
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: 719s74OiCCrrc9axNcMg8F26h0XVY0JgUQe+rfUEPlg=
Subject key identifier: 9A:68:20:64:6C:E8:06:F4:7A:18:AE:53:3D:53:56:43:52:6C:AC:C7
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 01988DA20E1AAB5186E57662A7327D587B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 15B3
Signing time: Sat 09 Aug 2025 07:01:04 +0000
Manifest this update: Sat 09 Aug 2025 07:01:04 +0000
Manifest next update: Sun 10 Aug 2025 07:01:04 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: WQgBl87fxx2ZouFR7FlYCikhjuLxF0PiPhQ7NBfuGjY=)
2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:0e:1a:ab:51:86:e5:76:62:a7:32:7d:58:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Aug 9 07:01:04 2025 GMT
Not After : Aug 10 07:01:04 2025 GMT
Subject: CN=9a6820646ce806f47a18ae533d535643526cacc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:7e:de:a5:b0:2c:0f:68:c9:a9:9a:c3:d6:
19:cf:10:57:6f:75:bf:19:aa:d9:27:c8:18:a5:d6:
18:e9:13:ba:a0:72:de:94:a1:41:be:af:88:3c:34:
1d:8a:68:15:c2:81:d1:ee:46:d2:6f:c1:83:6d:15:
d3:3d:50:8e:e2:a8:26:61:03:3e:e9:0e:f3:15:56:
67:74:22:4a:75:e5:88:7b:dd:f0:5f:62:bb:40:e9:
96:23:c4:95:ae:f7:36:c4:fc:81:32:07:4b:f4:26:
f6:3e:4f:62:5e:03:bb:39:19:48:3f:ce:aa:c4:39:
ed:e7:80:70:9d:f0:1c:39:2f:7d:f9:a9:1e:22:7f:
51:9a:a1:ac:5f:61:9a:8b:ac:b1:c1:20:8a:ca:78:
9c:fb:8b:7e:78:85:7c:53:56:a8:e8:5e:3f:de:30:
fc:c2:20:dd:53:3a:5b:b4:35:18:d2:4b:d5:a3:84:
9b:13:49:f9:1c:5c:a4:df:9e:7d:e4:04:04:10:65:
e5:3d:28:de:84:8c:f4:dd:c8:e2:2d:b0:4c:1f:3c:
56:77:aa:5c:38:6b:8b:3e:43:80:70:53:e0:3d:58:
f9:37:26:88:12:a5:e6:07:e8:12:85:fa:d1:df:df:
31:e0:bc:32:36:af:c4:85:b1:a0:70:3f:cf:32:86:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:20:64:6C:E8:06:F4:7A:18:AE:53:3D:53:56:43:52:6C:AC:C7
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d6:a4:a4:e1:90:98:02:26:30:00:98:73:84:7e:6a:d5:46:
dd:d4:0f:61:a1:5d:3e:f4:8f:f1:4b:7f:df:cc:97:03:b2:fb:
82:78:9f:9f:75:0e:4f:b6:a5:6d:4d:98:81:54:71:e9:f0:b1:
18:d4:5e:b2:dd:b3:49:89:e8:04:5f:93:88:09:21:17:4e:78:
b6:34:63:94:91:b5:0f:9d:60:e8:1e:1a:d9:9c:f6:c7:2e:6b:
5c:4b:7a:e8:c7:9d:ca:1f:83:54:4c:4d:2b:61:2d:80:61:07:
fc:cf:08:d3:44:0c:7d:7a:bd:ae:c8:e9:b4:f6:b2:df:dd:f0:
1e:89:6d:8c:e4:99:b4:6f:90:9f:71:13:0e:e7:28:b1:f2:d6:
ae:8a:b7:66:41:5a:77:9e:c3:ac:eb:69:a1:7c:bd:03:c9:c9:
f6:f6:43:8d:79:d3:29:34:23:8c:93:d9:8d:af:2b:68:da:33:
92:e8:9e:f2:c2:10:c9:60:e3:41:03:8d:20:7a:af:a2:a7:28:
77:b3:c1:7a:b3:31:0e:84:f6:c3:55:ac:bc:bd:70:07:6b:21:
0c:c0:f8:59:56:6a:4a:2f:c8:a9:4a:69:62:dc:15:3f:4e:2f:
a2:dc:5a:ac:50:9f:83:b7:f3:f4:89:4e:86:d2:6d:d6:da:02:
65:91:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:28 2025 by rpki-client