Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: ZrnnMwtxBF92XyDTNw1w7ILsMMbc4720O9waR356xvU=
Subject key identifier: 2C:5B:49:98:15:F1:DC:21:62:A9:DF:49:7C:16:4E:33:59:F9:70:6B
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 01975CB83071E5DD045753C3587D3CB78533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 13C7
Signing time: Wed 11 Jun 2025 02:01:04 +0000
Manifest this update: Wed 11 Jun 2025 02:01:04 +0000
Manifest next update: Thu 12 Jun 2025 02:01:04 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: VotBvqcR3hFQ7Sa6J8+AdbqUmFsOZXv5GW5y6HkDypg=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b8:30:71:e5:dd:04:57:53:c3:58:7d:3c:b7:85:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jun 11 02:01:04 2025 GMT
Not After : Jun 12 02:01:04 2025 GMT
Subject: CN=2c5b499815f1dc2162a9df497c164e3359f9706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:40:b2:91:b7:6e:f1:ff:d5:35:6a:1e:58:
b7:c9:55:e5:b1:b4:71:0d:63:5e:82:b9:9c:10:a1:
80:47:7d:9c:7c:a2:c5:64:6e:bd:8d:76:c9:9b:21:
b4:4e:1c:87:44:b8:32:7f:1a:57:63:6b:fe:03:54:
25:e4:93:3a:a7:b5:f1:98:36:56:5f:c3:8f:df:f6:
01:05:1c:9d:95:c3:91:fd:21:93:bf:7a:94:22:17:
2a:3d:91:e6:18:57:09:5c:96:ba:20:34:fa:de:75:
8c:0d:86:08:92:da:70:21:5d:31:88:f4:d5:9e:ab:
db:23:8e:94:64:8e:7a:72:bb:4a:af:a9:11:96:9c:
d1:a3:65:23:46:3b:5a:b4:5d:7c:d4:4b:5c:8e:90:
6f:3d:15:0f:4e:e3:78:84:87:f6:81:b7:70:4c:ba:
71:4f:63:a3:58:8f:c3:a8:41:9b:66:e3:27:53:b6:
9c:76:86:a3:33:91:c0:ee:8c:20:24:63:69:2b:a7:
ca:8b:eb:5b:f0:cd:97:55:5c:fc:32:8b:47:88:f0:
ca:6d:17:26:81:f8:aa:23:1f:9e:5a:6e:1b:15:0e:
54:07:ee:03:dc:0f:86:e0:2d:53:67:9e:8f:f7:6b:
75:8d:34:d7:91:99:8f:dd:7a:cb:0e:b2:45:42:eb:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:49:98:15:F1:DC:21:62:A9:DF:49:7C:16:4E:33:59:F9:70:6B
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bf:7b:84:6d:49:3f:77:34:e3:5f:e4:93:76:83:d7:7c:f2:
4f:6b:16:0b:4a:04:6b:54:6f:d6:3d:7a:76:30:ef:48:ea:e2:
ba:68:1b:0f:31:1b:59:83:9a:c3:b4:5c:e1:fb:38:9c:a9:c6:
00:cd:a9:01:80:aa:11:fc:4a:ee:27:65:32:ba:e1:c8:9b:fe:
92:8a:ea:16:18:46:16:d3:71:b7:1f:b5:db:fb:e1:b3:1a:be:
8f:9e:a5:0f:d8:0e:ca:f7:8a:d6:22:5e:48:d4:44:0b:29:37:
21:26:8a:32:5e:79:7e:8f:87:49:73:22:09:32:f0:0d:53:f4:
4e:9b:c0:1a:77:1f:51:6a:89:36:84:27:32:d3:08:5f:49:f3:
94:a2:f7:6f:fe:18:a6:f8:03:ec:94:8d:7b:01:a0:44:2c:78:
4b:2f:5b:42:7c:ab:5d:6d:f1:8f:cc:f6:21:f8:92:3a:1e:1f:
28:28:bb:32:e2:ae:96:f4:a7:a1:24:d6:f2:f4:e7:06:34:24:
31:02:08:26:d2:3f:bf:02:92:dc:98:df:5b:9b:f4:26:4b:c9:
08:3d:1e:b2:00:4a:5b:27:c3:ab:08:42:76:8c:bc:65:e1:59:
ac:5b:c5:c3:8f:2b:75:42:6e:87:08:e1:02:94:01:59:44:7a:
9b:e1:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:26:49 2025 by rpki-client