Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File: l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier: gs2Py4Xoy8DhquN41poZji5z8XZE5uAhzpmBAALs2ms=
Subject key identifier: A0:DE:BE:BE:06:8E:3D:24:F1:0C:F7:1D:4D:18:46:CC:E5:46:9B:99
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer: /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial: 019874F4B5BD6446AAE67F4DA3263E7197F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 12:00:50 +0000
Manifest this update: Mon 04 Aug 2025 12:00:50 +0000
Manifest next update: Tue 05 Aug 2025 12:00:50 +0000
Files and hashes: 1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: JByuUMX2HSFEqe53Yrq8UxDzZjPrdGrvBZyL7mkDjTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:b5:bd:64:46:aa:e6:7f:4d:a3:26:3e:71:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Validity
Not Before: Aug 4 12:00:50 2025 GMT
Not After : Aug 5 12:00:50 2025 GMT
Subject: CN=a0debebe068e3d24f10cf71d4d1846cce5469b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:95:d9:44:29:8b:fa:4b:34:cf:2a:42:e4:
cc:a6:e5:eb:a4:8f:7b:ea:ed:3d:5f:97:76:22:06:
c9:dd:93:c5:7d:9f:c4:66:95:87:4f:f1:c2:d2:56:
55:89:8f:37:21:c1:2f:59:24:3b:2c:8b:c8:2d:70:
5f:72:7e:d0:19:a3:7b:50:54:03:06:93:d3:79:77:
f0:09:0c:85:b1:fc:b6:d7:62:ef:5e:9d:a3:98:f0:
a1:03:0c:61:29:a4:39:fd:39:70:10:a8:c0:db:d5:
d3:e5:cd:44:e1:99:33:73:a1:b1:d0:36:bc:f1:16:
3c:7f:ef:62:ca:1b:72:9f:5b:de:03:e8:31:d9:c3:
ae:8a:78:dc:58:00:35:17:10:e2:de:de:0e:07:6a:
70:4a:66:08:6e:dd:d3:b7:a1:f5:85:6e:c0:ac:be:
4c:18:40:79:fb:d1:d0:0d:18:85:2d:e7:55:42:a1:
47:85:fb:e3:16:a3:a9:7c:d2:4a:40:29:09:9c:36:
68:c2:65:bf:28:d4:03:31:de:67:53:79:0b:cd:e3:
f1:b1:a8:46:36:25:c0:b0:83:50:ba:12:1a:19:26:
04:f5:8f:df:15:b3:fb:48:04:60:a3:0c:38:62:55:
cf:02:f0:d6:44:8e:c4:2e:16:31:19:f4:c4:ef:69:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:BE:BE:06:8E:3D:24:F1:0C:F7:1D:4D:18:46:CC:E5:46:9B:99
X509v3 Authority Key Identifier:
keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0a:a5:70:0e:cd:75:87:35:3e:82:b1:0f:78:bd:9e:6a:53:
1e:f0:8d:1d:33:66:28:7f:ee:dd:52:4f:a9:b7:7f:3b:85:88:
27:86:0f:0a:5a:4c:58:3d:fd:d3:9c:3d:02:1f:ea:0f:46:16:
16:c3:d5:0a:ce:e2:fb:f2:f7:06:18:0b:fa:24:9d:19:01:b6:
53:27:98:83:d3:b6:49:b2:93:ea:cd:9b:3c:22:b8:c3:4e:bf:
21:a6:2b:6a:9a:cb:9e:7f:22:d1:e0:82:4b:60:4c:29:37:80:
52:df:e2:f4:35:3c:ec:2a:32:39:68:ca:f1:8c:8b:e0:e8:d3:
e0:e4:80:65:7f:10:ae:dc:7c:96:c4:23:a2:1e:1f:47:8b:cb:
90:33:98:0b:e8:a7:28:67:98:06:82:95:39:52:a4:5c:8d:3d:
15:13:85:d7:85:37:7c:a9:be:df:c6:b0:22:d4:9c:4c:6b:5b:
4a:6c:41:36:90:09:bb:86:83:08:72:d9:aa:b5:1a:7e:63:2b:
66:e4:39:26:3a:8d:63:df:5a:64:61:92:25:c9:65:2e:73:5b:
36:dd:48:f7:5f:06:e1:74:5e:26:0c:c3:05:49:ed:c3:03:6b:
8b:ac:ba:24:1e:7f:25:87:42:23:51:3e:da:72:aa:4a:a5:df:
9a:f9:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:28 2025 by rpki-client