Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: fTXta3k3KKlTEewGXtuHRInyoV+wnc8Apvs82MQg3RQ=
Subject key identifier: 19:C2:2D:07:28:98:3D:9C:B6:98:1E:20:19:54:23:09:53:90:DC:DC
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 01976094F7252B840DC01025C92D9DF22173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 13C9
Signing time: Wed 11 Jun 2025 20:01:04 +0000
Manifest this update: Wed 11 Jun 2025 20:01:04 +0000
Manifest next update: Thu 12 Jun 2025 20:01:04 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: TGx9/ledwPNKzphQcTA9a91tfBgBVqAWnuTvGbObkm8=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:f7:25:2b:84:0d:c0:10:25:c9:2d:9d:f2:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jun 11 20:01:04 2025 GMT
Not After : Jun 12 20:01:04 2025 GMT
Subject: CN=19c22d0728983d9cb6981e20195423095390dcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:74:12:5f:ae:dc:00:a6:c2:bf:18:bc:3b:
83:b8:88:18:8c:94:3b:d4:92:c2:9e:9e:2c:fb:ce:
f1:80:2a:5e:10:85:23:e9:dc:ee:ef:cb:c0:1e:7c:
5e:62:c3:ff:ba:cb:98:93:4e:e2:b2:36:7f:ec:42:
4a:39:70:2b:f9:8c:c3:82:4a:69:e4:31:6d:fd:de:
37:87:7b:82:3a:73:ba:08:7c:16:98:57:7f:5d:6c:
70:51:5c:f4:5f:bb:e4:97:94:39:93:53:ca:5b:4e:
84:fb:72:b6:84:33:da:46:88:96:6f:69:d7:22:86:
6f:12:4f:27:6e:0b:d0:83:fa:d0:44:f0:6b:d0:a2:
bc:29:5a:87:be:f5:bb:d9:ed:43:84:9a:5f:d8:f7:
58:a4:81:73:d8:2d:16:c2:e4:ba:d1:a7:af:5a:3f:
e8:78:92:3a:ae:60:1c:f8:4f:47:dd:c5:97:5c:aa:
57:db:56:69:c7:f1:c3:76:a0:55:f7:79:a1:cd:d9:
d7:44:f3:d8:7f:23:02:6b:c2:25:02:66:40:45:bd:
78:06:d3:df:b7:3f:2b:6b:35:a2:e5:5d:26:9c:8b:
72:d2:db:95:66:65:1a:e4:3b:c1:17:3f:3d:fd:07:
0f:f3:8f:10:20:d3:45:bf:26:51:0e:55:4e:dc:dd:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C2:2D:07:28:98:3D:9C:B6:98:1E:20:19:54:23:09:53:90:DC:DC
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c4:8f:ec:35:ad:b4:ad:d9:1e:87:fa:2d:29:d0:03:8a:3e:
4b:0d:2d:91:76:d2:9c:54:83:e4:ef:3a:9e:ca:e3:fe:f2:fe:
c9:cb:2f:fd:e7:56:c0:0b:3c:6a:cc:b5:46:9b:99:0d:96:c1:
6e:8c:07:99:ab:13:c0:2d:7a:79:a6:5b:b4:04:af:64:7b:3d:
d5:8f:4e:b3:6e:58:62:0c:19:cf:43:f5:c5:55:66:9a:de:9b:
e4:2a:1f:b8:94:55:f9:0f:73:21:18:67:18:4a:59:34:97:b5:
f8:dd:c0:b5:99:e2:a7:f3:69:b4:f2:af:df:98:30:bd:cf:3a:
75:ec:2a:9c:d4:4d:b5:c5:48:aa:40:e1:6f:09:50:bd:1c:25:
e6:cc:99:18:5e:95:6d:30:41:c2:8b:6e:f6:e0:2e:65:d3:b1:
ea:de:b0:da:39:7e:cd:ed:0b:24:96:ae:73:00:52:68:9d:28:
4b:d0:38:d6:f1:02:0d:8a:0f:82:00:3d:5f:4d:15:46:e5:d4:
79:53:cc:52:7c:c0:0a:6f:de:47:ae:06:6d:2f:ea:0c:ed:04:
41:5c:bc:ca:e9:0c:65:96:88:19:3a:4d:94:d9:dd:5a:d1:2f:
95:fb:a8:3e:e4:45:29:61:9c:4c:75:9d:4c:8b:03:93:5d:43:
d4:62:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:45:04 2025 by rpki-client