9f:18:ff:1b:71:b6:ee:8b:80:1f:20:e1:d9:b1:
40:cc:6c:e1:4e:41:f4:fe:da:a7:4d:9f:85:5f:2a:
8f:ba:87:5c:76:ef:92:1a:26:24:9b:80:1c:97:28:
d5:68:92:15:a4:85:37:67:9f:2a:3b:7b:90:9f:eb:
b5:6d:60:9d:ad:9f:a8:99:24:f0:68:79:5c:0e:e8:
0f:55:10:dd:88:56:a6:4e:64:44:95:17:ba:98:f0:
a7:86:27:3b:8f:aa:9f:e1:97:ee:ec:d9:ac:95:d8:
68:7d:83:d0:43:e3:4a:56:38:05:40:8a:08:02:7b:
fe:cb:48:db:83:7c:b4:be:1b:84:be:ab:72:7f:a9:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:CA:DF:7F:72:39:16:FF:A6:45:09:0E:EF:B0:49:BB:91:55:F5
X509v3 Authority Key Identifier:
keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:69:51:76:13:8f:e2:e8:40:2a:d8:4c:57:61:95:df:8e:62:
bd:b0:ee:6e:ec:fd:62:14:65:da:81:a0:07:b5:ba:e3:76:4d:
ee:7d:d3:a1:d4:cb:27:01:f0:5a:60:c5:4c:e5:a3:c7:d4:cf:
a0:12:98:c5:6e:42:13:7a:79:f7:80:13:09:56:4c:bb:f2:61:
b8:dc:71:f6:0c:f6:fc:74:dc:83:53:f0:35:24:5a:fe:23:24:
cd:c7:f6:33:ef:ec:d9:9f:9d:a5:f2:a8:92:20:02:39:d3:d5:
ed:fa:1f:00:9c:92:c6:fa:02:05:4b:1c:a0:16:36:a2:98:17:
fd:a3:4f:53:0e:e9:eb:ad:13:dd:77:c2:4d:3d:91:63:ce:e5:
69:8d:96:38:b2:88:81:44:af:ee:4e:d4:0c:8c:49:ce:1b:51:
03:ed:e8:85:86:fa:06:29:65:80:83:44:7f:63:ab:c7:05:f1:
93:4a:8b:0f:5f:b7:41:f2:9c:23:4c:a0:91:cd:f8:62:f3:08:
2c:55:15:67:da:ed:97:c1:b5:a2:3a:e1:4f:7e:97:81:ca:13:
6f:b9:61:3e:99:ad:10:81:99:f9:d4:0d:fa:3d:de:5a:b2:45:
0e:bc:ed:97:9c:b3:bc:b4:b5:70:d3:d3:b1:24:f7:f1:8b:1d:
f3:59:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client