Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: euUp4qxUQZ946daBcyWqsflBTImfhdyVMxyAf3jrJsk=
Subject key identifier: 43:D6:67:9A:85:A1:FE:84:CC:FF:82:5C:36:12:C7:36:29:C4:07:FA
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019873E21D8EECC449910EA18163BFE841FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 121D
Signing time: Mon 04 Aug 2025 07:00:55 +0000
Manifest this update: Mon 04 Aug 2025 07:00:55 +0000
Manifest next update: Tue 05 Aug 2025 07:00:55 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: 0bNuf3LIHLuFM8QVcpMGeHheS+4K5MqhAlSVMR2AmJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1d:8e:ec:c4:49:91:0e:a1:81:63:bf:e8:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Aug 4 07:00:55 2025 GMT
Not After : Aug 5 07:00:55 2025 GMT
Subject: CN=43d6679a85a1fe84ccff825c3612c73629c407fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:c0:62:4e:65:d5:59:96:23:04:2f:38:ca:
2e:67:de:d5:0e:f5:c6:9a:d0:be:f0:53:a5:8c:80:
2b:4d:ae:3a:19:40:61:59:3e:c7:84:83:8b:ad:6c:
b4:93:93:22:e9:d6:da:a5:0e:70:59:bb:5f:ef:af:
16:0a:c3:8f:54:b3:53:a7:7a:22:57:5b:58:7d:a5:
ed:fb:6a:da:5a:da:c6:0f:dd:8c:08:79:83:ab:56:
41:38:b7:28:27:c2:87:c7:f7:29:08:c5:0d:a6:81:
61:e6:8d:d9:44:ba:17:c9:cd:20:9b:cc:dc:29:1a:
bb:d4:20:f5:9b:d8:1b:0f:d1:40:2a:1b:a0:42:e6:
74:9f:10:1f:eb:29:ad:1f:e8:a2:69:54:ec:12:e1:
6b:50:ff:4c:76:c9:c9:47:2c:b8:1f:1c:dd:28:f0:
92:52:5d:4c:14:d4:f5:81:2a:f4:66:b4:5c:31:ff:
3b:be:0d:f2:28:bd:bf:4d:1a:e5:e0:37:ab:66:68:
8b:82:aa:9d:24:90:b7:06:75:1a:38:0a:08:a2:46:
6a:3f:e7:60:f8:07:76:d0:a1:ab:df:a5:b5:09:b8:
b7:ab:3c:ff:3f:4c:58:1c:5e:0e:89:50:33:e0:a1:
83:c8:1b:a3:eb:c1:b5:44:4e:a6:5f:99:68:dc:b7:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D6:67:9A:85:A1:FE:84:CC:FF:82:5C:36:12:C7:36:29:C4:07:FA
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ec:2d:7e:fc:51:7c:a4:8f:f7:b7:12:bf:db:c7:be:19:72:
17:bf:73:89:af:eb:cc:13:01:a8:54:c8:44:86:c0:bd:5a:ae:
c0:52:9f:05:4d:af:fe:29:f6:85:50:1f:e4:30:99:21:4b:ef:
00:c5:20:89:14:a2:68:c9:f7:1a:44:fc:62:f4:c4:e4:42:73:
6d:7c:f7:20:38:43:f8:b2:be:de:2a:40:f4:64:44:8f:c6:e4:
7c:ff:c3:3e:9e:c7:9c:99:74:68:77:bd:83:fa:ba:49:fc:99:
ee:74:84:de:f7:49:67:a2:9b:a4:42:77:5b:a8:6c:3c:78:71:
ee:fc:f5:2e:9c:7f:7a:c8:9f:13:22:e8:1b:9d:de:9e:87:ac:
08:e1:13:45:f8:98:a2:71:49:96:db:71:bd:b2:6a:f5:f4:47:
82:c4:44:1f:f3:24:47:41:8a:4e:94:4d:33:32:24:db:bc:c8:
5d:de:78:e7:1c:09:6d:c9:82:ff:55:9a:bb:ee:19:42:c2:48:
15:f7:a1:73:5b:1d:9c:a1:6c:c4:6a:48:ef:c2:ab:fe:e2:03:
92:81:bb:28:b7:c7:79:46:34:40:85:39:31:a2:55:1e:33:56:
64:65:69:b2:f6:80:b3:4b:ec:cf:bd:04:cd:8e:da:13:e9:da:
17:db:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:33 2025 by rpki-client