Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier: lpY7SBrnDjbL/gWq2wOmabgqrTEdTui5VTXsj6/SzqY=
Subject key identifier: 06:68:B5:C6:5E:E2:17:A1:34:C2:07:C2:F7:9A:34:BB:F3:B2:4A:E0
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 0197B745582D44155E185B0784345A004458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: +PoJQW+T8pLmXr4wtJAh0NQdNYt98sVQuAmpho8RJdk=)
2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:58:2d:44:15:5e:18:5b:07:84:34:5a:00:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=0668b5c65ee217a134c207c2f79a34bbf3b24ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:d7:5e:a9:d4:1a:59:de:cd:cb:28:d0:34:
8e:54:71:d4:7f:78:2d:1b:08:93:45:0c:d7:6c:a0:
d5:51:43:41:2c:54:f6:81:0b:fa:8e:77:c8:f1:93:
43:5b:16:4e:10:7f:c8:00:2e:13:a4:7d:90:88:ae:
46:a9:d6:15:3c:d6:13:d9:9d:95:3c:23:f4:ff:2b:
b3:8b:b9:4f:37:44:84:c4:64:f5:47:9b:97:c0:04:
e4:26:21:66:80:51:cf:f4:39:4b:e7:2c:93:2b:50:
a1:d7:3f:30:e6:a8:07:7d:f1:13:41:72:f1:16:44:
11:1f:c7:8c:97:75:c5:40:b8:36:58:49:c0:55:66:
98:63:fd:9e:fd:b3:7f:c3:ad:e2:2f:bf:53:18:80:
24:0d:cb:31:0a:8c:4b:f3:14:6f:96:83:f6:44:76:
18:3e:a9:1b:54:7b:02:74:37:4b:53:2d:9f:07:11:
79:9c:a0:9d:88:c8:73:86:bf:9c:ab:01:6f:60:69:
13:2c:67:77:6d:d0:21:f7:d2:d3:cf:5f:07:62:74:
40:c4:22:b2:c5:ef:34:53:43:33:80:c4:4f:65:80:
38:40:b5:32:fe:97:ad:e4:5f:17:ed:b0:1f:1b:c0:
db:51:51:6e:e5:e6:5c:be:81:bc:cd:1f:02:10:91:
e6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:68:B5:C6:5E:E2:17:A1:34:C2:07:C2:F7:9A:34:BB:F3:B2:4A:E0
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8a:ef:ac:2d:3e:77:b7:63:b5:48:27:34:5e:6f:52:47:5a:
87:ef:bc:fc:67:93:0d:c1:81:c9:89:1e:c9:d7:4f:da:94:a7:
f8:5c:cf:57:f4:a1:3e:af:a8:fb:10:4e:fb:e4:57:e1:f1:ec:
46:58:76:d4:31:2b:9b:bb:eb:ef:bc:58:ae:b5:22:8b:55:f1:
70:96:49:a1:21:1e:29:49:af:33:91:7f:14:92:98:11:76:fb:
cd:47:81:3e:d0:e9:a8:82:dc:30:b4:95:b8:bb:a7:da:74:2e:
1d:4d:c9:69:66:21:44:6e:3f:e4:1d:1f:7f:2a:85:e8:b2:c4:
b1:fe:4d:a2:6d:33:fa:93:2e:d7:4d:40:0d:d1:a3:16:e0:83:
b2:1d:cd:0e:b4:71:dc:08:cc:0f:8a:fe:24:2e:cb:32:21:84:
1e:38:79:0d:28:d9:b7:84:18:2f:b1:c9:19:8a:de:f8:de:8e:
da:95:96:c8:b9:06:30:dd:eb:d4:eb:1b:d9:4b:2d:45:d1:89:
6d:12:4e:d6:cb:07:d5:6a:78:88:fe:f9:ef:a7:ad:3a:0e:7c:
0c:42:58:72:f9:be:f5:02:64:18:84:e9:8b:43:97:25:5f:d1:
88:9b:d9:69:6b:cc:f2:c8:eb:bf:ce:17:3a:66:96:7a:be:54:
b9:0b:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:51 2025 by rpki-client