Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: ybHKHeo+++rflhvDpw+Vt7iLj6quHQofJ3PHDZC33XU=
Subject key identifier: 3C:8B:DE:6C:3B:DF:D3:C3:11:F9:F5:F4:62:4C:17:05:CB:B4:21:25
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 0198D65F67BE267A9C28BED8F871930CD50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1250
Signing time: Sat 23 Aug 2025 10:00:33 +0000
Manifest this update: Sat 23 Aug 2025 10:00:33 +0000
Manifest next update: Sun 24 Aug 2025 10:00:33 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: KuGaZhmCazrYnxKtjRpm7inrK0I226G+YKbHbKokqkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:67:be:26:7a:9c:28:be:d8:f8:71:93:0c:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Aug 23 10:00:33 2025 GMT
Not After : Aug 24 10:00:33 2025 GMT
Subject: CN=3c8bde6c3bdfd3c311f9f5f4624c1705cbb42125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e3:c9:b2:c1:5c:98:ee:23:39:a4:86:73:3d:
4d:73:f8:eb:f4:f2:ed:ba:3d:f1:0c:25:e9:29:ff:
bf:f9:86:f3:8a:b1:f4:73:82:f1:3e:2c:ed:53:e4:
ff:de:88:c5:00:64:fe:2a:f5:30:0a:c6:93:cc:c6:
99:7d:51:7f:ec:31:97:b2:95:e4:b8:4e:57:df:5f:
11:44:3d:a8:1e:05:5d:44:08:22:0a:77:29:8f:c5:
db:24:f7:71:bf:0c:4c:a4:e3:03:d4:17:e6:9a:5d:
34:bb:80:05:83:7a:ac:f5:a1:20:62:32:86:d6:d7:
29:d3:fc:05:0b:6e:90:ec:44:6c:60:89:3a:c2:bf:
27:c6:1b:89:d7:cd:bc:7a:f9:2b:8c:35:fa:34:bd:
5c:ef:b5:d5:29:6e:4e:33:67:b0:ed:d7:86:1a:30:
85:f0:d6:d7:63:e3:61:31:d5:79:90:c6:c7:b0:39:
a8:0b:98:fb:2e:b2:d0:34:db:96:49:28:ae:ca:4f:
63:2e:10:cc:a8:8b:d9:f7:6c:2a:9a:d2:7d:8e:b5:
6a:36:dd:5f:23:ec:f8:ad:f1:80:9e:86:ca:20:0c:
78:2b:ae:b6:cc:30:3e:f4:14:59:7f:67:0e:b0:d4:
ff:b9:d7:b1:6c:b0:f6:23:ab:7a:f8:4e:1f:62:07:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:DE:6C:3B:DF:D3:C3:11:F9:F5:F4:62:4C:17:05:CB:B4:21:25
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cd:64:38:ed:54:4e:90:f0:a5:16:74:75:26:f9:7a:c1:8c:
dd:d1:df:90:33:9a:c6:b3:11:3f:16:8f:cb:f6:88:8b:07:d9:
d0:42:51:18:27:36:0f:31:ab:94:6d:3b:1e:42:69:d0:9f:5c:
7f:93:61:f2:21:e2:fa:66:6e:d6:9e:0b:15:f4:6a:8d:1c:51:
5a:42:37:3f:5b:8c:81:11:06:3a:da:eb:58:3a:de:43:71:c8:
54:85:83:e1:9b:59:09:93:bb:48:94:e0:5c:ab:9b:ff:58:57:
0e:6c:43:17:9e:fa:b5:a8:18:eb:5f:53:d0:c5:19:d9:66:e3:
c4:9a:64:a3:a6:36:10:fb:23:05:e0:e6:e6:4f:a6:43:3f:36:
ed:39:6f:38:d7:db:17:30:41:98:5b:4b:c6:12:8c:d6:75:90:
56:c4:c2:c5:aa:ad:55:d8:5e:ac:9c:43:28:09:22:68:0c:13:
00:f2:a5:8b:b0:e5:5c:46:7a:14:2a:dc:93:e5:2d:10:f7:16:
91:ef:ff:52:3c:1c:57:16:2d:df:d5:83:56:e8:2b:69:cd:a5:
51:84:be:c7:0a:27:a5:d8:7f:8e:48:9e:07:23:b0:07:f1:e2:
22:09:cf:7c:14:eb:f2:77:22:9e:73:97:23:87:17:8b:53:3a:
9b:e1:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:10 2025 by rpki-client