Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
File: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft (raw, json)
Hash identifier: J8EUIwAUD4OPk6QdJ6PnhZBVOc+rHvelc9ujySwYKNM=
Subject key identifier: 1F:1B:65:04:D5:93:A1:F1:26:76:DD:22:A4:BC:AF:44:86:D6:F2:DC
Authority key identifier: 2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
Certificate issuer: /CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Certificate serial: 019A5DC2DC96AD97995A142AEC864FBD2855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
Manifest number: AB
Signing time: Fri 07 Nov 2025 10:00:42 +0000
Manifest this update: Fri 07 Nov 2025 10:00:42 +0000
Manifest next update: Sat 08 Nov 2025 10:00:42 +0000
Files and hashes: 1: L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl (hash: coHNQHDBB3Dl7YjTD6kysm+SCMSrFpi6OQZg8VNSALY=)
2: imHQYg5LjpecUXmRBf2wIK9f70s.roa (hash: fwrQLWCO0tBmX3/PkxZEuXo+JQaCjLY7jAbEzE71wJg=)
3: p-q5NK4QM7flBgA02ibMGvdXFDA.roa (hash: iyRzjTNAy9qfw8qmlS/eRrCPm/exDgyPpvjm/GwckYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:c2:dc:96:ad:97:99:5a:14:2a:ec:86:4f:bd:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbf8c6fb7f547170b67962575cf2ba8ed15e548
Validity
Not Before: Nov 7 10:00:42 2025 GMT
Not After : Nov 8 10:00:42 2025 GMT
Subject: CN=1f1b6504d593a1f12676dd22a4bcaf4486d6f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:85:f2:be:b5:5e:cd:c8:f5:34:6e:3d:50:
75:f5:fc:26:e9:a5:68:d8:54:da:9a:d7:b1:d8:0e:
eb:e0:e1:ec:ec:44:99:e3:65:87:e2:d5:83:7b:79:
0c:f5:f9:b3:c3:75:5b:ab:f7:4a:2c:6a:c3:b9:f7:
bc:3f:9f:93:c8:9b:84:6d:96:ab:d3:e1:30:73:29:
de:ef:55:16:0e:ed:25:a8:58:cb:fb:82:f5:7f:5c:
d9:84:5f:46:5d:db:4d:e2:51:20:dd:8d:bc:3a:2b:
dc:22:30:e0:80:95:b2:6b:e0:6b:49:23:a6:d1:d2:
ef:d9:6a:61:61:71:7f:d2:12:aa:ea:77:7e:ad:75:
af:f4:5e:08:22:bd:43:f5:18:aa:b8:9c:6d:87:3e:
5f:4e:46:e2:18:4a:cc:fe:89:0b:c3:b0:b3:12:6a:
6c:9b:b7:67:14:c2:da:ef:a7:eb:3a:ef:6c:1b:9a:
aa:85:86:85:f9:86:55:38:34:13:6f:2b:99:6e:c6:
f2:83:bf:05:76:5d:64:94:af:77:9f:91:5f:e9:bb:
ac:50:e3:00:68:bb:5a:82:64:e7:e3:f3:01:9f:03:
a6:f7:97:63:35:72:b9:dd:38:07:87:35:45:6e:ef:
d4:df:f9:ba:a4:0e:3e:60:ce:82:80:6e:38:6d:24:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1B:65:04:D5:93:A1:F1:26:76:DD:22:A4:BC:AF:44:86:D6:F2:DC
X509v3 Authority Key Identifier:
keyid:2F:BF:8C:6F:B7:F5:47:17:0B:67:96:25:75:CF:2B:A8:ED:15:E5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/db5654-3eb7-4835-af32-f1e4f21d8702/1/L7-Mb7f1RxcLZ5Yldc8rqO0V5Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:37:83:fa:d9:e0:23:26:99:78:25:12:50:f7:cc:95:d3:4a:
62:4f:4a:59:7c:c1:f1:7c:a4:17:d9:cc:1e:50:51:a3:e7:79:
ae:2f:5a:8c:34:69:8f:c5:7c:2d:4f:7e:cf:18:07:af:4b:7c:
00:98:dc:89:04:96:47:92:7e:05:cf:68:20:a5:cd:1f:35:ae:
4e:fc:78:b2:9b:6d:27:c5:f2:63:e3:1a:5c:0f:de:b5:b6:0a:
10:b2:ef:4e:e7:4b:de:94:35:2e:ce:72:e0:8a:c0:64:ce:05:
0c:6b:9b:54:ae:fe:5f:6d:0b:86:d1:3d:46:fa:18:9e:41:b3:
71:09:dc:e5:3d:25:be:fc:b2:fc:37:3b:dc:06:c6:68:a1:b7:
71:88:bc:34:71:d9:7b:7a:f5:7f:d7:a1:61:fe:d5:88:fa:7a:
a8:cd:8b:1d:36:4f:f7:d4:4d:4d:ce:c8:81:c5:34:06:75:0a:
e1:49:01:d2:70:80:69:58:a3:15:85:bb:35:97:ec:34:95:57:
a3:5f:e2:13:d3:67:34:82:69:bf:2f:5d:e7:28:0f:e7:ed:49:
a6:91:0a:f4:3e:89:87:b1:c5:4e:f1:37:5a:a8:98:d9:d5:40:
eb:59:4c:67:b3:ae:08:2f:aa:21:ae:eb:8e:47:9e:4e:0a:ba:
be:a9:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:24:36 2025 by rpki-client