Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier: hBhZqeuUXog4P2Nb+vEMpFeyaKNz44VV0tyazzmPBdI=
Subject key identifier: 49:F1:10:E5:3F:42:70:1A:2F:23:A1:9D:73:CE:BF:9B:97:C6:AE:9B
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer: /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial: 0197B6A1A3692DFEF1F8AA22C760BA559C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number: 1106
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: O5zeEOLIoJtIdyQnryM/tQcTYJIgsRhQT3N0BpFpE4s=)
2: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (hash: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a3:69:2d:fe:f1:f8:aa:22:c7:60:ba:55:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=49f110e53f42701a2f23a19d73cebf9b97c6ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:97:27:09:45:04:89:9f:5a:c6:35:c1:96:7e:
6c:ec:a6:50:05:b4:9d:e3:19:6f:e8:13:ad:42:b6:
f6:b1:15:6f:55:86:55:2e:d7:c4:3e:ba:bc:9d:b8:
b1:1d:fe:e2:a1:62:bf:ba:cf:ba:e9:52:44:e9:d4:
52:b4:15:d5:42:e9:2b:96:4e:41:ca:67:76:99:e0:
c0:19:03:b4:d2:8f:f5:c4:e2:95:90:bf:15:eb:9f:
b5:92:d4:3a:09:a1:01:37:01:28:df:7b:1e:c8:23:
04:0d:e7:27:63:2d:35:42:08:9d:f0:89:2e:49:dd:
4a:19:3e:bd:c8:14:10:5e:54:76:20:8a:8c:1f:11:
b5:dd:74:12:67:1a:05:14:74:03:e8:98:aa:88:57:
e7:bf:e8:17:0c:3f:55:3f:c1:62:d7:9c:2a:a3:f3:
8f:cf:cd:4c:8d:59:8d:ea:5d:ae:c7:d3:02:03:e6:
4a:bc:2d:f8:23:cd:b6:24:55:74:58:72:b0:46:af:
3f:9b:68:6f:c9:18:42:a9:6b:c0:be:92:3e:6a:aa:
9e:0d:f6:a8:e1:f9:6e:e7:1b:2f:b1:59:dd:ae:b5:
72:a1:35:d1:aa:21:70:98:8e:f6:69:15:01:84:6d:
90:d8:06:da:fd:6c:33:41:e7:70:d4:af:f5:3f:ba:
17:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F1:10:E5:3F:42:70:1A:2F:23:A1:9D:73:CE:BF:9B:97:C6:AE:9B
X509v3 Authority Key Identifier:
keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a4:88:03:53:85:3a:bd:aa:c1:14:d9:20:77:2a:dd:39:eb:
e4:ee:6d:71:6a:39:2b:32:be:5e:cc:bf:7f:c9:87:a0:57:fa:
2b:8c:3a:c0:6e:cb:b4:2d:c1:57:2b:7b:7c:92:96:73:e4:24:
13:ff:25:08:50:d4:da:1a:f7:a6:ca:9f:7f:c1:bb:06:73:d0:
28:68:b5:2b:d7:b2:88:12:8c:0f:e5:2c:66:65:04:1e:b1:4a:
87:29:f4:69:25:b6:9d:bc:97:3d:8b:d7:a3:c4:21:e3:7b:4a:
65:3b:bf:70:a6:a7:64:4a:c7:6a:9d:f5:c4:5c:ca:ae:21:25:
fe:58:6e:db:3d:3c:5d:1f:a3:67:95:39:54:d4:92:ea:6c:5f:
9f:2e:72:c5:9e:21:bd:3b:c1:5c:25:56:7e:8e:b8:ce:b1:cc:
38:fc:16:72:d9:3b:bc:fc:76:b7:e1:bd:24:af:67:94:69:d1:
45:aa:61:d2:d6:30:f4:0e:b4:cf:7d:70:31:87:17:15:a0:0e:
ba:62:b5:ba:6e:cb:0e:1c:54:3c:34:b7:92:b6:c6:49:0b:cf:
a0:9d:ec:6a:37:7d:56:74:24:83:e4:ed:eb:e4:cf:c6:d4:68:
60:d1:da:f6:ac:c0:f0:61:fc:cb:4d:43:c0:bc:cf:cf:bf:bc:
40:91:d1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oaNpLf7x+Koix2C6VZxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWQzYjhiMDQ0ZjFkMzVmZjI3MTkwYjc1NzVmMzA4MDZi
MTEzMjcwHhcNMjUwNjI4MTMwMjE1WhcNMjUwNjI5MTMwMjE1WjAzMTEwLwYDVQQD
Eyg0OWYxMTBlNTNmNDI3MDFhMmYyM2ExOWQ3M2NlYmY5Yjk3YzZhZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJcnCUUEiZ9axjXBln5s7KZQBbSd
4xlv6BOtQrb2sRVvVYZVLtfEPrq8nbixHf7ioWK/us+66VJE6dRStBXVQukrlk5B
ymd2meDAGQO00o/1xOKVkL8V65+1ktQ6CaEBNwEo33seyCMEDecnYy01Qgid8Iku
Sd1KGT69yBQQXlR2IIqMHxG13XQSZxoFFHQD6JiqiFfnv+gXDD9VP8Fi15wqo/OP
z81MjVmN6l2ux9MCA+ZKvC34I822JFV0WHKwRq8/m2hvyRhCqWvAvpI+aqqeDfao
4flu5xsvsVndrrVyoTXRqiFwmI72aRUBhG2Q2Aba/WwzQedw1K/1P7oXKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnxEOU/QnAaLyOhnXPOv5uXxq6bMB8GA1UdIwQY
MBaAFNWdO4sETx01/ycZC3V18wgGsRMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOTQzZTktZTAzYi00ZDdiLThjODkt
NWIzNzMyZjQ4MDgxLzEvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mOTQzZTktZTAzYi00ZDdiLThjODktNWIzNzMyZjQ4MDgx
LzEvMVowN2l3UlBIVFhfSnhrTGRYWHpDQWF4RXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6SIA1OF
Or2qwRTZIHcq3Tnr5O5tcWo5KzK+Xsy/f8mHoFf6K4w6wG7LtC3BVyt7fJKWc+Qk
E/8lCFDU2hr3psqff8G7BnPQKGi1K9eyiBKMD+UsZmUEHrFKhyn0aSW2nbyXPYvX
o8Qh43tKZTu/cKanZErHap31xFzKriEl/lhu2z08XR+jZ5U5VNSS6mxfny5yxZ4h
vTvBXCVWfo64zrHMOPwWctk7vPx2t+G9JK9nlGnRRaph0tYw9A60z31wMYcXFaAO
umK1um7LDhxUPDS3krbGSQvPoJ3sajd9VnQkg+Tt6+TPxtRoYNHa9qzA8GH8y01D
wLzPz7+8QJHRaw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:11 2025 by rpki-client