Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: /EEYp4iZ40GFYifQ7PbHqISDN5/mg6q/5kslXS22neg=
Subject key identifier: B8:97:C6:D3:87:0B:62:9C:B8:28:BA:19:2C:A3:27:E3:08:6A:5B:AD
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 0197518F3740D537F8B44FFF3BD86A2CC1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 14DF
Signing time: Sun 08 Jun 2025 22:00:29 +0000
Manifest this update: Sun 08 Jun 2025 22:00:29 +0000
Manifest next update: Mon 09 Jun 2025 22:00:29 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: TgDRpOYrSdRJpCt0wqS1wHNS/FkAKqfJkTE13fOSu2w=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:37:40:d5:37:f8:b4:4f:ff:3b:d8:6a:2c:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Jun 8 22:00:29 2025 GMT
Not After : Jun 9 22:00:29 2025 GMT
Subject: CN=b897c6d3870b629cb828ba192ca327e3086a5bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:90:8e:20:0f:0b:b4:54:7f:50:4d:85:78:
a4:a9:34:e6:3a:94:a0:37:89:22:8b:b9:bd:c8:b0:
c5:3f:c2:03:4a:28:a2:e0:7a:91:55:7b:9f:bb:7f:
a0:af:ca:d1:26:5b:5d:1a:1e:45:9a:25:30:14:0b:
57:44:1f:40:9c:ff:3b:4a:ae:fc:69:56:2b:48:90:
32:90:c3:9c:86:7b:37:64:33:b1:d0:9f:ca:fc:f9:
4a:da:40:fb:c2:86:2d:f8:c6:1d:71:ea:74:bc:98:
46:24:6d:71:3a:47:c6:7a:04:e3:b3:20:0a:33:76:
fb:94:e4:72:0b:e8:de:77:dd:e0:5c:74:45:f1:15:
01:ad:0e:fb:de:6c:63:03:75:5d:75:b5:5f:2b:cc:
a9:5b:a0:1a:f6:53:69:53:50:5b:00:5b:ca:3c:97:
28:c4:97:b4:4b:cb:1e:b2:30:e2:8e:22:de:9e:97:
3b:4f:ad:2e:58:20:c9:bf:09:1a:60:ba:29:44:97:
4e:2b:b9:69:81:ae:d9:80:45:a8:d9:30:2e:91:3f:
df:6d:f5:05:bb:b1:49:44:d1:d8:9c:56:8e:03:2b:
e5:ff:4d:8c:42:ad:fc:ec:04:d9:45:8e:ff:14:9a:
6c:53:69:5d:71:91:7a:64:ef:84:f1:ce:4b:82:76:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:C6:D3:87:0B:62:9C:B8:28:BA:19:2C:A3:27:E3:08:6A:5B:AD
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fc:8a:c0:ce:6e:82:ab:0d:24:36:97:52:35:50:ef:84:79:
6c:c4:c6:3f:1e:7b:9c:7d:86:d5:92:c9:5d:07:c7:84:87:99:
f1:58:95:9c:a7:75:ad:dc:a6:7e:89:f4:23:3f:05:fc:e7:28:
fc:53:33:10:c1:7a:0e:3f:07:e5:bf:cf:5d:23:42:df:39:37:
fc:bb:eb:73:61:7c:ad:4f:87:c0:67:b6:b7:40:f7:1b:63:42:
22:79:25:db:47:9a:5f:b7:4e:61:5b:08:00:74:46:9e:13:c3:
48:b4:c8:77:2f:49:a7:ff:72:69:15:46:4f:dc:ec:9c:bb:05:
ec:ae:a4:65:ae:6f:b5:17:e5:63:ff:6f:f3:b2:37:ea:f7:8d:
7f:bd:66:55:1c:0c:5a:26:32:8f:d8:63:8a:1d:78:54:b5:24:
2a:09:51:83:55:16:f1:22:00:61:73:af:de:32:31:f4:55:1f:
87:62:24:d8:e5:16:7d:d2:ae:41:d4:a4:39:4b:77:8c:f2:43:
32:ec:b9:2e:e3:dd:41:32:ce:41:f3:ef:65:93:41:68:7d:1e:
cd:b2:f9:7b:93:61:e3:6f:a8:de:92:c4:71:c8:1e:ae:13:08:
bc:e1:07:b9:4e:7a:c9:97:58:62:5b:bb:ae:1a:be:8d:72:39:
bd:68:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:44:12 2025 by rpki-client