Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: QKDItlo7if5sm15sj6cpw5PvjyXVfFIARWssmD6yfZc=
Subject key identifier: EF:51:1F:43:CA:81:9F:8C:F1:67:BE:DE:9D:4F:EF:07:E1:63:B8:35
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 01976C990FB97A229D433A3973AA497685C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:59 +0000
Manifest this update: Sat 14 Jun 2025 04:00:59 +0000
Manifest next update: Sun 15 Jun 2025 04:00:59 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: E+CiKVN5emDu8g8dOZI1e5OppsvVmV6IogQ1bUoAXFc=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:0f:b9:7a:22:9d:43:3a:39:73:aa:49:76:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jun 14 04:00:59 2025 GMT
Not After : Jun 15 04:00:59 2025 GMT
Subject: CN=ef511f43ca819f8cf167bede9d4fef07e163b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:75:0b:88:f7:61:3a:4b:58:e9:99:cc:b4:
12:d2:39:fb:f0:dc:a4:3f:6e:d5:0e:55:94:00:1b:
fc:71:cc:2e:6d:a7:fd:87:fe:61:23:da:fe:5f:7c:
b1:38:43:ea:44:40:b0:06:8e:6e:3b:cc:88:79:95:
64:30:56:2e:66:b1:a7:e1:58:b2:0a:9e:b9:63:b9:
1e:f9:07:62:83:ab:2e:22:94:13:c8:99:28:6e:1f:
cb:77:eb:4e:db:1a:21:d4:8d:a5:24:e7:12:b8:95:
aa:d9:01:fe:75:89:60:0a:66:d3:c5:97:a6:ae:74:
b2:db:d2:25:a2:e7:c1:f7:54:0a:d0:79:76:dd:03:
19:50:c2:ed:52:c1:0f:e3:1a:91:ba:fd:b3:2a:6c:
a7:e7:4e:b4:8d:94:7c:e2:1a:fe:51:e6:3f:ac:30:
bd:38:8b:65:89:a2:8d:f5:3f:b9:12:a0:24:5b:78:
5b:f2:27:3c:08:a0:e0:a4:44:7b:75:d4:f4:73:85:
71:7b:26:fe:8d:39:e9:b7:b2:12:1c:4a:fc:cc:41:
fb:0a:0d:b8:09:b3:ec:ed:5a:60:f6:23:fc:5c:47:
72:a0:99:5b:88:e8:fe:c9:d5:5c:06:ac:0c:5b:0a:
5c:1e:fb:40:72:77:29:36:7f:c5:30:3e:d1:cb:c2:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:1F:43:CA:81:9F:8C:F1:67:BE:DE:9D:4F:EF:07:E1:63:B8:35
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:14:d3:df:e5:78:37:42:39:c9:f6:04:50:48:11:d8:a8:
da:8a:34:9c:1c:ee:06:19:e9:35:c9:58:a3:a1:1f:37:f2:b0:
56:cc:ef:2e:b1:e3:b2:e5:30:bd:81:e5:b2:08:1a:d6:1f:9c:
67:e7:bc:16:6e:f7:6f:36:de:29:9e:20:ad:c8:4c:bc:d1:0f:
75:ef:35:e5:45:a9:65:54:be:4f:61:1a:40:58:0a:83:7b:48:
d2:20:4b:27:ed:e3:c3:72:95:23:e9:af:46:1d:f1:73:53:ab:
a2:f5:6b:07:60:b9:3a:a7:b6:13:7f:d8:fd:1f:4d:69:f9:a2:
4b:8c:cb:14:1d:d9:16:14:5b:35:d9:95:59:48:50:7d:94:dc:
77:90:61:b6:0c:ab:a9:cd:ad:f7:59:58:ca:8c:e9:cc:b9:0f:
86:44:fb:83:cb:0e:b3:fd:89:d3:2a:f3:96:8e:bf:d3:5b:10:
58:df:48:86:ac:17:00:93:e3:0f:8c:c1:ea:2b:b5:c7:84:f6:
d6:b2:0b:74:c4:32:94:1c:71:4d:41:ee:38:6a:de:d2:75:bd:
d6:96:8b:db:6d:25:d1:1b:83:23:b0:b2:da:05:db:44:40:a7:
b6:07:65:86:45:70:53:bb:f4:24:c0:e1:b1:7e:8a:b6:70:47:
53:40:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:48 2025 by rpki-client