Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: SEs3xwUrhv1CKlZicViljM2+r8jyrPXhX4t1E856d0s=
Subject key identifier: F8:83:92:C8:52:B7:7E:42:7B:1C:2A:BF:11:03:0A:3F:00:42:2D:23
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 0198530D2B853C9EB486B598EE3622976A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 120C
Signing time: Mon 28 Jul 2025 22:00:28 +0000
Manifest this update: Mon 28 Jul 2025 22:00:28 +0000
Manifest next update: Tue 29 Jul 2025 22:00:28 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: LinUqko4kvqvVhHDgPQjRj+zuAbJhECXv4L5DfVV9iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:2b:85:3c:9e:b4:86:b5:98:ee:36:22:97:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Jul 28 22:00:28 2025 GMT
Not After : Jul 29 22:00:28 2025 GMT
Subject: CN=f88392c852b77e427b1c2abf11030a3f00422d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:59:9f:7a:bb:bb:1f:f4:c9:30:5b:3b:e6:
50:b4:2b:3b:bf:c8:05:38:a3:64:70:8c:f6:8e:5d:
02:1f:16:a5:17:7a:3f:c8:2f:e2:4d:97:ce:8e:89:
40:5e:1a:1e:84:0c:6f:89:e2:d0:3c:94:f1:76:05:
17:36:0b:75:e9:89:97:1d:d6:99:28:95:b4:6e:f9:
2d:63:ff:79:a7:a0:36:16:68:e2:0e:08:0b:6a:24:
8f:dc:b3:96:2f:42:bb:a3:33:7e:f2:fd:f7:8f:3d:
b5:c3:da:19:21:d0:c4:65:04:8a:d2:65:ab:1d:56:
91:92:62:65:08:88:51:e1:82:6d:eb:e3:e4:ea:08:
54:9e:55:0c:3d:06:02:33:60:f0:30:e9:f6:5e:7a:
2d:a2:ff:58:1b:06:aa:cf:4d:bb:09:cc:f9:81:50:
d8:83:f0:1b:9b:f6:cd:72:99:4c:ec:d7:fa:a1:41:
26:1c:82:3d:15:fa:82:35:df:93:26:1c:46:18:52:
7e:07:23:f7:ec:2e:06:bf:14:ae:cc:20:7b:8a:36:
f5:c8:45:b1:b9:46:0a:e0:7a:7b:bf:c4:34:7c:87:
d7:64:ef:4e:e1:12:35:6e:3d:5b:45:ad:98:2b:2a:
d6:70:f3:c4:3e:c2:9e:92:e3:75:17:a1:8f:5e:c6:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:92:C8:52:B7:7E:42:7B:1C:2A:BF:11:03:0A:3F:00:42:2D:23
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:74:79:8b:b5:4e:4a:d1:5a:54:34:49:0b:3f:06:55:40:
94:9a:57:b0:74:1a:44:c6:16:13:82:7d:2d:a5:5b:8c:53:66:
a0:41:9c:a1:1c:c3:fc:a9:b5:06:13:99:5d:41:ef:61:19:e2:
c4:e1:3e:1f:05:5e:e9:2b:2a:96:b5:66:90:d4:3d:4a:f5:f4:
d0:83:7f:b2:7f:76:56:9d:51:44:3b:8d:67:f1:6b:57:aa:5e:
c5:f8:9a:9b:1d:b7:2b:ad:a4:08:ee:3d:6e:d1:06:f4:63:45:
5e:05:ba:f5:7b:2d:96:07:97:50:a7:4a:bb:c5:92:8f:f3:b3:
08:7a:73:c1:2b:6b:44:99:fc:46:40:11:d3:38:61:85:13:a0:
8c:99:de:6d:2a:b6:fc:3e:c6:c6:a3:4a:9f:cc:84:c5:65:53:
9c:3d:6b:41:9d:b0:17:23:7a:fd:eb:8f:7b:fa:56:4d:7b:1c:
73:e0:d9:e2:50:25:c3:fe:cb:40:08:48:65:5f:80:30:ef:45:
2b:2c:18:fe:0e:91:f7:b0:df:47:e8:43:f9:a8:91:07:bb:40:
2c:36:8a:fc:c4:61:52:98:4a:78:e6:08:98:95:7a:30:7c:cd:
57:9e:61:3f:bc:ed:4b:ff:24:0e:e8:34:1f:a7:58:19:05:49:
20:5f:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:48:29 2025 by rpki-client