Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: OLfclrK9uJ0SIZTa63jGh6/I0AJhhBZF/jfXYiR7+xg=
Subject key identifier: DF:48:C9:8F:72:C7:B6:77:63:FA:92:9C:F0:99:6F:0F:24:01:64:D8
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 0197700817E82FB2EB4AE671CA510001D4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 13D1
Signing time: Sat 14 Jun 2025 20:01:07 +0000
Manifest this update: Sat 14 Jun 2025 20:01:07 +0000
Manifest next update: Sun 15 Jun 2025 20:01:07 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: avOdlqgqX55RoOLBHzGetxEaeV6q8Muj4zldebF2NOg=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:17:e8:2f:b2:eb:4a:e6:71:ca:51:00:01:d4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jun 14 20:01:07 2025 GMT
Not After : Jun 15 20:01:07 2025 GMT
Subject: CN=df48c98f72c7b67763fa929cf0996f0f240164d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:71:4f:fd:23:5c:b5:b5:91:62:66:ee:57:
6b:04:fe:cd:30:e6:44:f1:7f:51:c1:4c:63:ff:df:
bf:41:3f:83:cd:db:c8:c5:73:68:11:e1:00:63:34:
ba:94:bb:91:3a:ce:2e:f4:32:25:d9:87:bb:03:bf:
83:03:7b:ca:23:69:06:d6:00:99:09:2b:11:55:f4:
38:11:bb:00:14:2c:25:53:3b:a4:07:27:f8:1e:1a:
e8:3b:11:89:c8:7d:5b:87:25:ca:9b:cb:91:d4:e1:
84:14:6f:4b:4f:83:e7:9b:aa:37:b8:ee:b4:be:2e:
76:af:60:7f:ae:f6:39:7b:58:8d:b0:66:bd:97:60:
ee:77:19:4d:24:73:b8:8e:85:1c:99:01:2d:7f:b9:
ed:04:db:4c:d6:ee:b9:9b:e0:78:d8:18:8f:20:00:
b8:a3:18:b9:25:b4:2c:6c:8c:a1:9a:c8:95:43:ca:
cc:1d:0d:0f:85:e4:1e:a5:19:e4:e8:98:16:84:44:
42:66:09:9d:31:81:66:68:37:81:82:c8:fc:6c:c0:
4a:2a:4c:64:1d:4e:9f:a5:f6:92:fe:6f:f3:07:be:
f7:0f:b0:cc:40:fd:39:8b:66:f7:18:b0:1a:fb:ed:
c8:b7:11:fa:5f:12:57:2b:49:49:33:3d:a6:97:43:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:48:C9:8F:72:C7:B6:77:63:FA:92:9C:F0:99:6F:0F:24:01:64:D8
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:4d:ab:95:e6:ce:78:88:e1:8b:58:f4:7b:ef:36:c3:ce:
d6:34:de:8e:25:87:59:ee:fc:68:eb:76:af:2b:c3:84:32:aa:
a4:67:8b:39:f5:b7:69:71:3c:70:f1:6f:5b:31:f8:4b:19:77:
fc:4a:2d:53:63:d1:55:eb:80:5a:4d:fc:e8:a6:68:f5:75:60:
58:47:b1:f7:63:7d:ac:f6:e1:35:4a:60:16:bd:1a:d6:39:ff:
00:b4:ac:67:4e:92:c1:b8:db:69:16:a2:a2:8a:be:33:0b:f2:
d9:db:bb:90:cc:da:89:50:06:57:aa:31:67:66:6d:12:65:54:
79:46:b1:3c:b1:0e:03:4f:a9:60:7e:09:55:a6:ad:22:82:6e:
d7:52:bd:9f:0c:29:71:bf:1e:4e:86:bf:e8:93:95:fc:75:d4:
dc:bf:e0:aa:2e:31:1f:49:4a:92:a3:5e:c4:26:de:56:a8:23:
42:d2:ff:94:82:c6:bb:62:af:54:35:4f:20:f7:55:a4:79:47:
b7:73:66:59:92:03:a3:49:bf:cd:ab:85:ad:5f:ff:f8:12:8c:
81:d7:71:9f:66:50:c8:81:76:52:79:4d:f1:d0:76:a5:e8:bc:
54:55:e0:ef:8f:54:20:eb:98:e6:6f:81:7c:a7:63:ef:5b:f2:
8b:4c:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:43:47 2025 by rpki-client