Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: rgRBzB1XNsqEmXuTVLNr0UBTuxs1HD6TlUtUJ/TqmuU=
Subject key identifier: CB:5A:91:B4:7A:83:20:DE:D9:35:BE:24:AD:65:FE:3F:BA:B1:04:E2
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 01978B10EAA32647E071912890446C12B341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 13DF
Signing time: Fri 20 Jun 2025 02:00:31 +0000
Manifest this update: Fri 20 Jun 2025 02:00:31 +0000
Manifest next update: Sat 21 Jun 2025 02:00:31 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: Lo9c3W/zE9AQdLymXvre1tZSDlFYRYMo15UBhcASD6M=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:10:ea:a3:26:47:e0:71:91:28:90:44:6c:12:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: Jun 20 02:00:31 2025 GMT
Not After : Jun 21 02:00:31 2025 GMT
Subject: CN=cb5a91b47a8320ded935be24ad65fe3fbab104e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:bf:fa:d6:77:b4:b8:e2:8d:c4:19:1c:63:
02:33:48:bb:b7:1c:29:9f:21:5e:84:35:78:7e:c5:
44:e3:62:da:17:7d:44:6b:79:fc:bc:7c:ca:74:4c:
2f:4c:8a:b1:e8:f4:32:6f:6f:4a:62:7a:ad:a0:69:
00:2f:db:03:4f:89:e5:df:2a:92:ee:ab:47:1f:47:
ea:e2:60:17:8f:b5:83:24:f4:7b:8f:06:5c:20:c6:
7d:12:9d:78:ef:24:55:fe:55:d6:9e:dd:0d:07:e2:
f6:b6:be:fe:bf:f4:32:17:5b:a7:53:68:40:65:61:
d9:57:4a:56:5c:db:03:f3:1d:0b:65:ee:dc:4b:e9:
a3:a1:d5:a3:b5:d9:99:32:5e:c7:74:ee:30:1e:54:
e6:5d:21:6b:bc:2f:b3:34:2b:d1:e0:5a:0d:9a:a4:
b0:ec:d2:37:aa:a6:aa:84:a7:85:10:98:3d:86:52:
d9:1e:27:03:ae:20:cb:77:99:24:76:a4:cc:05:8b:
ab:64:a5:e1:40:61:ee:18:23:dd:10:2d:63:25:53:
31:18:14:3e:e6:a6:a9:7c:19:52:6a:65:b9:e7:ba:
7c:23:62:49:8b:d2:b7:df:c2:17:45:2b:4c:97:be:
e3:3e:32:8b:ed:1d:6e:ab:64:b1:40:65:13:26:26:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:91:B4:7A:83:20:DE:D9:35:BE:24:AD:65:FE:3F:BA:B1:04:E2
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bf:b3:b9:65:27:97:69:aa:8f:80:f0:2e:17:f3:cc:ab:bd:
df:b2:24:19:48:77:46:86:c6:b5:eb:55:97:61:4c:7a:de:18:
86:65:72:32:4c:bf:e4:5e:85:dc:cc:ab:5f:90:b2:b4:5a:24:
e2:c0:1d:ec:8b:2a:a2:e0:27:8e:31:3e:14:53:ba:7b:16:63:
ef:cd:89:1f:cf:3e:98:56:97:72:e5:6c:b0:9a:60:e6:40:99:
2c:ad:28:c3:90:93:59:bd:69:77:0a:d3:7b:1e:92:3f:77:e9:
ea:3d:0a:6b:85:2c:ad:42:0b:6f:e9:ab:4f:7f:5b:6c:19:05:
0c:9c:28:dc:d8:50:75:08:a2:0d:fe:e5:13:24:b2:ec:82:46:
ca:26:40:27:58:86:ed:e8:35:18:c8:69:2c:44:f2:74:3f:88:
7b:df:a4:17:d6:27:30:22:1b:ef:2b:5a:bb:c7:ba:e4:de:79:
a5:22:b3:58:ed:0c:c4:94:2c:4d:44:20:67:7f:0f:c5:9b:4f:
f9:db:89:93:e7:2e:2f:c8:b9:26:c3:53:7f:51:86:47:c8:54:
ef:33:0c:87:a1:b1:df:0f:99:fc:bb:e0:df:ef:f4:25:5c:0f:
b6:27:3a:5c:a2:67:7b:a8:97:5d:85:01:61:7e:e7:10:32:d6:
c1:4b:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:14:01 2025 by rpki-client