Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: LKq1rUjiIeeveVpvoEKFMmwkYXWHgT4OItlGSGr5uFU=
Subject key identifier: AB:AC:9E:AC:47:38:61:72:33:F0:86:9C:58:BE:CA:4D:39:67:A9:01
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 01974BC40E986D8DFFB6E8C4C86458B401DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 19:00:29 +0000
Manifest this update: Sat 07 Jun 2025 19:00:29 +0000
Manifest next update: Sun 08 Jun 2025 19:00:29 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: rSnor2TTE75Pa/1Pkx5rtowUMeZxggz1DdLPRXt58TI=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:0e:98:6d:8d:ff:b6:e8:c4:c8:64:58:b4:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jun 7 19:00:29 2025 GMT
Not After : Jun 8 19:00:29 2025 GMT
Subject: CN=abac9eac4738617233f0869c58beca4d3967a901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:06:06:9e:eb:f2:9e:19:ca:6f:28:64:51:
74:81:8c:ba:be:a4:aa:f1:8c:80:e3:f6:f1:cb:b5:
f5:15:34:19:41:90:4c:ad:b8:c4:26:98:49:35:1d:
5c:b1:d3:7e:34:25:a6:a5:23:77:98:09:34:39:2a:
6c:af:ec:ae:66:cf:c2:c6:e3:6c:9d:e4:58:b9:16:
aa:52:89:e4:6c:42:54:85:3e:d4:44:ac:e5:1d:19:
33:5e:e2:2e:51:26:88:d0:c3:a4:ed:28:c8:e4:a1:
0b:0e:12:b6:e6:f7:20:59:47:3c:53:d9:28:0a:ea:
28:5b:cc:01:66:11:d0:fd:15:1f:cb:5c:cd:9c:0d:
ad:08:bc:fd:b3:ac:a1:ee:0a:88:78:37:20:7c:71:
99:4d:a4:58:e7:ec:da:ab:40:a2:a5:3e:aa:d9:8a:
06:29:47:9c:f1:ce:0d:76:0f:e8:c4:2e:c6:1a:0b:
c4:5c:f6:9b:45:d9:ee:ff:db:91:8e:a6:7e:9c:5b:
e1:93:51:50:4c:88:aa:50:74:e8:c5:09:e3:44:47:
29:b9:8e:22:1c:08:26:46:1d:9a:1c:ea:84:9a:40:
d1:4a:2b:40:a0:ef:6a:08:bf:16:1c:ad:a7:51:89:
9d:62:64:bc:e8:b0:9a:2d:1c:89:8b:8a:62:0c:7c:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AC:9E:AC:47:38:61:72:33:F0:86:9C:58:BE:CA:4D:39:67:A9:01
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:02:2d:1d:c3:c3:75:ad:b9:18:e9:d3:51:a2:70:8e:e1:37:
0d:9c:79:db:20:5a:a2:4c:b8:db:ba:18:65:61:c0:93:d4:71:
f7:41:d9:76:95:b6:5d:ce:e9:08:1f:b0:db:09:bf:7b:f1:c6:
f0:42:95:77:90:03:a2:cb:ee:6a:f2:6e:28:58:77:31:54:bb:
06:80:ec:3d:00:92:d3:da:56:bf:7a:c5:b6:2a:1e:0e:65:c9:
63:80:fe:b3:cd:cb:aa:03:c1:d1:71:f0:9c:a1:eb:2a:91:d0:
be:bc:8c:0e:b8:3f:4c:a0:29:7b:9d:ee:60:d8:94:9a:47:52:
ad:fc:73:3f:e4:06:a8:8a:ec:6b:a1:40:f7:69:ea:12:eb:42:
d3:7b:5a:7e:be:09:b5:53:b5:f9:ae:9b:f6:64:d1:82:0f:db:
5a:6d:de:c1:6f:16:03:5a:f5:8a:00:4a:56:c8:0e:2f:3c:e5:
1c:14:ec:45:bf:26:81:49:84:e4:9d:0c:b0:25:bc:76:26:43:
bd:fe:b2:81:e0:eb:49:0b:02:80:3b:d4:e1:55:16:9d:4d:ef:
ba:7e:59:70:37:49:a6:03:75:93:b6:db:cb:dd:92:d8:c6:b5:
9b:d7:4a:55:ab:d4:2e:88:22:e8:40:6d:c8:48:d7:bf:62:8b:
5d:a6:73:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxA6YbY3/tujEyGRYtAHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmNiZWU0NGY0Y2VmMDkxOTg1ZTU0NmE2ODU0ZjljY2Iy
YWRhOGEwHhcNMjUwNjA3MTkwMDI5WhcNMjUwNjA4MTkwMDI5WjAzMTEwLwYDVQQD
EyhhYmFjOWVhYzQ3Mzg2MTcyMzNmMDg2OWM1OGJlY2E0ZDM5NjdhOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT0GBp7r8p4Zym8oZFF0gYy6vqSq
8YyA4/bxy7X1FTQZQZBMrbjEJphJNR1csdN+NCWmpSN3mAk0OSpsr+yuZs/CxuNs
neRYuRaqUonkbEJUhT7URKzlHRkzXuIuUSaI0MOk7SjI5KELDhK25vcgWUc8U9ko
CuooW8wBZhHQ/RUfy1zNnA2tCLz9s6yh7gqIeDcgfHGZTaRY5+zaq0CipT6q2YoG
KUec8c4Ndg/oxC7GGgvEXPabRdnu/9uRjqZ+nFvhk1FQTIiqUHToxQnjREcpuY4i
HAgmRh2aHOqEmkDRSitAoO9qCL8WHK2nUYmdYmS86LCaLRyJi4piDHzSaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKusnqxHOGFyM/CGnFi+yk05Z6kBMB8GA1UdIwQY
MBaAFJe8vuRPTO8JGYXlRqaFT5zLKtqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgt
ODMwM2FkMTM3MWRkLzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wYjJlZWYtNzVlOS00M2IyLTkwODgtODMwM2FkMTM3MWRk
LzEvbDd5LTVFOU03d2taaGVWR3BvVlBuTXNxMm9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgItHcPD
da25GOnTUaJwjuE3DZx52yBaoky427oYZWHAk9Rx90HZdpW2Xc7pCB+w2wm/e/HG
8EKVd5ADosvuavJuKFh3MVS7BoDsPQCS09pWv3rFtioeDmXJY4D+s83LqgPB0XHw
nKHrKpHQvryMDrg/TKApe53uYNiUmkdSrfxzP+QGqIrsa6FA92nqEutC03tafr4J
tVO1+a6b9mTRgg/bWm3ewW8WA1r1igBKVsgOLzzlHBTsRb8mgUmE5J0MsCW8diZD
vf6ygeDrSQsCgDvU4VUWnU3vun5ZcDdJpgN1k7bby92S2Ma1m9dKVavULogi6EBt
yEjXv2KLXaZzyA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:07 2025 by rpki-client