Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: uA9ZzMmqKoCsyFNvwLktrnNE9sqRYL86V12fKHXZ2X4=
Subject key identifier: 7C:F8:CF:17:F2:00:F5:EE:CD:50:A5:A5:5B:0D:A5:A8:39:9E:B7:74
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019756ECD9022C4BFBA5CD4F135AFCFA89B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 13C4
Signing time: Mon 09 Jun 2025 23:00:51 +0000
Manifest this update: Mon 09 Jun 2025 23:00:51 +0000
Manifest next update: Tue 10 Jun 2025 23:00:51 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: 87+wyGwx6mXGBgyUq6ADaWd3/nE3sJ5s2qbapKV0yCE=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:d9:02:2c:4b:fb:a5:cd:4f:13:5a:fc:fa:89:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jun 9 23:00:51 2025 GMT
Not After : Jun 10 23:00:51 2025 GMT
Subject: CN=7cf8cf17f200f5eecd50a5a55b0da5a8399eb774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:18:61:b4:2a:f8:3f:1a:27:1e:00:3d:33:
4b:5b:38:f4:3b:d5:a4:36:1f:38:a0:03:b4:b9:d0:
4c:de:ee:95:d9:33:23:e4:75:da:65:b6:13:0f:99:
fb:3a:f0:8a:93:c9:09:95:78:00:dd:d1:42:b9:4c:
7b:08:e8:c8:02:18:57:f3:7d:ba:b7:d2:6e:77:79:
f7:0e:f8:a3:1c:b5:05:a1:2f:0e:06:ae:5b:9b:6a:
4e:e2:66:a3:f3:d7:13:7e:f3:d1:fe:96:84:5b:89:
84:89:e2:da:32:99:a0:50:eb:a3:e1:96:2d:c4:23:
33:b2:3a:ba:df:15:dd:5e:71:c2:99:2e:e2:6c:3c:
d8:a5:46:39:14:ae:dd:dd:30:eb:21:62:c7:49:3d:
0f:16:ba:30:b7:05:4e:72:e3:af:c3:4a:94:0e:3c:
45:00:f3:a7:5c:ed:89:16:49:06:e3:c9:9c:c7:12:
f4:ad:12:37:6b:27:b0:7e:16:05:63:78:13:4c:fa:
56:e6:16:a7:a3:c4:e5:8c:31:a0:7e:7b:a4:26:4c:
27:4d:6d:ff:83:0a:cd:98:96:85:83:c8:13:3c:32:
7b:32:83:96:98:4f:ce:06:4d:9f:80:a5:af:ed:c7:
2c:f0:64:87:82:66:68:e2:20:04:4b:ba:dc:79:5e:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:CF:17:F2:00:F5:EE:CD:50:A5:A5:5B:0D:A5:A8:39:9E:B7:74
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2a:12:72:0e:8b:d5:c1:9f:19:d6:16:5e:af:3d:e9:e2:e8:
40:a8:66:9a:dd:5e:ba:56:c6:76:5e:45:e9:df:6e:3d:97:c2:
f5:d8:36:0b:7c:11:c2:82:d5:cd:5e:c2:9c:1c:5b:f6:03:69:
12:4c:ea:34:ff:e0:70:a5:77:ec:ad:6b:7a:2d:91:2c:15:db:
95:3e:62:2a:b8:8a:8c:3e:e9:c5:79:51:28:64:d3:00:b3:23:
38:e6:79:2e:64:39:3f:82:ad:e8:bf:20:26:f0:3d:f7:57:70:
94:f3:0f:5f:a3:84:87:ce:98:13:16:40:91:0f:b6:79:e4:94:
a4:76:e5:6f:25:7c:29:d6:ee:44:7b:ec:4c:5b:f1:46:12:34:
4f:85:2f:a4:ef:a7:3d:d1:44:5e:ec:84:da:cd:79:a7:e8:9e:
d0:90:6e:0c:ff:4c:8f:ba:b6:c1:7b:ac:13:95:60:e9:aa:26:
4a:0a:df:4b:de:c1:8e:f8:6a:a2:25:3c:d2:3b:68:dd:70:02:
37:f0:05:1b:ae:0d:6d:a7:8a:18:09:86:78:6e:ea:ef:b1:8d:
36:64:c4:3c:f6:e4:ec:83:94:e8:aa:7b:51:b1:6b:e3:7c:06:
b9:9d:cf:23:e9:dd:80:b2:ba:90:b9:68:76:eb:43:37:83:1b:
0a:1d:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:15:53 2025 by rpki-client