Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: B0NCbEl4+4QUOixai17AvNq+OqlNE3fcycw29EnnqyY=
Subject key identifier: A4:57:1B:61:98:EC:80:3A:B7:9D:95:8B:3A:11:A3:84:8D:94:4F:79
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 0199228C8AA59471E9CA4008CE2BFB690B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 14B2
Signing time: Sun 07 Sep 2025 05:00:59 +0000
Manifest this update: Sun 07 Sep 2025 05:00:59 +0000
Manifest next update: Mon 08 Sep 2025 05:00:59 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: yXNVCmfH2Rx/xT0AKiKy//10wW2CqR3FQZzDAO8ygfc=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8a:a5:94:71:e9:ca:40:08:ce:2b:fb:69:0b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Sep 7 05:00:59 2025 GMT
Not After : Sep 8 05:00:59 2025 GMT
Subject: CN=a4571b6198ec803ab79d958b3a11a3848d944f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:77:84:3d:5f:19:94:58:cb:c9:62:59:12:
01:26:c5:98:0f:ea:d9:ca:ee:d7:1e:57:f9:10:ba:
54:c5:d0:53:6a:af:61:01:95:d8:fd:b5:eb:90:8c:
48:60:2b:20:39:99:e8:ea:45:9e:b6:16:00:d0:fd:
6d:94:e8:6e:c6:fe:5c:e3:59:46:a3:9a:e0:2e:f2:
6b:14:20:45:b7:71:12:35:3b:02:04:fe:c6:95:7a:
15:3a:b6:d3:80:e0:53:00:a9:db:6e:06:be:41:50:
42:d1:d7:79:37:52:e9:99:5e:17:ad:2b:f9:83:37:
80:2e:68:0e:15:f5:41:c6:ae:50:0f:9d:c1:ce:74:
f2:cf:97:67:c2:4c:9a:cb:58:47:83:db:aa:c4:a8:
e3:bc:5c:35:b4:2e:92:f7:79:cd:8b:8b:af:a7:8c:
00:b5:3a:0b:f9:47:0f:25:50:24:ec:99:d3:a2:08:
bf:2d:05:1a:3a:ed:85:e7:0f:c0:19:41:64:66:98:
be:d9:94:79:96:80:80:02:b4:ee:39:56:11:de:3c:
1a:3b:66:b5:84:6b:dc:d4:f7:0b:e3:34:0d:43:b7:
97:8a:db:b6:f1:03:6e:43:5c:2a:8c:06:16:e8:6d:
13:35:d9:7e:d3:34:83:0f:fc:a9:30:0e:29:7f:20:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:1B:61:98:EC:80:3A:B7:9D:95:8B:3A:11:A3:84:8D:94:4F:79
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3a:3f:29:e5:65:b9:71:71:3b:4f:56:25:10:7f:56:fb:c1:
26:2a:38:68:07:ba:80:6f:8b:e0:16:07:df:8a:45:a1:8c:ac:
ac:6e:2f:a7:5f:80:88:62:3d:7e:24:4d:27:b8:31:3b:3e:b4:
47:9a:1b:38:23:a6:1f:78:33:2e:49:1c:a9:8b:dd:03:be:35:
2a:6d:6d:d8:4c:d9:b5:a9:d3:16:8d:38:5a:8e:f7:c0:5b:97:
d0:e5:e4:ea:c3:f9:78:4a:58:02:da:c9:50:63:4f:2d:3f:7d:
cc:47:64:00:52:85:cc:6d:89:40:24:be:65:34:b6:dd:0f:43:
0e:79:ab:b0:88:a0:64:32:fd:74:58:b8:4b:cc:d2:d3:f5:3a:
0e:47:6a:5f:39:16:d2:b2:ce:39:01:83:28:73:9c:16:48:32:
76:7c:bd:5f:13:4f:8f:6c:20:5e:db:1c:c7:41:ce:a6:e1:5d:
33:86:05:ba:22:a7:1d:08:a5:88:56:81:f3:df:0d:35:7a:48:
fe:c4:d5:a0:96:19:28:bf:86:53:a6:ef:45:61:d6:75:97:35:
ff:cd:59:52:8e:41:43:85:8a:a7:dc:3f:e8:72:19:4b:cb:f1:
5b:db:98:52:8a:4b:a0:81:dd:2f:a1:d0:19:7d:8f:48:6f:25:
7c:a3:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:05 2025 by rpki-client