Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: 6i7Xel/nTDUeMHPxFbmku4iYwrFq5RLpX+DlPGK/irs=
Subject key identifier: A6:41:CE:DB:22:95:69:03:B5:F7:23:E3:9C:27:65:1E:C8:B3:6C:3E
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 0197B7EA7F72AFCA77E1368E8EB8D5841792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 1514
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: jG6dk7L1LmShu3YabPY+YrTecy46i0mcJXmyam4O1Y4=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7f:72:af:ca:77:e1:36:8e:8e:b8:d5:84:17:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=a641cedb22956903b5f723e39c27651ec8b36c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:74:40:d6:c8:6a:8f:8b:62:f9:2e:81:e9:
e3:57:5c:45:9f:4e:24:f2:34:93:70:cb:2a:41:48:
78:75:17:81:62:e8:15:ec:d7:1d:65:24:5a:35:e6:
ff:6d:19:b0:a1:07:8c:4c:c0:26:52:a8:bd:fe:4f:
90:bd:86:d7:7e:e3:89:8f:86:8a:66:c6:0b:7c:1e:
ed:fe:ad:28:35:b2:e1:37:aa:99:d3:33:d0:ac:53:
7e:25:43:a1:2f:ca:fa:6a:19:e3:6c:b7:2e:fd:d5:
d7:47:a5:f0:db:7f:c0:fd:71:72:66:5b:95:71:fb:
95:9d:c2:45:bf:5d:76:20:04:db:14:0e:b4:fc:ac:
cf:ee:49:6d:90:be:96:9f:8d:70:1c:a7:4d:b0:8b:
23:49:d4:4c:b0:59:f8:ce:6d:ff:01:65:86:0b:fc:
f5:ac:61:df:26:c4:d2:cf:d6:ab:3d:f8:23:55:0c:
ad:77:77:da:d9:69:88:26:98:45:8e:e2:22:b0:b3:
50:6f:2a:9d:dc:79:3f:ec:16:bc:cc:24:66:94:4a:
34:64:d7:57:06:3d:e6:07:89:ef:62:e6:57:bb:85:
4f:c0:06:5d:3b:3e:3a:8b:6a:5a:d5:54:1c:c3:e2:
9c:4d:30:c2:70:05:37:7d:5a:1b:a3:74:a8:1e:43:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:41:CE:DB:22:95:69:03:B5:F7:23:E3:9C:27:65:1E:C8:B3:6C:3E
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:e6:f5:16:7d:4c:c6:a3:df:8a:86:8f:7e:0d:78:fc:94:
36:97:56:e2:df:ba:86:4c:c4:e7:bd:c3:91:b8:fe:cd:5f:19:
05:94:90:05:16:a0:3c:d1:08:55:66:b2:3e:57:28:8c:c4:94:
98:e5:92:57:1d:8f:f2:4e:c4:82:ba:51:98:c9:9a:19:f0:c6:
bd:52:e9:b4:f3:87:7c:16:57:ac:7c:99:ab:cf:64:be:67:ba:
71:9c:de:79:65:eb:07:b8:66:26:28:ad:3e:77:87:92:29:e0:
4a:b2:23:fd:19:f4:6e:35:24:5e:df:ae:df:07:d2:c3:16:39:
3c:1a:db:2b:ee:7e:94:67:24:64:ec:bf:90:e4:9d:34:1d:46:
de:99:e2:1b:e5:6b:f0:85:1a:1b:fd:b3:b9:b7:12:75:41:6b:
75:c2:c5:47:9a:53:03:49:2c:87:ac:f5:63:b2:67:a3:37:66:
ae:36:cf:e4:cf:98:f4:0e:90:11:fb:58:ce:d2:2f:cc:e4:95:
79:cf:cb:c4:0e:66:bd:25:ca:66:88:44:e3:54:54:e1:b4:41:
8d:a8:0e:48:37:cd:13:31:ce:54:f0:08:7d:09:55:88:bc:c4:
2c:01:87:57:f5:0f:c3:7a:93:6e:0c:26:ae:e1:06:7c:50:ed:
46:e1:4f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36n9yr8p34TaOjrjVhBeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjYxMmUxZjZiNGQ4M2Y4YTVkNTUyY2YzYjYwZWRkMjNi
ZmU5ZjQwHhcNMjUwNjI4MTkwMTI3WhcNMjUwNjI5MTkwMTI3WjAzMTEwLwYDVQQD
EyhhNjQxY2VkYjIyOTU2OTAzYjVmNzIzZTM5YzI3NjUxZWM4YjM2YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxV0QNbIao+LYvkugenjV1xFn04k
8jSTcMsqQUh4dReBYugV7NcdZSRaNeb/bRmwoQeMTMAmUqi9/k+QvYbXfuOJj4aK
ZsYLfB7t/q0oNbLhN6qZ0zPQrFN+JUOhL8r6ahnjbLcu/dXXR6Xw23/A/XFyZluV
cfuVncJFv112IATbFA60/KzP7kltkL6Wn41wHKdNsIsjSdRMsFn4zm3/AWWGC/z1
rGHfJsTSz9arPfgjVQytd3fa2WmIJphFjuIisLNQbyqd3Hk/7Ba8zCRmlEo0ZNdX
Bj3mB4nvYuZXu4VPwAZdOz46i2pa1VQcw+KcTTDCcAU3fVobo3SoHkMwjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZBztsilWkDtfcj45wnZR7Is2w+MB8GA1UdIwQY
MBaAFOy2EuH2tNg/il1VLPO2Dt0jv+n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEt
OTZmZTE5MTFkMGIzLzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81Y2Q4ODQtNzlmNS00ODNkLTkwNGEtOTZmZTE5MTFkMGIz
LzEvN0xZUzRmYTAyRC1LWFZVczg3WU8zU09fNmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7Tm9RZ9
TMaj34qGj34NePyUNpdW4t+6hkzE573Dkbj+zV8ZBZSQBRagPNEIVWayPlcojMSU
mOWSVx2P8k7EgrpRmMmaGfDGvVLptPOHfBZXrHyZq89kvme6cZzeeWXrB7hmJiit
PneHkingSrIj/Rn0bjUkXt+u3wfSwxY5PBrbK+5+lGckZOy/kOSdNB1G3pniG+Vr
8IUaG/2zubcSdUFrdcLFR5pTA0ksh6z1Y7JnozdmrjbP5M+Y9A6QEftYztIvzOSV
ec/LxA5mvSXKZohE41RU4bRBjagOSDfNEzHOVPAIfQlViLzELAGHV/UPw3qTbgwm
ruEGfFDtRuFP9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:57 2025 by rpki-client