Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: uMKhmTeRXo54cL49GmwZjflPOEI9TnGacSEjgdhvvAY=
Subject key identifier: 23:B9:D4:4C:A0:4E:79:2B:F8:0F:65:3B:5C:E5:80:1B:E5:10:9D:57
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 0196B77E5ED07C1791CFED80EB89936FF4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1137
Signing time: Sat 10 May 2025 00:00:34 +0000
Manifest this update: Sat 10 May 2025 00:00:34 +0000
Manifest next update: Sun 11 May 2025 00:00:34 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: 2BA9hevNIPRKFXtmdB3lk0F6Fh6fsj6UIZ+/+ToB11w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:5e:d0:7c:17:91:cf:ed:80:eb:89:93:6f:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: May 10 00:00:34 2025 GMT
Not After : May 11 00:00:34 2025 GMT
Subject: CN=23b9d44ca04e792bf80f653b5ce5801be5109d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:e3:66:94:c7:6b:35:2c:61:e7:c6:a7:46:
1d:f3:94:9a:94:8a:82:56:08:8a:21:6c:2a:ff:80:
1f:0f:47:14:a6:42:8d:0d:01:68:16:2e:c3:32:aa:
01:03:51:87:63:c9:7e:b9:f8:0a:14:93:77:bf:3a:
51:80:7f:bd:f5:1c:bf:3e:58:02:d6:b3:a6:f7:dc:
7d:f1:16:b4:0c:1a:1a:61:0b:93:ce:7d:5e:64:32:
80:ec:ec:17:37:11:dc:05:55:c0:cf:ba:04:a0:ce:
8e:b9:fe:3c:39:df:a0:49:5b:db:fc:ae:3b:e7:a4:
90:74:c0:90:50:1f:82:73:28:e9:65:43:2d:e4:8d:
cb:6d:3d:00:e2:2e:5a:fb:cd:d7:5c:ba:97:d8:c5:
a5:6d:81:c5:52:03:a7:e0:88:99:08:11:51:1b:d1:
3a:3f:4c:95:a7:98:cd:b1:2d:c2:83:7e:03:6c:b5:
95:fa:b3:48:a1:85:6d:3b:b8:59:1e:98:84:8c:c4:
c7:ef:66:31:bf:bc:d1:31:f0:a0:c7:0c:bd:e9:65:
95:7f:aa:b1:81:47:ac:7f:74:4f:7e:84:47:03:81:
17:e1:19:b7:86:c4:67:ad:fb:ad:50:04:6a:c2:36:
fd:9a:de:51:65:b2:09:60:a0:67:c4:99:4b:4b:7b:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:D4:4C:A0:4E:79:2B:F8:0F:65:3B:5C:E5:80:1B:E5:10:9D:57
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:68:d0:91:6c:19:4e:81:2a:96:2c:eb:24:ad:0c:98:55:
96:06:2f:c3:3e:23:be:61:1d:f7:db:16:53:5d:42:8e:d6:79:
ff:01:37:5f:67:8b:19:90:0a:ae:a0:fb:3f:b2:79:51:53:2d:
20:fc:83:05:08:8f:55:47:6f:6f:6f:05:19:98:f5:ad:50:4a:
09:e8:2c:d2:01:fc:2b:43:4e:d0:80:94:e0:cc:cd:3f:b7:52:
ff:8d:59:77:40:a8:8b:fe:8d:84:7d:a4:6e:fc:65:9a:ba:96:
a6:d0:96:7e:51:43:b6:dc:d1:4d:6b:9e:05:6d:9c:31:db:b0:
96:1b:93:82:e3:61:93:70:3f:3e:be:bc:62:cd:9d:19:ed:44:
af:19:0a:d8:ee:ea:af:5d:1f:4a:4b:d7:d1:53:c9:e5:c7:f1:
a0:36:79:86:cc:ec:63:e4:6e:84:5d:e6:9f:b2:90:ab:46:c4:
ca:90:a0:4e:4c:09:08:73:be:66:0e:95:5b:75:59:bb:9b:27:
31:db:3e:b1:26:9e:7d:e7:be:0c:76:89:fe:d5:65:78:1d:7f:
5c:2a:80:62:c1:8a:cf:eb:02:5f:fe:cf:69:31:a4:9f:0e:1c:
69:63:1e:9b:1f:31:79:02:77:9d:a5:97:7d:c4:a6:74:52:ab:
96:38:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:28:42 2025 by rpki-client