Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: 5J/VBO/0TiHOfExf8dH5MnlFWaBJ795E8qLfghq3RlM=
Subject key identifier: 7C:5D:C5:0B:66:C4:CB:06:0A:D7:62:DA:3B:CD:EE:72:E8:D4:35:D0
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 01976BBCEBECED15A676ACC604B9F707803F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 1589
Signing time: Sat 14 Jun 2025 00:00:32 +0000
Manifest this update: Sat 14 Jun 2025 00:00:32 +0000
Manifest next update: Sun 15 Jun 2025 00:00:32 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: 1fUmSr5DyyLVABs6BE0VkwGy48pIpt1Nph5oFJ0JPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:eb:ec:ed:15:a6:76:ac:c6:04:b9:f7:07:80:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Jun 14 00:00:32 2025 GMT
Not After : Jun 15 00:00:32 2025 GMT
Subject: CN=7c5dc50b66c4cb060ad762da3bcdee72e8d435d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:3e:bd:34:a1:bc:14:b4:5f:eb:3f:22:0d:
9e:6c:0b:26:2c:46:a6:52:49:fc:f7:f2:bf:3e:b0:
29:46:50:47:55:e7:50:50:b1:c5:27:52:41:c2:50:
6d:65:09:d5:f3:9e:65:f2:fa:7d:42:92:03:cf:47:
61:5e:b8:8c:43:c9:a2:74:49:50:6b:2c:05:3c:d9:
2e:21:00:43:b7:19:85:2e:b2:1f:18:d8:4f:d6:fb:
3a:84:4f:20:1f:d8:26:20:6b:0a:15:19:9c:d9:47:
ef:ab:05:8b:92:97:f2:33:83:9e:82:96:11:70:e1:
b3:10:1d:f9:ca:02:37:ab:9d:08:38:7e:19:54:65:
1c:c4:c0:7e:0a:74:26:9c:9e:fa:2e:c9:18:bb:c1:
d5:2f:df:85:da:d9:76:a7:da:da:18:4c:79:8d:0a:
4c:86:20:12:5a:40:d9:ce:9a:4c:39:0a:16:77:d4:
6a:c6:a1:52:d0:23:ce:41:8e:70:53:0b:03:57:53:
9d:59:1f:da:3f:10:76:f4:a1:c5:24:ea:f5:05:8b:
37:1e:25:ff:7b:25:ce:24:95:41:73:84:3e:67:15:
eb:29:19:3c:c3:21:b6:40:26:75:13:07:61:22:e4:
ff:22:75:52:0a:a1:0d:35:34:cb:38:9f:14:01:0e:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:C5:0B:66:C4:CB:06:0A:D7:62:DA:3B:CD:EE:72:E8:D4:35:D0
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:69:ab:85:4f:67:73:36:6f:3c:18:9f:bb:45:43:72:f0:b5:
a2:db:01:1c:df:3c:b6:7a:83:92:52:71:86:bf:bc:ff:78:26:
9f:1f:22:9f:81:01:64:a6:5c:2f:c6:3a:a1:49:af:48:31:ba:
0d:22:91:d8:52:50:65:e1:58:c3:84:95:a1:bb:22:93:10:36:
a0:4f:26:7b:f1:09:4c:16:2f:c6:e8:a5:d4:72:41:75:e3:50:
83:ea:72:6e:ba:a3:80:44:cd:07:ab:8a:31:70:f8:de:d7:c4:
40:d4:31:81:6b:20:1e:9e:b9:6f:5c:cd:63:3e:f5:e9:f8:fe:
bb:4b:95:22:80:d6:de:d1:e4:7d:8b:7b:db:9c:ac:5c:a8:86:
b4:ef:b8:ed:e1:f5:2a:86:4d:e1:41:f8:e7:75:3d:ec:ba:e0:
c3:13:01:9d:da:5f:bf:76:20:49:9d:fe:90:2b:f8:66:f2:28:
0c:9c:8f:7f:ed:54:60:39:9d:5f:5b:e3:d8:d8:10:66:9d:c8:
39:dc:91:85:ae:4a:a4:5d:a1:ba:06:ae:b6:ec:e6:ec:9b:20:
4f:14:7e:f2:3c:e0:68:94:da:1f:a8:1b:bc:cb:9b:19:ef:f7:
13:98:bf:01:43:40:e2:cd:77:8b:f1:00:24:36:e3:63:0d:46:
ad:20:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:44 2025 by rpki-client