Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: 6RyVdacuCtXPmPSZVuTdozF0YsjaNIGMubp58GeJdQw=
Subject key identifier: FD:91:94:ED:6E:2D:B8:8F:E4:22:57:B5:DE:AF:C6:D3:8E:BF:75:55
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019A5D55E04373351E9C4768B54792A28AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 1555
Signing time: Fri 07 Nov 2025 08:01:40 +0000
Manifest this update: Fri 07 Nov 2025 08:01:40 +0000
Manifest next update: Sat 08 Nov 2025 08:01:40 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: OIpTBuDVXv5dgesZ+9uSmmNCEMxXI9JYZ3rAnmXXGcc=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:55:e0:43:73:35:1e:9c:47:68:b5:47:92:a2:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Nov 7 08:01:40 2025 GMT
Not After : Nov 8 08:01:40 2025 GMT
Subject: CN=fd9194ed6e2db88fe42257b5deafc6d38ebf7555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:b9:da:86:58:a5:3f:21:20:27:6a:a3:28:
c8:11:cf:7a:b2:47:d8:1f:d4:14:16:c6:f6:10:9f:
5c:56:bf:03:6a:0f:b4:97:a1:a8:e6:17:55:56:9e:
76:4a:2a:30:b4:50:49:9d:58:67:03:6b:1b:b8:f5:
c4:63:a2:49:ca:c3:ea:6b:03:3d:52:b4:32:01:a2:
a8:83:99:75:a6:5b:19:81:24:c8:ad:f4:f2:83:72:
77:c3:d5:08:da:78:f7:44:43:3d:9c:87:8a:a8:e6:
5e:ce:8d:e2:0d:24:f4:b8:e1:76:2d:9b:18:db:c9:
fc:a1:9c:6a:f8:d1:a3:6f:69:29:28:0e:33:59:b1:
09:98:70:17:a4:41:f8:c7:31:ef:ba:ae:1f:87:51:
4a:75:70:26:98:c2:af:68:0b:94:9d:2f:75:17:9f:
13:f2:8c:8e:3f:33:ba:4c:99:7f:97:05:79:7f:95:
84:b9:a7:93:2e:18:3e:db:3d:4a:7a:2b:42:30:48:
55:3b:67:98:d2:57:c7:b6:c0:c4:79:fe:f8:bd:6f:
91:a7:d1:85:93:34:46:4c:fc:01:33:28:9b:26:3e:
85:e2:f1:91:43:21:44:99:bc:af:5c:06:23:64:dc:
cd:e1:26:bd:ec:e2:ed:ca:98:ce:50:67:65:aa:77:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:94:ED:6E:2D:B8:8F:E4:22:57:B5:DE:AF:C6:D3:8E:BF:75:55
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8d:c5:eb:03:b2:45:ce:22:f1:5a:62:6b:b0:f9:39:b7:1d:
4d:3c:a3:15:2f:6a:86:5d:3e:26:c4:08:35:0c:be:fa:48:a0:
7f:2a:dc:25:fe:42:8b:50:c9:62:a8:65:c3:f9:66:73:28:fe:
bd:0c:cf:f7:c9:bf:c8:9b:26:13:df:4b:fa:9d:0e:29:0c:50:
10:68:ac:6d:4e:f4:f9:12:1b:17:8d:60:b5:ea:0b:bc:d7:b0:
72:e6:bd:17:de:5b:c8:2c:b2:62:f7:b7:dd:58:21:5f:b9:88:
e6:75:a0:69:e5:18:68:6d:66:3a:61:f7:f7:a6:23:e3:4b:b0:
be:73:02:1f:a4:7b:f3:ad:9e:5e:89:1f:ad:c9:c6:83:d8:fe:
03:af:83:6d:41:6e:50:3d:27:79:f5:ab:41:4a:03:5d:df:16:
ee:10:e9:a8:62:5c:e8:fa:41:55:31:91:24:77:41:87:79:7b:
35:86:c9:53:61:c6:79:bf:6a:80:2b:15:1f:05:37:4f:96:64:
cc:79:42:de:86:f1:0d:96:01:e8:0f:49:91:97:a9:65:60:66:
62:47:f0:2f:f0:c8:7c:90:ce:1f:0c:61:0f:0f:52:a8:c9:1e:
d4:82:f8:4a:19:25:3b:b1:a1:af:5f:44:dc:d5:3c:d8:b7:0b:
a6:30:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:59:21 2025 by rpki-client