Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: faauOqW/PNZ5xQxs19ySqSHe4ESwZlAs98HSxbzA3nY=
Subject key identifier: CD:E2:32:65:84:E4:02:CC:1B:3F:09:A1:E8:DF:BD:C5:0D:BD:2F:B7
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 019938390D0B04B4439EE61E617A733A2ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 10:01:26 +0000
Manifest this update: Thu 11 Sep 2025 10:01:26 +0000
Manifest next update: Fri 12 Sep 2025 10:01:26 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: vhZnwJ2vBDI6/G0+be6AARNUlk045rMiGp7jUnzWvys=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:0d:0b:04:b4:43:9e:e6:1e:61:7a:73:3a:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Sep 11 10:01:26 2025 GMT
Not After : Sep 12 10:01:26 2025 GMT
Subject: CN=cde2326584e402cc1b3f09a1e8dfbdc50dbd2fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:cd:5b:f4:3e:eb:9b:d6:34:23:ce:f3:6b:
11:13:d7:8d:11:b6:8b:ad:ac:69:db:c6:33:3e:a0:
46:41:77:22:55:a9:e7:39:39:13:60:5c:95:c5:99:
da:67:fe:fb:9f:74:11:dd:5b:4b:61:f9:a4:7f:93:
a3:76:b9:ca:19:95:7f:94:e3:70:ab:28:76:67:bf:
c5:9f:8b:21:d9:be:b3:19:00:d1:59:68:bb:78:d6:
d3:40:9b:ef:aa:a0:d4:b9:15:e5:2d:7e:22:8e:d1:
46:86:78:2d:7a:74:53:e8:2c:12:23:3c:4b:3f:58:
d0:cc:92:d9:dc:9e:02:b7:f9:81:5a:03:63:b6:2b:
93:37:8b:8d:ba:a3:a8:94:d4:f2:8b:7b:66:3a:30:
46:f0:f2:60:be:1a:13:ca:80:97:8a:29:04:2c:e7:
db:f5:06:79:74:41:8b:fc:e4:4f:11:14:c1:04:dc:
df:9d:43:c7:1a:da:a6:b8:1f:a1:8a:f8:27:1a:a2:
b1:2d:93:f7:62:50:8f:8f:a5:2b:ac:42:4d:94:2c:
8c:e5:d5:54:bb:9a:f4:12:95:3b:f3:3a:6c:f3:c2:
fd:c9:6b:a9:27:82:62:fd:e7:fc:ef:15:ab:b4:5a:
ec:cc:37:ee:9b:1e:19:57:9b:90:6e:b7:70:ee:9e:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:32:65:84:E4:02:CC:1B:3F:09:A1:E8:DF:BD:C5:0D:BD:2F:B7
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:46:aa:5e:6b:62:12:cc:d3:1f:49:17:55:76:98:d7:a3:07:
96:fe:6e:61:14:99:ac:fe:f3:dc:5a:04:66:36:ac:c7:0a:64:
26:2a:c6:94:4f:04:18:34:ea:0e:3c:1d:4a:50:38:19:1f:56:
f1:b6:1a:53:f8:62:18:c5:39:51:fe:b6:39:f2:a6:aa:dd:d8:
62:0d:f5:80:f5:d1:4a:f3:78:cc:05:08:c0:25:f0:ae:01:7c:
42:b4:72:15:db:05:6b:46:4d:da:2d:2b:fd:e2:88:38:51:cf:
39:e7:ce:1f:73:af:e6:2d:41:d1:1d:22:8f:b8:a8:30:8d:0b:
dc:29:80:53:91:17:21:3f:24:4a:a0:3b:3d:09:51:92:55:8f:
28:3e:0b:d5:98:d6:d0:9a:44:56:49:75:0f:9a:be:8b:03:c9:
4e:6c:e4:8a:32:99:c3:27:e7:d9:c3:eb:96:47:8a:eb:f5:1c:
cb:f2:e1:d3:89:db:0d:de:c8:13:c6:d1:66:aa:3d:aa:cd:ca:
91:54:42:df:7e:6e:cb:de:d1:31:6b:d2:57:d3:50:5b:f5:67:
1d:a9:d5:eb:82:96:d1:e0:35:d4:b5:f8:4f:4f:df:d7:6b:0e:
0a:b2:a7:f4:40:91:91:fe:48:52:d1:d3:3a:79:2f:4d:4e:73:
50:52:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:48:32 2025 by rpki-client