Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: nt51g7wPoR/+tnVij2jo+3lekRH/Hu6emh9iCdxdZHc=
Subject key identifier: 7F:75:FC:42:97:D6:F0:71:6C:6E:8F:B2:AF:3A:49:B4:CE:22:6A:54
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 01984AAEA06E9F208A85FE8409A1055784F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:14 +0000
Manifest this update: Sun 27 Jul 2025 07:00:14 +0000
Manifest next update: Mon 28 Jul 2025 07:00:14 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: dwIyS2DUYW5QfUu4UHvdziOkRQKF9WHl637S69DDtAQ=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a0:6e:9f:20:8a:85:fe:84:09:a1:05:57:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jul 27 07:00:14 2025 GMT
Not After : Jul 28 07:00:14 2025 GMT
Subject: CN=7f75fc4297d6f0716c6e8fb2af3a49b4ce226a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:44:3b:b0:09:9f:7e:2a:a9:67:15:cf:55:
1c:e9:aa:64:8b:38:e3:67:98:ef:f3:68:ec:bb:15:
44:2d:16:63:2e:98:4a:5f:4e:d1:bf:0e:bf:29:76:
5f:61:97:c1:ac:02:45:9b:58:2e:a2:9f:b3:3b:2c:
85:d8:ce:c9:81:31:fb:b4:5e:dc:38:84:88:38:5d:
6e:0e:d7:3f:3c:34:cc:31:e5:99:a1:92:75:d7:95:
62:01:e1:c7:82:8a:aa:67:a6:2c:98:16:73:c8:14:
87:e9:79:b4:5e:ba:59:4e:52:e3:c5:e7:bf:4a:c6:
33:b4:ee:5e:63:bc:d9:8c:c0:7d:9d:65:81:f5:57:
ca:b1:a6:2c:81:6a:74:02:5a:24:d9:83:5a:bd:d3:
e8:55:d0:53:e4:68:a0:6c:6e:a3:e8:90:ac:da:a4:
b1:d7:b5:12:6f:b6:f6:e3:c3:3d:3d:03:d2:62:f7:
19:20:92:9b:b3:f8:1a:df:c6:8f:9e:99:04:e3:bc:
c9:07:9e:f2:dc:43:1f:e3:82:04:14:a6:7c:77:16:
b3:a9:b9:f9:cb:11:5d:c7:f7:9a:17:4c:78:d8:64:
a9:65:7e:a0:b4:3e:be:b3:95:e5:7b:c2:91:5f:f6:
ee:6a:7b:26:d4:88:19:41:f6:0e:5b:9b:1c:da:de:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:FC:42:97:D6:F0:71:6C:6E:8F:B2:AF:3A:49:B4:CE:22:6A:54
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:15:ce:3c:e3:65:02:6d:da:40:28:cf:ee:43:49:5e:aa:
90:ec:94:98:bd:15:9d:9e:5b:ac:67:06:f8:83:e1:d5:e4:d9:
13:d2:9f:38:85:eb:94:71:7f:33:38:5d:be:e0:4e:68:a7:4a:
31:89:19:34:0a:d7:6a:26:5c:91:f5:a9:40:5c:0b:d2:7e:50:
3e:93:d6:a5:d4:15:1f:59:15:08:14:4e:66:ec:b3:ef:49:e0:
8c:28:6d:e9:be:6d:e0:61:c2:f4:f5:1d:7e:bd:09:6a:15:23:
38:00:ad:99:08:df:72:bc:23:95:62:99:76:d7:6d:f8:de:8a:
a3:35:d8:01:63:5e:2b:12:fc:f8:ce:1c:fc:23:c3:f5:57:ce:
68:44:7e:11:1e:65:c2:3e:f3:a7:36:2a:ed:67:a2:b7:8a:1b:
6c:a9:02:71:9a:79:e1:71:48:7a:cb:2f:4b:03:b3:66:32:1c:
42:5c:c6:63:95:df:11:2f:e5:01:fc:88:be:17:1b:58:4c:88:
20:72:08:bd:d6:1a:25:14:58:de:74:81:7b:7e:66:0a:f0:c5:
60:32:cd:43:e7:3a:23:01:af:af:c8:19:97:9c:0d:3f:75:d3:
e7:5a:1c:de:3a:ac:a4:a8:8c:bd:a6:7e:20:73:b3:bd:c3:ca:
56:fe:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:03 2025 by rpki-client