Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: lATsj/XpQh/cEFc6Vy7/1fh46ggyZzI3Lo5HO+qUkwY=
Subject key identifier: 98:F3:A0:54:AD:E6:73:E2:1D:ED:DC:F1:6E:66:CC:06:26:2E:8B:96
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0198752B791060066C17FDD17048B013FB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 13:00:39 +0000
Manifest this update: Mon 04 Aug 2025 13:00:39 +0000
Manifest next update: Tue 05 Aug 2025 13:00:39 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: oZleTX7Ru31nXio2Pkuuv9JYWMmeOih5ebQw5xW8/po=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:79:10:60:06:6c:17:fd:d1:70:48:b0:13:fb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Aug 4 13:00:39 2025 GMT
Not After : Aug 5 13:00:39 2025 GMT
Subject: CN=98f3a054ade673e21deddcf16e66cc06262e8b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:1a:0b:c9:71:0f:95:d3:1f:2d:2f:fd:8d:
49:97:f9:bc:3c:12:6a:32:56:b0:60:d5:67:13:05:
a2:79:3a:38:42:4e:f8:fe:fe:91:02:5c:02:1f:57:
ba:f8:22:4a:1a:c4:86:54:cc:64:cd:47:9f:88:df:
c9:44:2f:bd:1d:e2:e1:df:82:5c:e5:99:9b:a4:8c:
20:a5:1d:00:58:73:25:09:67:7a:21:8b:2d:e3:bf:
97:32:9b:c3:39:f7:94:bc:cc:bd:08:92:ed:0d:05:
9e:32:35:15:ab:26:5d:b3:58:4f:63:67:df:86:27:
52:ac:5a:6d:cd:a7:82:48:3d:6a:d8:2c:fb:5e:cc:
5f:2a:e0:30:b5:40:77:1e:4a:73:88:5e:48:f6:7e:
fa:ea:c2:0d:af:44:a0:23:db:96:5d:4b:39:fc:64:
d2:01:58:9c:0c:22:6d:84:ca:21:22:1b:d9:50:89:
c1:97:ca:07:16:ff:1a:af:1f:41:6b:ea:a3:85:12:
8c:9c:16:e3:27:60:6a:7e:55:61:6c:d9:17:91:c0:
96:7e:75:5f:3a:12:bb:8d:b4:2d:55:19:58:b7:3f:
af:5b:62:0d:f7:37:83:a8:18:a7:f2:ec:e3:57:ff:
eb:f1:6f:d1:0a:b0:0c:16:04:ab:6f:c1:f3:08:98:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F3:A0:54:AD:E6:73:E2:1D:ED:DC:F1:6E:66:CC:06:26:2E:8B:96
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4b:50:7b:a3:ef:23:7d:74:e6:b4:3b:d7:f7:d3:05:36:c1:
5b:bf:b9:0c:5d:b4:6e:f8:05:73:7f:74:a2:1c:8f:34:ad:50:
98:40:6f:b9:00:33:90:9e:d8:b4:33:9c:5a:59:62:9f:59:e5:
44:8a:4b:80:b8:97:69:d4:66:20:5b:43:3c:f7:7f:df:d0:ab:
42:c9:92:08:26:ab:10:8d:86:c2:7d:d7:f5:b6:15:a2:fd:3a:
f7:27:4d:02:41:44:be:e8:7d:1a:19:c3:06:64:a3:19:9d:3d:
9d:14:4a:a7:ef:67:ab:77:6f:05:6d:60:f2:2d:18:df:a1:b0:
3a:17:d2:57:f5:12:ef:ba:ff:80:ea:65:90:75:6c:21:32:bf:
57:13:96:cd:f8:34:ff:99:b2:c0:f3:09:ec:de:1c:a8:64:5b:
17:48:9f:d2:60:6c:96:ea:75:b7:8c:c2:cf:f5:d0:69:b6:d6:
e3:97:a4:0a:95:aa:cc:5e:c0:d0:42:e0:11:57:25:9a:ad:ec:
f6:df:1d:60:91:01:4e:07:25:3d:54:54:b8:c6:25:90:4f:30:
71:d1:ff:2d:98:56:25:83:c9:eb:66:f8:21:d2:da:21:1f:6b:
9c:49:4b:c5:f8:62:2c:22:5d:f4:0d:a0:34:38:c0:13:5c:93:
25:8b:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:19 2025 by rpki-client