Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier: 6f1Fo/3jGXBu4FdZx1YpTJP05f4PIbXaKswX/7wd+Jw=
Subject key identifier: 3C:22:71:93:89:89:54:B8:10:11:FA:C7:9E:F6:E8:B7:AB:9B:C1:7E
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 0197BA7D096F0A66B0D30DCAEE81E35094DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number: 0A16
Signing time: Sun 29 Jun 2025 07:00:45 +0000
Manifest this update: Sun 29 Jun 2025 07:00:45 +0000
Manifest next update: Mon 30 Jun 2025 07:00:45 +0000
Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: /k6DTelHyH8h1mGFgf2VssTkcNnCxRdKco9KswbnoBc=)
3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
5: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:09:6f:0a:66:b0:d3:0d:ca:ee:81:e3:50:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jun 29 07:00:45 2025 GMT
Not After : Jun 30 07:00:45 2025 GMT
Subject: CN=3c227193898954b81011fac79ef6e8b7ab9bc17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:1c:d4:1a:a3:cf:57:9e:67:6c:73:d2:05:
5e:02:e4:9c:51:c6:5b:f9:ce:a0:30:06:b7:c7:db:
91:e2:7c:c7:0a:62:41:f5:57:77:3f:37:4b:6f:b4:
3a:f9:6f:81:ef:4a:3f:d5:51:3b:80:52:75:d9:60:
e7:64:26:3c:d4:ac:1f:e4:65:fa:4e:9f:fc:c9:4a:
87:97:33:f7:10:a2:c4:79:2b:ec:4f:3f:9d:0d:2b:
d8:af:9d:bf:63:a1:70:62:b3:d8:62:24:4a:a9:ec:
fd:72:b6:e5:57:2e:77:e8:b7:49:65:54:07:1d:f5:
77:e0:ee:95:09:8b:c9:a5:33:e4:e0:47:3a:cd:ec:
63:50:7b:25:8e:0e:0f:d3:24:d9:26:f3:b8:c7:f9:
f8:6b:31:46:c9:0e:f4:fe:96:95:97:c0:81:d7:34:
87:08:26:5d:50:ef:45:86:7d:2b:b5:6d:31:c0:aa:
67:a8:09:c0:20:18:1a:4f:c2:10:11:8f:74:57:37:
77:14:f1:5d:07:0e:60:93:a4:8b:85:8e:ac:6c:78:
ab:63:a8:47:a3:2c:1e:eb:4b:ae:61:aa:ad:bf:03:
9b:9b:1f:db:4a:96:ec:20:2b:61:ff:1f:bd:5c:d6:
1f:1b:04:58:f3:4d:03:76:eb:11:88:29:82:cc:5b:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:22:71:93:89:89:54:B8:10:11:FA:C7:9E:F6:E8:B7:AB:9B:C1:7E
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:f2:7a:98:bb:0a:98:c0:40:77:bf:ec:3e:4f:5e:8a:5d:
e7:82:6a:a5:c5:f0:0f:47:43:c4:04:9e:42:2d:52:f0:a3:46:
55:2b:41:da:54:97:47:e8:f9:07:45:d2:d9:95:79:74:f9:ed:
1c:28:45:e2:95:88:cb:89:de:0c:c8:4f:63:7e:3d:98:ff:d5:
c5:4c:93:7f:8e:ed:8b:7e:b2:0b:c1:9e:9f:c4:ed:62:ad:d5:
d5:7e:58:bc:29:ab:b6:c3:9d:91:93:61:1c:f7:51:4c:d7:33:
be:69:36:5e:1a:80:b9:c1:fd:fb:64:39:eb:d9:d5:54:31:f6:
07:91:7f:17:35:ba:9b:bb:d2:a4:e1:25:10:07:1c:15:84:9b:
e4:d8:2c:f0:11:bb:4d:43:7b:a9:ac:fc:85:68:e7:32:ff:38:
69:55:e9:05:42:19:3a:c8:ac:17:03:d1:9c:81:07:de:55:a9:
b8:3d:9f:f5:fc:49:6e:c8:fa:ef:75:8d:e0:da:94:ed:18:74:
6c:06:08:3f:11:23:3d:e1:b0:fb:fa:23:6b:e2:82:df:08:41:
44:3e:08:3d:9b:94:37:60:9f:38:b4:80:73:ba:1c:ff:46:c7:
b1:53:01:78:a1:5a:86:c9:6c:17:df:20:eb:87:fc:0a:1f:81:
b1:1e:76:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fQlvCmaw0w3K7oHjUJTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj
M2VkZGUwHhcNMjUwNjI5MDcwMDQ1WhcNMjUwNjMwMDcwMDQ1WjAzMTEwLwYDVQQD
EygzYzIyNzE5Mzg5ODk1NGI4MTAxMWZhYzc5ZWY2ZThiN2FiOWJjMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywcc1Bqjz1eeZ2xz0gVeAuScUcZb
+c6gMAa3x9uR4nzHCmJB9Vd3PzdLb7Q6+W+B70o/1VE7gFJ12WDnZCY81Kwf5GX6
Tp/8yUqHlzP3EKLEeSvsTz+dDSvYr52/Y6FwYrPYYiRKqez9crblVy536LdJZVQH
HfV34O6VCYvJpTPk4Ec6zexjUHsljg4P0yTZJvO4x/n4azFGyQ70/paVl8CB1zSH
CCZdUO9Fhn0rtW0xwKpnqAnAIBgaT8IQEY90Vzd3FPFdBw5gk6SLhY6sbHirY6hH
oywe60uuYaqtvwObmx/bSpbsICth/x+9XNYfGwRY800DdusRiCmCzFtDmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwicZOJiVS4EBH6x5726Lerm8F+MB8GA1UdIwQY
MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt
MDYwYTQ3MzgwOTFkLzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk
LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBzyepi7
CpjAQHe/7D5PXopd54JqpcXwD0dDxASeQi1S8KNGVStB2lSXR+j5B0XS2ZV5dPnt
HChF4pWIy4neDMhPY349mP/VxUyTf47ti36yC8Gen8TtYq3V1X5YvCmrtsOdkZNh
HPdRTNczvmk2XhqAucH9+2Q569nVVDH2B5F/FzW6m7vSpOElEAccFYSb5Ngs8BG7
TUN7qaz8hWjnMv84aVXpBUIZOsisFwPRnIEH3lWpuD2f9fxJbsj673WN4NqU7Rh0
bAYIPxEjPeGw+/oja+KC3whBRD4IPZuUN2CfOLSAc7oc/0bHsVMBeKFahslsF98g
64f8Ch+BsR52Ww==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:51 2025 by rpki-client