Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: bmRB1v5zZohU+PyCIRd5LfB8tkQxoG/aOQkGRQDaG9A=
Subject key identifier: 6A:1C:8E:D8:0D:E1:D9:F0:44:C4:4C:4A:A4:93:2E:6E:F5:D6:48:01
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 01988A6A1749D0FAF035A2514AEF08798FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 1581
Signing time: Fri 08 Aug 2025 16:01:05 +0000
Manifest this update: Fri 08 Aug 2025 16:01:05 +0000
Manifest next update: Sat 09 Aug 2025 16:01:05 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: yEVIcUbs73NPdJiHPcuVHRU6xZO7GRievdUVErdjeR8=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:17:49:d0:fa:f0:35:a2:51:4a:ef:08:79:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Aug 8 16:01:05 2025 GMT
Not After : Aug 9 16:01:05 2025 GMT
Subject: CN=6a1c8ed80de1d9f044c44c4aa4932e6ef5d64801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:a3:93:fc:ac:75:1e:69:37:e2:2c:54:a9:
75:23:2e:4c:a1:12:99:e6:c1:bc:ad:bd:18:fe:dc:
4a:4a:20:07:77:b7:59:36:79:a1:e1:9e:b0:63:24:
9e:2c:fb:ee:0d:2f:95:a3:20:d0:e2:56:bb:dc:e5:
18:19:5e:f8:b5:95:af:be:e0:32:02:b3:30:33:3a:
af:b5:b9:29:d1:58:ee:70:ed:e9:77:d7:0b:44:bf:
aa:16:d2:07:d4:e4:b2:eb:b3:09:56:c5:09:f6:ce:
36:8a:be:08:48:4b:f1:59:5f:41:13:aa:13:11:8e:
d5:7d:62:94:5b:3a:a6:71:53:8b:34:ef:a5:49:85:
7d:9c:5f:54:8b:19:5b:be:34:7e:6c:72:e2:30:fb:
43:f5:f3:36:bb:36:e0:4e:b2:a5:48:a0:2b:7d:d1:
ca:a7:48:01:97:23:9d:20:18:92:69:e1:af:f1:7c:
80:61:48:3a:c4:0a:c0:6a:20:2c:28:99:a1:2e:9d:
42:f8:55:ea:cd:51:84:8b:6e:eb:5f:0f:09:94:2c:
d6:6b:08:f8:81:36:3e:89:26:9d:5a:b1:f2:f2:44:
24:0d:d9:fc:a4:b0:a7:04:65:8d:90:d9:72:16:a4:
eb:90:e5:a2:e2:7d:7f:2b:ed:6f:4f:4f:ec:34:2f:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:8E:D8:0D:E1:D9:F0:44:C4:4C:4A:A4:93:2E:6E:F5:D6:48:01
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bb:72:ac:b8:65:c3:99:68:6d:21:1c:70:34:73:1f:52:93:
90:38:d6:c3:2a:bc:12:f6:7c:1e:31:b7:66:75:73:7a:43:d5:
0a:dc:61:f6:11:3b:99:4c:3c:9f:9f:15:61:66:18:fd:55:99:
55:2f:c5:9d:16:8e:3f:b2:67:4b:0a:a7:c3:49:10:90:d8:1f:
55:56:92:25:6b:f6:0b:92:e4:bc:3a:ab:aa:e3:0b:78:d4:db:
b4:a6:5b:1e:82:f2:fe:d5:ea:a0:1c:7a:ef:64:af:73:84:83:
de:87:b4:c5:01:57:f1:40:8d:9a:5e:91:3c:df:01:65:2b:52:
5b:e5:8c:18:f1:0c:b1:46:c3:19:31:d3:7a:d3:53:8c:36:2a:
ac:0d:c7:4e:88:87:c3:81:b4:44:7a:cb:5b:1d:cc:26:4d:a9:
9d:28:01:a3:2d:38:b2:6a:f6:30:1e:64:e2:9d:e7:29:2d:e6:
15:e5:1b:59:eb:8a:a6:3a:95:e7:49:a5:3a:b9:fd:f5:6b:27:
5e:a6:83:c3:91:66:b1:e3:b0:38:42:bd:18:06:97:e5:cc:c7:
19:94:70:d3:88:ed:34:ca:ab:ad:15:78:b7:ac:55:db:ec:b1:
3c:ef:56:33:25:90:7f:0a:bf:a5:c0:e6:c8:ba:a4:d6:b6:2a:
d4:6d:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:00 2025 by rpki-client