Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: 0My2veZOc41s07eKMI1N4ObXw43Bn2Q5pxN50ePJIpU=
Subject key identifier: AE:F3:2E:BA:11:63:98:82:8C:0F:F9:D9:BB:A1:05:F1:A6:4C:4A:4A
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 019A5119B37C670A4D3093CF26AB4708E7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 0511
Signing time: Tue 04 Nov 2025 23:00:30 +0000
Manifest this update: Tue 04 Nov 2025 23:00:30 +0000
Manifest next update: Wed 05 Nov 2025 23:00:30 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: RznLtWshp3vL12/rJGkA+sP/W4zxrvYPPIpI28bQNu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b3:7c:67:0a:4d:30:93:cf:26:ab:47:08:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Nov 4 23:00:30 2025 GMT
Not After : Nov 5 23:00:30 2025 GMT
Subject: CN=aef32eba116398828c0ff9d9bba105f1a64c4a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:a0:bb:e9:9c:a4:13:b1:6c:d3:aa:78:7e:
96:99:f8:1e:9c:97:fb:e4:0a:62:ed:4c:1b:39:ea:
59:7c:93:89:4a:a1:bb:43:99:10:d5:7a:40:d7:27:
fb:3a:5e:60:c3:40:f8:89:23:a6:f9:82:6a:67:f9:
ff:7e:e5:6c:5a:26:2e:fd:73:57:50:db:5a:8b:b0:
df:61:23:44:f6:0e:7a:b3:e6:d6:ac:61:c2:48:42:
88:3b:68:89:a5:eb:6d:1e:0a:64:73:26:0d:61:52:
f1:b6:a2:78:f4:25:4f:63:9c:e4:71:e5:e9:97:96:
09:bc:7c:f0:18:04:37:72:f0:37:0f:36:ba:e1:06:
8e:33:d8:ef:3a:84:a0:d7:1f:69:fb:35:c7:79:2a:
00:c3:c1:4e:19:84:0b:3b:af:a1:13:9c:9b:42:cc:
b8:19:f6:e8:00:a2:31:b6:b4:80:be:b1:67:cb:b7:
4f:f2:f5:03:2c:b6:8d:61:e7:74:fd:cc:aa:fd:5d:
52:17:5f:78:61:7a:86:c4:36:24:8a:d0:8c:c0:fb:
e5:e7:ea:3c:a9:e3:65:74:d0:c8:c4:ac:c9:18:ee:
b6:be:56:ad:39:f3:2e:ba:f8:a3:72:24:f2:e9:96:
09:32:82:e8:23:63:47:78:98:7a:91:c9:e4:16:f3:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:2E:BA:11:63:98:82:8C:0F:F9:D9:BB:A1:05:F1:A6:4C:4A:4A
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c2:b3:1b:04:8e:15:56:9b:ab:41:a3:cd:2c:5b:d1:8a:6d:
d5:d5:e6:d6:ee:45:44:e2:33:d4:31:fe:0c:ac:97:f8:8a:8c:
96:a0:02:48:85:b9:05:9c:1a:a6:cc:12:b9:3a:6a:1c:01:4d:
51:b5:5c:2b:e6:14:b9:88:97:de:cf:e3:80:f4:85:69:2b:db:
e7:23:92:c3:00:37:33:f2:98:7d:66:3b:c3:73:e2:24:7e:fd:
86:a2:88:72:20:65:ff:92:68:d3:90:34:ee:bb:80:06:ed:ca:
ef:62:64:61:1c:e2:21:ab:67:19:63:28:4e:0f:cf:74:68:98:
15:67:e8:b9:12:31:17:7a:cc:9c:6a:24:35:be:9c:ac:62:be:
57:3b:2e:03:63:e3:e6:78:19:8e:ce:e4:ed:fe:d0:2f:57:33:
d6:00:cc:45:66:8c:bd:4b:59:a5:fd:1b:4d:53:2b:1f:66:62:
10:1e:d9:23:a7:58:84:c8:34:0e:07:09:f8:5a:83:21:31:33:
75:c0:3a:64:25:01:02:35:8f:3d:08:ed:f4:65:b8:14:4c:0b:
0a:64:fb:a4:7d:b7:f9:3f:67:15:09:62:67:04:09:f8:c1:86:
a7:3c:e1:17:c0:15:96:3c:8a:38:fc:e4:b3:52:a2:79:36:a1:
60:90:ee:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGbN8ZwpNMJPPJqtHCOf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk
OTBiODcwHhcNMjUxMTA0MjMwMDMwWhcNMjUxMTA1MjMwMDMwWjAzMTEwLwYDVQQD
EyhhZWYzMmViYTExNjM5ODgyOGMwZmY5ZDliYmExMDVmMWE2NGM0YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuICgu+mcpBOxbNOqeH6WmfgenJf7
5Api7UwbOepZfJOJSqG7Q5kQ1XpA1yf7Ol5gw0D4iSOm+YJqZ/n/fuVsWiYu/XNX
UNtai7DfYSNE9g56s+bWrGHCSEKIO2iJpettHgpkcyYNYVLxtqJ49CVPY5zkceXp
l5YJvHzwGAQ3cvA3Dza64QaOM9jvOoSg1x9p+zXHeSoAw8FOGYQLO6+hE5ybQsy4
GfboAKIxtrSAvrFny7dP8vUDLLaNYed0/cyq/V1SF194YXqGxDYkitCMwPvl5+o8
qeNldNDIxKzJGO62vlatOfMuuvijciTy6ZYJMoLoI2NHeJh6kcnkFvPvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7zLroRY5iCjA/52buhBfGmTEpKMB8GA1UdIwQY
MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt
OWZkYjVjNTVhZTUwLzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw
LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMKzGwSO
FVabq0GjzSxb0Ypt1dXm1u5FROIz1DH+DKyX+IqMlqACSIW5BZwapswSuTpqHAFN
UbVcK+YUuYiX3s/jgPSFaSvb5yOSwwA3M/KYfWY7w3PiJH79hqKIciBl/5Jo05A0
7ruABu3K72JkYRziIatnGWMoTg/PdGiYFWfouRIxF3rMnGokNb6crGK+VzsuA2Pj
5ngZjs7k7f7QL1cz1gDMRWaMvUtZpf0bTVMrH2ZiEB7ZI6dYhMg0DgcJ+FqDITEz
dcA6ZCUBAjWPPQjt9GW4FEwLCmT7pH23+T9nFQliZwQJ+MGGpzzhF8AVljyKOPzk
s1KieTahYJDuDw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:07:24 2025 by rpki-client