Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier: DSWn5kM+PJU7k1qCfDkp8fiHDG7U891prfpO0M3zqYg=
Subject key identifier: 92:AD:4B:44:5B:DE:B6:2E:01:E1:F7:0F:6D:42:35:B8:0C:17:C4:B7
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 019A4EF5BAB64B3A76881ECDA19439E4B659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:57 +0000
Manifest this update: Tue 04 Nov 2025 13:01:57 +0000
Manifest next update: Wed 05 Nov 2025 13:01:57 +0000
Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: qoOB9DnlKaO/qs6xF9O1WlA7GRyR1qEVf8KVhIdeorY=)
2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ba:b6:4b:3a:76:88:1e:cd:a1:94:39:e4:b6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Nov 4 13:01:57 2025 GMT
Not After : Nov 5 13:01:57 2025 GMT
Subject: CN=92ad4b445bdeb62e01e1f70f6d4235b80c17c4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:3b:87:3b:d1:5c:65:04:99:67:f6:28:6e:
ff:10:ec:7e:1b:11:85:f1:d5:d7:f3:4a:1c:3d:6e:
ac:ff:8c:90:ba:c5:25:7a:16:e0:b6:ad:c4:97:2a:
0a:6b:31:4d:50:45:80:64:d6:96:9f:f2:d4:66:31:
02:5c:ba:65:da:87:25:5d:49:84:b8:ef:13:0c:76:
ab:02:15:54:d3:6c:89:a7:d8:62:fc:5c:8e:2f:5c:
08:ed:0f:43:6e:45:37:ef:0e:28:80:c0:ba:0b:7b:
34:7a:0e:4f:14:77:a4:7e:80:a3:72:33:72:94:c9:
9c:9e:b5:5c:9f:b1:3c:ee:07:1e:7c:58:95:ef:a3:
17:5c:59:29:bb:17:38:9b:f2:99:97:f4:0e:80:d9:
7e:14:19:a8:60:1f:e3:11:2b:03:35:be:19:a3:da:
98:5d:71:cc:7f:ea:92:cb:fc:fb:33:27:77:d1:49:
85:9a:43:84:7e:ee:85:2d:49:b8:dd:db:89:50:bd:
11:38:11:eb:a7:78:b6:60:5c:fb:b2:17:30:f0:2d:
9f:f9:83:bd:05:0c:47:72:34:d7:67:83:e2:28:dc:
33:7d:0a:ac:02:5c:e3:d1:97:79:58:21:06:92:47:
00:fa:4d:85:f5:6e:df:ac:87:82:cf:81:c9:23:b6:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:4B:44:5B:DE:B6:2E:01:E1:F7:0F:6D:42:35:B8:0C:17:C4:B7
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:33:79:7d:bb:22:6a:93:b7:86:9b:f8:f2:71:2c:7f:cd:d7:
56:23:b0:19:7d:95:b0:c8:40:31:db:62:f4:08:54:20:5e:e7:
06:88:0f:27:97:f0:71:67:10:8d:99:50:78:0f:4b:11:eb:d8:
ec:97:b5:ff:a8:d1:8b:c3:d7:44:62:f6:b5:0b:6a:3e:87:82:
b0:ff:01:23:1a:10:4e:3d:20:45:5f:1d:38:6a:96:73:26:cf:
e0:92:a4:ba:43:33:3a:b4:87:7f:4c:59:4a:e0:b4:b7:ca:4b:
47:9e:91:41:10:ff:6a:e4:2b:cc:5c:d6:13:dd:e3:f2:f4:81:
b7:b8:9f:82:d7:43:88:7f:84:d7:17:e5:97:aa:22:55:d5:3e:
33:26:34:87:c9:1f:5c:fe:36:c2:07:0f:07:f0:75:26:d5:89:
be:c6:b2:b9:3c:3e:e4:31:14:ff:48:de:fe:80:53:3c:f8:05:
be:c9:80:6e:3f:4b:a1:31:bb:5b:58:86:3a:ee:4b:48:ac:5e:
cc:f6:80:a6:92:ac:b0:7e:7f:ae:93:43:98:6f:23:52:35:e3:
2c:34:33:ba:63:2d:7e:0f:7d:45:fe:35:a0:71:3d:09:60:10:
62:86:61:de:26:59:f2:a3:5f:91:e2:fc:21:b1:c6:41:a3:0a:
fd:d2:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:29 2025 by rpki-client