Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: KdyyEl0Ysm089AyU3oYvmVBC1Lnj1BEyicEOrgfXZDY=
Subject key identifier: 1E:92:96:75:86:4C:2D:D5:8E:E2:97:CD:72:4B:FB:0C:74:5C:59:AF
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019A7293504BB86CF88FA9B10CE69E960C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1560
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: VHPyWAWG3H00S6MKQA747nJQXm9LwAZUgMremNPVLVg=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:50:4b:b8:6c:f8:8f:a9:b1:0c:e6:9e:96:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=1e929675864c2dd58ee297cd724bfb0c745c59af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:58:fa:0c:ca:87:16:ac:ba:33:91:8b:f4:
5d:b6:d4:bd:c3:db:6a:b6:34:9e:7d:e4:51:e0:55:
b7:e9:e6:74:67:46:04:bc:04:c8:46:a3:c5:9b:7d:
b8:06:d3:67:6b:ef:91:c6:03:7a:b1:b3:5a:23:a2:
96:00:e8:42:bc:9c:6f:ca:e5:e2:7c:13:56:50:5a:
eb:86:a8:94:06:0f:99:72:d9:22:8d:83:b3:74:3e:
3d:82:9f:d1:e5:73:d9:b9:32:84:74:32:4a:a6:89:
30:f5:ac:5d:40:ad:99:0c:38:19:54:9f:5b:17:b6:
8f:f8:66:4b:b3:d8:8c:f1:03:62:e4:c0:19:6b:ad:
b8:a5:a2:68:7d:be:4d:6a:f1:37:b4:c1:ac:74:81:
a5:cf:6b:38:ab:32:5f:1d:8c:25:0f:d3:4c:d5:e8:
ea:ec:22:d4:ea:8b:97:67:a2:14:e2:6a:34:42:b7:
4a:0c:44:2d:86:19:28:0c:5f:84:63:c8:38:f3:de:
f0:53:bd:94:1b:97:d9:fb:35:2a:38:6a:92:38:61:
0d:0b:4a:6b:65:39:38:0f:15:aa:5c:8f:66:b1:be:
99:92:cd:f6:9f:c5:a7:fe:95:0c:ea:68:48:32:e9:
26:ab:0d:21:32:ca:04:0b:a1:49:3d:18:9a:4d:c5:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:96:75:86:4C:2D:D5:8E:E2:97:CD:72:4B:FB:0C:74:5C:59:AF
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:0b:42:ae:99:ef:ea:a5:d0:20:7d:40:06:32:fb:06:55:
aa:74:30:fd:9d:d8:f8:ac:24:b7:75:73:1a:3e:19:b3:d4:cf:
63:b2:75:73:f8:af:c5:2b:60:64:9b:5d:c1:71:9f:ea:de:7f:
38:b4:7f:f7:63:74:e7:d7:0d:0b:3a:63:28:0b:30:de:a2:4b:
42:2d:8b:71:57:d8:a5:f9:bc:80:92:97:56:2f:9a:71:ed:43:
b7:08:14:70:43:e3:1d:00:0d:14:35:0e:0a:56:66:82:64:80:
fb:de:c5:76:12:23:a9:04:82:aa:76:65:81:d0:72:1a:bd:dc:
3c:3c:28:2e:23:5f:6a:97:0b:25:91:37:7b:33:a8:33:18:78:
e8:e2:df:81:8d:70:f1:ec:71:d9:06:ba:c2:6e:a5:1b:01:ee:
23:ab:76:d8:e4:df:df:20:af:0d:2f:fc:40:7d:76:17:b8:1f:
6e:2d:74:8b:49:de:89:26:28:10:97:6e:c6:a1:80:cc:12:9f:
c0:c1:93:2c:71:85:68:f2:73:b3:57:11:0d:cc:5a:6c:d5:2a:
8f:8b:a3:c6:b4:eb:14:64:51:3d:3e:61:01:5c:0d:f8:18:b0:
aa:5f:07:a9:49:2f:c1:a0:81:e1:cb:c9:d6:c1:02:13:7b:c2:
55:3a:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:46 2025 by rpki-client