Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: pzBt1O/lenSatslXXSTgk89/rtYesuAkM3fXM00r2ho=
Subject key identifier: A7:D3:66:4B:AD:7A:AD:B4:88:C1:93:10:49:50:22:CA:09:92:D8:F2
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 0197B7EAC1C970A6B0F482F839830FC1979B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 01C6
Signing time: Sat 28 Jun 2025 19:01:44 +0000
Manifest this update: Sat 28 Jun 2025 19:01:44 +0000
Manifest next update: Sun 29 Jun 2025 19:01:44 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: 0rMXX8R6+aJN/qFg8NBcrvjmlQqHq7ltBIWRyF/oboQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c1:c9:70:a6:b0:f4:82:f8:39:83:0f:c1:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Jun 28 19:01:44 2025 GMT
Not After : Jun 29 19:01:44 2025 GMT
Subject: CN=a7d3664bad7aadb488c19310495022ca0992d8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:6d:95:f6:79:69:86:db:d7:97:0a:92:1d:
cd:ca:e3:73:cc:28:f6:36:71:19:57:11:8c:ca:0d:
0e:a5:13:fd:f4:75:aa:96:72:61:71:73:61:71:d4:
c7:4f:0f:66:40:a5:f9:fe:5e:a5:87:77:36:50:7b:
d2:33:f9:e0:61:fb:b5:8e:08:b7:73:a1:7d:1d:0d:
da:f7:3e:47:69:61:01:ff:c4:5a:d9:b0:f8:01:05:
eb:5e:c4:13:2a:03:da:9a:71:52:11:b6:22:ef:05:
67:53:37:46:03:2f:01:e3:c5:fe:7f:98:12:48:36:
0c:d8:bf:70:fd:53:03:8c:ab:aa:7c:44:b7:96:5b:
13:7d:5e:33:b4:38:ba:14:bc:8e:ab:e4:98:f4:f3:
69:10:96:58:62:0c:13:65:8d:33:f5:ec:d8:39:ce:
4a:9e:95:4a:61:b9:f5:0c:6d:1c:4a:e3:2b:28:dc:
b7:cf:ec:36:a6:c7:3e:31:32:a7:fa:d7:5b:9e:ec:
5a:ba:88:ce:c2:09:93:e3:f2:22:77:34:c8:4b:39:
5c:a4:db:0a:33:ab:07:d5:95:bc:b1:b8:de:dd:8f:
aa:29:89:71:3f:3f:98:69:0a:17:1a:67:14:1b:00:
58:88:ad:11:d5:21:79:eb:1c:b5:df:fd:0c:be:51:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:66:4B:AD:7A:AD:B4:88:C1:93:10:49:50:22:CA:09:92:D8:F2
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c1:35:31:e2:3c:f9:2c:5e:63:40:1d:e9:eb:1d:cf:7b:83:
91:42:a8:f7:f6:ce:59:bf:81:bb:5b:df:c6:a2:bd:01:22:a6:
b4:41:79:ac:1f:91:05:54:9f:e9:53:24:b5:a8:11:fc:82:ca:
39:fe:66:a4:44:60:cb:fb:e5:5e:d5:6b:2e:9b:16:0f:a5:93:
95:ce:cb:79:5a:22:08:c3:9d:09:0f:2c:53:3f:10:bc:8c:54:
e3:32:51:20:f4:57:03:ba:58:49:75:6b:d4:5e:ed:98:1e:a2:
e1:25:cd:1a:7d:35:b1:ce:6f:82:d8:2f:7e:78:33:2a:9e:1e:
01:58:63:58:9d:3c:f3:fe:b9:eb:9f:9b:7c:3f:ae:67:68:57:
2c:a8:54:bb:3c:e9:74:16:9e:fe:3c:9c:ff:42:00:84:eb:7c:
b6:61:c2:42:27:b1:76:c7:a7:7c:13:f4:16:1a:b3:3c:55:0a:
6f:44:79:da:ab:d4:29:b0:2c:75:14:47:21:e1:99:44:75:7e:
9b:79:89:4f:00:62:40:2c:50:e9:90:e3:63:68:87:3b:30:d6:
59:4c:4e:07:69:6c:79:b2:37:66:ec:c1:0f:4f:0c:3c:27:e7:
b8:89:b7:e8:98:a6:c2:d2:fe:14:8c:35:9a:35:e0:0d:57:91:
20:c4:13:d6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe36sHJcKaw9IL4OYMPwZebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzQ3YjE4ZGI4MzBmM2ViZTMzODZmYzlmYzhkYTk1ZDkz
MjdhZDgwHhcNMjUwNjI4MTkwMTQ0WhcNMjUwNjI5MTkwMTQ0WjAzMTEwLwYDVQQD
EyhhN2QzNjY0YmFkN2FhZGI0ODhjMTkzMTA0OTUwMjJjYTA5OTJkOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTltlfZ5aYbb15cKkh3NyuNzzCj2
NnEZVxGMyg0OpRP99HWqlnJhcXNhcdTHTw9mQKX5/l6lh3c2UHvSM/ngYfu1jgi3
c6F9HQ3a9z5HaWEB/8Ra2bD4AQXrXsQTKgPamnFSEbYi7wVnUzdGAy8B48X+f5gS
SDYM2L9w/VMDjKuqfES3llsTfV4ztDi6FLyOq+SY9PNpEJZYYgwTZY0z9ezYOc5K
npVKYbn1DG0cSuMrKNy3z+w2psc+MTKn+tdbnuxauojOwgmT4/IidzTISzlcpNsK
M6sH1ZW8sbje3Y+qKYlxPz+YaQoXGmcUGwBYiK0R1SF56xy13/0MvlGvEwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKfTZkuteq20iMGTEElQIsoJktjyMB8GA1UdIwQY
MBaAFPt0exjbgw8+vjOG/J/I2pXZMnrYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zUjdHTnVERHo2LU00YjhuOGphbGRreWV0Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvZjJmOWVmLWQ2N2YtNDk0Yy1iNzJk
LWJiZjQ5Yzc3YWYzOC8xLzEtM1I3R051RER6Ni1NNGI4bjhqYWxka3lldGcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJjL2YyZjllZi1kNjdmLTQ5NGMtYjcyZC1iYmY0OWM3N2Fm
MzgvMS8xLTNSN0dOdUREejYtTTRiOG44amFsZGt5ZXRnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcE1
MeI8+SxeY0Ad6esdz3uDkUKo9/bOWb+Bu1vfxqK9ASKmtEF5rB+RBVSf6VMktagR
/ILKOf5mpERgy/vlXtVrLpsWD6WTlc7LeVoiCMOdCQ8sUz8QvIxU4zJRIPRXA7pY
SXVr1F7tmB6i4SXNGn01sc5vgtgvfngzKp4eAVhjWJ088/6565+bfD+uZ2hXLKhU
uzzpdBae/jyc/0IAhOt8tmHCQiexdsenfBP0FhqzPFUKb0R52qvUKbAsdRRHIeGZ
RHV+m3mJTwBiQCxQ6ZDjY2iHOzDWWUxOB2lsebI3ZuzBD08MPCfnuIm36JimwtL+
FIw1mjXgDVeRIMQT1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:32 2025 by rpki-client