Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: ejJigPGsyIryFQld9Xn83ANOi+9mUGGTQUek0njNgAg=
Subject key identifier: 3A:2F:85:76:13:C9:DA:84:C2:0F:6A:E6:CA:07:93:91:30:18:50:10
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 0197485531BA26796A08893AA0648FDF6B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1182
Signing time: Sat 07 Jun 2025 03:00:31 +0000
Manifest this update: Sat 07 Jun 2025 03:00:31 +0000
Manifest next update: Sun 08 Jun 2025 03:00:31 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: hpB61OBmn0TD4nCxdXpGq5tkLpNP69H127gZqnOy3No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:31:ba:26:79:6a:08:89:3a:a0:64:8f:df:6b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Jun 7 03:00:31 2025 GMT
Not After : Jun 8 03:00:31 2025 GMT
Subject: CN=3a2f857613c9da84c20f6ae6ca07939130185010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:20:90:a3:51:64:ad:e5:3d:40:b5:3b:6f:
ad:01:67:7e:02:00:03:50:dc:0e:78:3a:f4:19:bd:
47:8e:09:06:2f:3d:92:7c:dc:64:1f:2e:5c:08:72:
f8:85:c6:06:2c:82:c1:d9:ac:8a:c2:2e:62:0d:70:
2f:c2:93:eb:11:45:61:29:51:d1:5b:2c:7e:bf:2d:
a0:90:c8:d6:64:56:dd:cc:f7:0f:01:bd:f9:d6:2d:
c2:ac:87:7e:c1:42:d8:66:df:bd:d2:05:f2:d9:3d:
7a:f7:e2:3d:0f:cb:02:a9:24:ef:d5:d3:c0:de:2f:
60:d7:f8:79:30:4d:5f:48:57:bc:e5:8f:fa:75:e3:
40:15:68:32:b0:ee:79:85:7d:0d:6f:6d:c6:49:91:
a2:24:56:14:24:ee:97:68:83:f8:97:e4:b8:b7:af:
ab:dd:d7:82:33:9c:a8:09:9e:28:85:e3:52:e8:4b:
a3:ea:fa:a6:dd:62:b9:dd:ee:07:cc:35:a6:cf:60:
f6:cf:21:0a:08:27:d5:7b:63:ce:f1:bf:ee:66:76:
02:83:07:f3:5a:d0:87:99:ff:28:bc:00:41:ef:0a:
83:8f:47:81:fd:a8:d6:64:1a:1f:8b:23:25:bb:c6:
f9:72:15:fd:be:5a:cf:91:75:ba:d2:78:db:48:88:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2F:85:76:13:C9:DA:84:C2:0F:6A:E6:CA:07:93:91:30:18:50:10
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5e:90:01:99:13:5c:db:b0:65:56:e6:df:20:21:bd:30:19:
65:7b:e6:2c:44:00:31:b0:c4:80:f5:dc:17:d7:00:5d:af:7e:
77:00:88:c3:fe:aa:1c:16:48:3e:94:2c:f5:e4:48:02:0a:16:
5f:b8:5b:34:1a:28:7a:e9:88:dd:e9:d2:05:e4:82:a8:bf:59:
7f:2e:e4:d4:29:70:81:9f:54:64:4c:06:8d:57:09:59:ca:52:
eb:63:0f:81:ba:03:ed:62:00:e4:15:31:38:78:66:a5:6c:56:
43:61:ad:52:09:e3:65:b4:c7:4b:29:5f:1f:a3:66:65:b3:fe:
0f:f4:95:7e:c3:39:a4:2a:02:85:86:f2:a8:23:94:02:b2:0e:
14:78:ae:47:31:de:0c:03:74:36:67:79:03:85:9b:85:76:70:
51:8f:00:aa:49:f1:21:ac:c2:f1:14:4d:59:6f:9e:cb:d6:42:
e8:92:89:59:4b:c0:12:bd:63:56:b7:cd:a3:d1:8f:b4:a4:bf:
05:bd:45:42:79:d9:9a:77:7d:b3:58:ea:50:70:fc:24:77:88:
ae:7e:80:6f:72:25:7c:29:84:52:bb:50:5d:88:67:3e:1d:c5:
5a:40:b9:6d:3d:f6:c3:bb:56:20:0a:73:ea:3a:2c:ef:e9:8c:
13:d6:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:12 2025 by rpki-client