Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: llmK8aaJZNTEYdze1/Q7jSeo3DoBRDE/3j7Mp2pSBxQ=
Subject key identifier: 10:C4:58:31:B5:47:C3:2F:6F:BB:F9:8F:9A:3C:CB:47:C9:82:DC:C0
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019891B5F8D71A7EDF1EFA7071072E2E20E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1467
Signing time: Sun 10 Aug 2025 02:01:18 +0000
Manifest this update: Sun 10 Aug 2025 02:01:18 +0000
Manifest next update: Mon 11 Aug 2025 02:01:18 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: kY5naCowmmnag0cZPCyes2I8Tu3IuBx1r1/8GgY0y1k=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:f8:d7:1a:7e:df:1e:fa:70:71:07:2e:2e:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Aug 10 02:01:18 2025 GMT
Not After : Aug 11 02:01:18 2025 GMT
Subject: CN=10c45831b547c32f6fbbf98f9a3ccb47c982dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:09:ef:a7:37:09:69:b4:5e:cd:9f:ec:4f:
e3:12:a2:90:f0:02:55:d6:da:32:8e:cf:72:56:6f:
98:71:60:c3:d7:fc:e6:0a:ae:ae:e3:c3:43:89:50:
9b:1c:cf:d1:66:c5:7e:94:58:c6:ed:7f:83:01:dd:
5c:4b:fd:40:06:7a:bb:c9:d0:33:90:e0:89:f1:a8:
46:8e:13:97:2f:20:dc:8f:7a:91:34:42:5a:9d:c2:
55:2c:26:81:9d:ea:b3:fd:23:46:40:53:d4:46:47:
a3:23:eb:7f:6d:ed:9c:ea:43:f1:54:ec:bc:a9:51:
19:40:44:cb:34:1d:a2:b0:43:d8:a0:40:2d:bc:8e:
15:20:a8:64:64:3e:9c:de:63:7b:36:4e:d5:5e:e2:
46:f2:6d:42:d3:cd:ca:94:92:71:54:f6:74:0b:db:
3b:28:72:db:d0:ba:3a:e5:f3:21:24:93:2b:02:3d:
9a:91:a0:fd:b0:d1:46:99:a9:a6:61:cd:ab:0d:6c:
98:64:78:fb:88:5d:5f:5f:cc:be:7e:74:b5:04:75:
da:8c:9b:e5:be:05:66:e4:0d:a4:7a:6d:8a:bf:9b:
87:d0:a3:44:5e:2f:6b:19:0c:3c:ae:27:8a:5f:a8:
a8:6e:3e:73:84:b6:d2:28:30:61:5f:29:c9:e3:74:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:58:31:B5:47:C3:2F:6F:BB:F9:8F:9A:3C:CB:47:C9:82:DC:C0
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:28:33:f4:47:c2:ac:b5:2b:23:27:1b:60:ba:8d:e7:e6:1c:
4e:63:6d:39:4f:85:8f:9d:f6:94:46:0d:ac:e2:e7:ff:39:c6:
86:6d:47:a7:1f:0e:dc:2e:00:d6:c5:db:53:4f:78:ab:c4:24:
49:d2:0b:26:3b:c6:ad:d4:58:0c:e6:b3:bd:84:5f:6e:98:22:
2e:0e:d7:2c:57:0b:1c:ae:01:b3:a4:ff:6f:ae:af:12:e8:b7:
d1:e3:57:b9:3d:ea:7e:0c:ae:7a:ce:cf:d1:f5:59:71:cd:ae:
59:02:da:ea:30:93:8d:e4:59:8c:44:39:11:75:6d:b1:ca:67:
2b:38:f2:71:d7:e9:5f:b0:51:cf:4b:ab:40:49:3f:74:79:83:
f7:d8:20:a2:f1:42:6b:3e:c1:e1:59:aa:02:f8:9b:b8:ed:82:
df:e8:33:4f:34:46:59:dd:38:cf:87:d1:14:76:9b:eb:0d:c0:
5d:80:1c:b2:b9:ae:d3:83:43:9c:dd:b4:25:13:5f:e6:04:96:
0f:bc:26:f9:11:ac:cf:b4:61:ce:59:b4:90:eb:d1:2a:39:8c:
bd:ca:62:1b:8d:f7:d7:86:bc:5d:69:a1:b4:fd:d0:ce:6e:a8:
a6:ce:00:22:9b:f4:5d:45:4e:f7:e8:2a:43:6c:02:3f:1a:42:
d0:d8:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:50 2025 by rpki-client