Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: iRPNrSbhJAoVbp07iWk/OS3eWqYZkbN2qT+jxIdK3Xs=
Subject key identifier: 7D:48:91:00:B0:1E:5A:73:D4:ED:C1:96:0D:BB:B3:4A:36:42:C8:95
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 01984AAF0296EA491EF203628C031AD1E6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 1560
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: CD3M9IpQViVHcxWq1IjVakWeBmgPZnyV6Nr+ltmkF3M=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:02:96:ea:49:1e:f2:03:62:8c:03:1a:d1:e6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=7d489100b01e5a73d4edc1960dbbb34a3642c895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:8e:a0:26:c5:8e:2a:eb:75:95:5b:f7:96:
e5:2f:f5:ff:d9:30:91:42:14:c6:1a:b2:df:91:51:
f6:2a:5d:62:ab:ad:88:b8:3c:c4:a0:82:2f:18:ff:
13:a6:e6:b4:c3:6a:90:77:57:0e:68:d4:b2:d4:53:
48:d9:12:14:b1:4d:9c:13:b2:a2:55:2f:92:c3:c0:
4c:09:01:09:05:47:52:c9:23:25:3e:c6:94:9e:2b:
90:cc:0f:58:36:14:36:f8:f0:9b:73:a9:d0:29:d3:
11:67:ae:83:fd:16:68:d8:79:90:39:2e:84:63:50:
e5:24:54:c4:6e:3c:fd:2d:ba:ab:55:84:f8:2c:4c:
20:fa:be:d5:3b:3b:a4:32:7c:61:d5:99:16:80:a3:
7f:82:de:c9:92:4c:86:9b:a2:39:ba:91:a5:56:a6:
e2:0e:1c:81:ef:ab:10:20:09:42:f3:36:27:c7:c8:
87:78:51:df:4d:43:22:b2:22:0f:fe:8e:e4:8a:d6:
7b:fe:02:8e:59:87:36:bf:82:20:e3:95:9b:26:27:
9e:88:aa:1c:f9:75:fc:0d:92:be:cc:6e:0e:2a:3e:
53:32:72:c1:11:6c:4f:80:48:f1:d1:5f:33:34:bb:
43:49:10:95:f8:3a:29:01:58:3c:98:6e:d0:e2:c7:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:91:00:B0:1E:5A:73:D4:ED:C1:96:0D:BB:B3:4A:36:42:C8:95
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:bf:d1:4f:c3:48:fe:b7:f0:42:db:42:36:30:9c:b7:f7:
f8:79:e3:88:63:e8:fa:a2:77:3a:78:26:51:4d:b6:5b:dd:7d:
36:8f:b7:9e:a3:ab:1b:e8:5c:a4:9a:6e:56:42:b1:f5:d1:56:
9c:19:52:2e:a9:7b:12:d3:17:c8:9c:3c:a8:16:f3:50:0b:25:
57:00:40:3a:8b:2d:7f:a9:67:1a:03:ff:47:97:c9:ba:d0:7e:
4c:64:b8:73:fc:24:8c:59:36:8e:30:b8:6a:77:6f:59:e2:ea:
3a:fe:85:e8:4d:70:3c:fc:44:5b:2c:a0:88:9d:6f:8f:b7:a1:
c2:c6:30:76:8a:41:ea:27:fb:1e:df:dd:e1:3b:f3:36:4e:68:
38:a3:01:99:70:53:86:2c:65:df:75:2d:62:7c:7e:66:e0:54:
7f:67:9f:d8:d1:75:79:2e:5e:46:34:be:d4:74:da:fa:1c:a3:
8f:b3:11:cc:10:8c:dc:94:99:7b:2f:23:e6:2a:d4:01:c4:91:
34:4f:cd:7d:cf:9a:77:9f:cc:a4:39:5d:91:5c:e1:e4:70:66:
1f:b0:ba:1f:ac:35:95:ba:0a:59:0e:5d:f3:6e:63:5f:4f:4c:
25:87:6d:4d:a8:dd:96:93:5d:44:13:cf:ea:d9:b9:cf:8c:b5:
2b:c5:a6:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrwKW6kke8gNijAMa0ebLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjYxMmUxZjZiNGQ4M2Y4YTVkNTUyY2YzYjYwZWRkMjNi
ZmU5ZjQwHhcNMjUwNzI3MDcwMDQwWhcNMjUwNzI4MDcwMDQwWjAzMTEwLwYDVQQD
Eyg3ZDQ4OTEwMGIwMWU1YTczZDRlZGMxOTYwZGJiYjM0YTM2NDJjODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhCOoCbFjirrdZVb95blL/X/2TCR
QhTGGrLfkVH2Kl1iq62IuDzEoIIvGP8Tpua0w2qQd1cOaNSy1FNI2RIUsU2cE7Ki
VS+Sw8BMCQEJBUdSySMlPsaUniuQzA9YNhQ2+PCbc6nQKdMRZ66D/RZo2HmQOS6E
Y1DlJFTEbjz9LbqrVYT4LEwg+r7VOzukMnxh1ZkWgKN/gt7JkkyGm6I5upGlVqbi
DhyB76sQIAlC8zYnx8iHeFHfTUMisiIP/o7kitZ7/gKOWYc2v4Ig45WbJieeiKoc
+XX8DZK+zG4OKj5TMnLBEWxPgEjx0V8zNLtDSRCV+DopAVg8mG7Q4sd9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1IkQCwHlpz1O3Blg27s0o2QsiVMB8GA1UdIwQY
MBaAFOy2EuH2tNg/il1VLPO2Dt0jv+n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEt
OTZmZTE5MTFkMGIzLzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEtOTZmZTE5MTFkMGIz
LzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThi/0U/D
SP638ELbQjYwnLf3+HnjiGPo+qJ3OngmUU22W919No+3nqOrG+hcpJpuVkKx9dFW
nBlSLql7EtMXyJw8qBbzUAslVwBAOostf6lnGgP/R5fJutB+TGS4c/wkjFk2jjC4
andvWeLqOv6F6E1wPPxEWyygiJ1vj7ehwsYwdopB6if7Ht/d4TvzNk5oOKMBmXBT
hixl33UtYnx+ZuBUf2ef2NF1eS5eRjS+1HTa+hyjj7MRzBCM3JSZey8j5irUAcSR
NE/Nfc+ad5/MpDldkVzh5HBmH7C6H6w1lboKWQ5d825jX09MJYdtTajdlpNdRBPP
6tm5z4y1K8WmYg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:17:01 2025 by rpki-client