Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: Jum7V3tPWXt0wMcijPmhdk9Xt0yqPiU1kYVm4/ZvqNs=
Subject key identifier: 89:25:69:73:13:95:A0:46:B8:97:7E:08:3B:2B:4E:76:8C:68:AF:31
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 0197790ADAB47ABDB93187660FBB716CE0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 0ECC
Signing time: Mon 16 Jun 2025 14:00:43 +0000
Manifest this update: Mon 16 Jun 2025 14:00:43 +0000
Manifest next update: Tue 17 Jun 2025 14:00:43 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: ja4yQy2UbYC4lkv4pO+ZDtnt3xR8AcFfQfQt6bdebSo=)
2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:da:b4:7a:bd:b9:31:87:66:0f:bb:71:6c:e0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jun 16 14:00:43 2025 GMT
Not After : Jun 17 14:00:43 2025 GMT
Subject: CN=892569731395a046b8977e083b2b4e768c68af31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:af:ca:02:fb:d6:8a:f7:5b:1d:c5:7f:77:
c0:66:dd:ab:56:41:92:41:e9:d8:d5:bb:de:81:7b:
b8:0f:6d:a7:e0:b5:7d:11:2e:bc:2f:24:0a:43:20:
83:3c:5b:86:9c:ca:ae:fa:4e:69:79:2a:38:4c:38:
d5:67:08:6f:e9:61:3c:90:c8:df:15:73:9d:97:02:
7c:7b:7c:81:fb:d2:dc:58:25:49:0b:8c:13:0c:7b:
5c:d3:53:c2:85:a6:15:17:c3:cd:d5:50:9c:6e:12:
01:75:1b:8e:96:7c:df:ed:d7:8f:53:6c:47:1d:d8:
42:d8:8f:c9:36:e6:16:8f:c4:0e:80:8a:f7:79:e8:
c9:6c:ad:22:95:3e:e8:71:09:04:c1:4f:46:88:7e:
d3:2f:70:36:28:8f:34:76:ff:02:59:52:a9:ec:da:
11:20:53:5d:09:0c:45:c4:3d:0e:bd:46:b2:bf:43:
eb:c6:68:9c:c1:ca:11:d5:b4:ac:29:c8:6d:9a:2c:
8d:cd:0a:28:aa:a5:a7:93:b2:16:33:69:ce:03:42:
4a:b9:41:08:19:0d:c5:0a:c5:e4:94:42:06:a4:3c:
42:8b:cb:81:90:7b:3b:11:d8:84:0f:f3:ae:c6:98:
a8:07:d3:7d:fc:fb:af:8b:d8:c1:9e:de:92:2b:2b:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:69:73:13:95:A0:46:B8:97:7E:08:3B:2B:4E:76:8C:68:AF:31
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:47:89:49:a3:a5:fa:90:e6:1c:78:e4:41:59:00:4e:56:
f8:e1:d4:35:cb:9a:9c:77:bc:a3:a8:99:57:60:5f:4c:44:dc:
06:bc:bb:95:63:3a:e1:ad:51:a7:36:16:6b:69:30:d7:89:74:
e0:a5:81:66:5d:b7:33:00:d3:3a:b3:db:49:8d:90:0a:b6:8a:
03:c6:51:a5:e1:12:d3:3b:42:5d:9a:18:9a:3a:1d:0d:bd:b6:
6c:d1:9b:08:9e:d2:3e:67:b5:2d:1a:02:03:49:a3:c5:0a:a9:
c6:00:df:8d:22:b1:0e:a3:3d:ec:4f:aa:5e:d1:34:fb:03:30:
17:27:6f:f1:48:9d:3e:0c:c8:65:c9:d0:b6:f2:e9:63:4a:97:
7b:af:21:45:e3:36:d9:81:cb:20:8a:85:f6:eb:b5:3b:db:fa:
cf:ed:cf:34:df:c9:e7:5f:59:31:4f:6f:59:62:c4:04:ca:21:
9d:8b:36:f9:48:0b:e7:42:e8:82:8d:4d:98:97:aa:d1:0a:3d:
aa:bf:b3:8a:5b:83:c8:e8:36:fd:fb:d9:3d:ed:c7:68:38:be:
3d:2f:b7:ad:55:a1:c4:1b:68:31:37:23:bf:73:2c:d5:8b:3c:
fb:61:6f:33:dc:d0:b4:d1:ef:16:c6:f0:81:e9:84:0e:98:2a:
b1:2c:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:55:42 2025 by rpki-client