Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: TTt2EhrM0vxP8w1SHSC3ngpkmMkm4DhnVeXj1/mMUtU=
Subject key identifier: 05:59:B1:D8:36:08:83:15:6E:4D:5F:5C:51:41:88:53:9F:35:A5:73
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019873E2ABADD6DB85E96AA8AEC58F59730A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 0418
Signing time: Mon 04 Aug 2025 07:01:31 +0000
Manifest this update: Mon 04 Aug 2025 07:01:31 +0000
Manifest next update: Tue 05 Aug 2025 07:01:31 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: zXChCKwN480bHW04fNc72cs24R7FkKevrk+eI1gWuh4=)
3: vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa (hash: YQeo8wdHJXObNNl1+pafBMrUYC0XtdN/sbIQwRl/hu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ab:ad:d6:db:85:e9:6a:a8:ae:c5:8f:59:73:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Aug 4 07:01:31 2025 GMT
Not After : Aug 5 07:01:31 2025 GMT
Subject: CN=0559b1d8360883156e4d5f5c514188539f35a573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:56:c8:45:33:28:0a:ca:20:e4:1e:2a:6d:
1b:96:0b:53:a1:d5:11:8b:df:da:1e:8f:77:73:9f:
e4:7b:35:7a:f4:34:f7:1a:de:80:15:cd:de:93:57:
5b:b6:4d:53:34:0d:95:21:1e:10:8b:f4:3b:47:82:
fc:af:e8:d4:e7:fc:57:f2:94:3e:64:89:0c:70:d0:
64:26:d8:08:76:d4:57:fa:56:10:11:c3:88:ae:d5:
96:9f:16:e6:fa:5b:15:74:da:e5:c3:cf:4e:cd:68:
82:2b:a6:83:a6:23:2d:aa:7a:ac:54:71:65:dd:42:
d4:c9:c3:d6:07:a2:18:64:3f:7f:49:34:6b:16:80:
76:64:c7:0c:fb:29:df:82:42:6a:7c:07:46:42:8c:
59:be:4d:28:f0:bb:52:23:eb:48:ca:22:d6:77:b3:
d8:d7:50:b0:f6:f9:28:2b:56:b5:cd:05:33:b9:e8:
bc:c9:9e:b8:4a:1d:b9:c0:18:03:61:61:48:36:94:
19:fb:49:7b:93:1c:83:64:59:2e:59:3a:a5:fa:2e:
e5:5c:5b:00:c8:93:89:49:84:1c:87:ed:d3:ad:46:
21:10:45:27:9f:10:1b:d8:3d:1b:d9:b4:f2:92:0b:
d5:b8:f3:d5:92:4f:03:7f:78:64:2a:bd:bd:c0:98:
8c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:59:B1:D8:36:08:83:15:6E:4D:5F:5C:51:41:88:53:9F:35:A5:73
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ee:71:7c:e0:1f:81:56:a4:85:46:4d:12:33:eb:65:ad:dd:
b0:bc:a0:f1:a2:ad:8a:67:e7:fb:20:e5:9b:44:51:c8:21:7a:
ce:b2:b8:19:7e:bf:c6:69:40:c9:2c:84:84:85:c3:25:15:35:
fd:98:31:7c:71:cf:74:83:b3:94:7d:f8:a9:8d:ee:9e:58:13:
1d:8a:4d:1e:86:92:5e:10:9c:e1:b1:40:69:7a:26:f8:19:05:
ab:1c:ef:69:9f:21:87:ba:7c:4a:ef:05:4e:f8:fd:dd:7e:6a:
9a:65:85:e6:0b:ef:c5:79:10:a6:aa:fc:3c:ab:45:22:43:d4:
e0:f8:90:d6:f6:28:51:8b:aa:ea:d9:70:a3:fe:c4:4b:5a:50:
88:57:6d:96:d1:c2:f4:e5:6a:ce:e6:8f:98:a5:34:5f:e1:70:
2c:f5:94:4c:32:ae:01:42:79:fc:78:e5:89:a4:9b:cf:13:b8:
3f:76:7c:ed:5a:59:82:c0:d0:34:43:b4:c0:0b:e4:fc:1d:f3:
6e:b2:7c:31:d6:c9:94:3d:5a:13:48:3c:d1:84:f2:b1:d3:c8:
27:07:2d:81:a2:1c:58:87:39:d3:2b:bb:42:26:6a:68:35:1b:
df:2c:d7:d6:41:2f:c2:ca:67:0c:d5:a1:e7:5f:a7:a4:73:48:
ce:bc:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:42 2025 by rpki-client