Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
File: L7oAN1bRATuUPrT1B_tOfHR3gmk.mft (raw, json)
Hash identifier: oABI5JL+VMLhZuJvufFHid6XfioISGGc9s0AReQOwCY=
Subject key identifier: 02:1E:EB:98:54:FA:DF:E2:0A:04:B9:9C:8F:48:5A:08:56:E6:08:9B
Authority key identifier: 2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
Certificate issuer: /CN=2fba003756d1013b943eb4f507fb4e7c74778269
Certificate serial: 019A5150D9FAFA908337BA7F0C75A4ACCA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
Manifest number: 3D
Signing time: Wed 05 Nov 2025 00:00:44 +0000
Manifest this update: Wed 05 Nov 2025 00:00:44 +0000
Manifest next update: Thu 06 Nov 2025 00:00:44 +0000
Files and hashes: 1: BTfaTJRkv38NK3OV8P41ApchwpU.roa (hash: YG+c62cfsP2iujTwoHOL3MZnp6ckxYppxq1JP02lQgk=)
2: L7oAN1bRATuUPrT1B_tOfHR3gmk.crl (hash: P/qhkmsJXXZI3Y5enUAhprBHJ4YuDLf9PRgeWTtfD64=)
3: MhT_ic0uhnvyZeHmGUuSvJeWPpk.roa (hash: wzWvYEFygdswmUnUlDOzRDuit/r9AHiuR6372yT7GYk=)
4: tNh8YNIJ-t7wlK_o6eKwKtq426I.roa (hash: Bmf1Jl1G+qWmzgmuLyWRiOcoL0N7ljcIkRUAYdz1q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d9:fa:fa:90:83:37:ba:7f:0c:75:a4:ac:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fba003756d1013b943eb4f507fb4e7c74778269
Validity
Not Before: Nov 5 00:00:44 2025 GMT
Not After : Nov 6 00:00:44 2025 GMT
Subject: CN=021eeb9854fadfe20a04b99c8f485a0856e6089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:65:ab:72:79:e7:59:7e:5e:7b:93:70:cf:
0f:1e:a2:6f:8f:17:3b:16:b6:07:bd:0a:91:13:fa:
69:c5:2f:66:50:b4:71:b1:f2:8f:71:d3:fd:ed:d6:
e9:13:d0:4e:1d:2c:ea:6f:24:e3:31:74:da:aa:e3:
b2:c2:00:13:1c:27:27:f1:f2:19:97:de:19:87:c6:
3a:8e:d4:44:32:4d:02:6e:9a:10:2d:19:c5:01:c3:
6d:ea:75:0f:57:20:25:15:3a:ec:94:58:9f:c1:55:
dd:57:03:18:0e:93:71:df:9c:eb:f9:d6:3a:d2:4f:
ad:5b:ab:c8:3f:7e:af:86:0d:2f:fa:5b:24:b2:6c:
d1:b6:c3:32:35:f1:01:e7:bb:2d:b2:d8:7f:0d:d8:
fa:f4:49:c3:f6:2a:41:f9:dc:d1:ef:f4:fc:b8:27:
b8:b3:d8:06:e1:0e:3b:dc:06:b4:15:91:35:ca:69:
c8:46:5d:d7:96:bf:30:3a:a6:20:30:3f:d9:89:64:
46:d1:a1:5d:47:f7:03:a9:61:bf:64:1d:79:f7:b4:
79:74:51:71:4b:e0:35:46:e4:d2:57:7c:8b:c6:8a:
2a:c4:af:70:5f:84:b6:19:d8:46:d6:57:65:31:10:
1f:69:f2:90:89:b7:8a:bb:ba:2d:23:47:e6:32:a1:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1E:EB:98:54:FA:DF:E2:0A:04:B9:9C:8F:48:5A:08:56:E6:08:9B
X509v3 Authority Key Identifier:
keyid:2F:BA:00:37:56:D1:01:3B:94:3E:B4:F5:07:FB:4E:7C:74:77:82:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7oAN1bRATuUPrT1B_tOfHR3gmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/622fdb-0e56-4c87-866b-b31f252f1969/1/L7oAN1bRATuUPrT1B_tOfHR3gmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:df:7d:a5:84:42:39:f9:f7:82:e5:e3:06:95:18:4d:f3:c6:
1c:d8:fd:c3:1f:df:6a:8f:56:9e:90:20:e5:b3:98:eb:71:fa:
94:8b:be:a7:3b:9d:05:63:a8:6f:a9:b3:59:20:bb:a8:15:9b:
59:1b:ce:15:f4:c3:b6:16:03:49:6e:4e:ea:15:ab:b9:25:85:
ad:38:2a:56:83:5b:bd:e9:be:f4:fc:fd:70:c3:a3:d4:17:4f:
7d:5d:a3:aa:53:5f:8d:2a:b6:4f:b6:a6:4a:4e:26:b8:32:d4:
7a:1a:1c:cc:b7:cd:e9:56:ff:3e:f5:49:a0:03:71:1c:2a:55:
57:2f:d3:61:9a:7d:21:ce:05:55:ba:84:0a:5a:32:5d:90:13:
78:e9:7b:a8:1a:19:ea:9c:b8:37:9b:7d:f4:23:0b:6c:b3:cd:
c4:c7:42:73:44:02:76:04:2b:6b:3d:48:3f:4c:b3:b1:30:73:
c2:eb:9e:dd:1e:75:83:7f:10:11:49:cf:d6:b3:0d:df:94:cb:
3c:4d:d6:af:f3:37:d5:c3:54:39:10:ec:45:9b:5c:f7:c6:43:
a2:b5:10:25:1c:ba:cb:f2:39:81:90:45:90:85:c9:16:d0:73:
21:80:2d:47:b8:86:e7:c8:54:69:b2:de:32:87:cd:48:54:93:
6c:2d:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:47 2025 by rpki-client