Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: EfqYqS0D46LFlt1HcZnxoDHN0R5l/RcaJAuwBFDf6ss=
Subject key identifier: D6:D0:CD:92:F2:39:96:55:0A:0A:20:39:1E:02:54:17:A2:8E:2D:74
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 0196C193CF0E1986343898907CE1610B8FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 0E6D
Signing time: Sun 11 May 2025 23:00:11 +0000
Manifest this update: Sun 11 May 2025 23:00:11 +0000
Manifest next update: Mon 12 May 2025 23:00:11 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: 9Vmh8GN3BRhQvc8GUwYjvNkcue64UjgnXVHy3pjsaJM=)
2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:cf:0e:19:86:34:38:98:90:7c:e1:61:0b:8f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: May 11 23:00:11 2025 GMT
Not After : May 12 23:00:11 2025 GMT
Subject: CN=d6d0cd92f23996550a0a20391e025417a28e2d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:59:d2:79:5a:08:cf:ca:14:45:ac:13:1f:
a1:86:28:d6:57:45:1f:f5:3c:dd:87:26:8c:2b:1c:
81:df:e8:2e:3c:24:ac:ee:8f:f7:69:5f:97:45:83:
06:ba:dc:9f:50:c2:e6:61:19:41:ab:e7:9d:6d:62:
60:77:1e:dc:77:4c:7a:48:17:a8:9e:f2:5e:83:9f:
c1:8f:7b:f1:28:3e:c8:e3:0a:fa:0b:18:80:cb:09:
29:9a:9f:85:fb:3f:c2:ab:e2:d9:75:4f:33:c9:e8:
99:5f:ae:be:31:7d:ab:3f:c2:69:a2:e3:37:ad:ca:
93:dd:8e:75:1d:c5:a7:01:e6:62:fd:27:10:34:71:
4d:98:7e:7d:84:56:53:92:56:1d:90:82:21:b4:80:
d5:ca:e1:4d:29:cc:24:f1:7d:5d:ab:13:39:2d:1d:
24:38:7d:a8:7a:a9:7d:26:50:43:0f:35:83:b9:57:
e5:d2:6d:8a:3d:cd:5d:ce:db:f1:9c:df:69:2f:8a:
15:be:dc:23:c6:5c:a0:b6:17:55:d8:d7:32:79:30:
77:a5:b6:da:eb:47:54:ca:4a:66:cb:53:40:7c:0f:
5d:af:63:d3:50:75:de:56:65:5b:f2:11:2b:64:ee:
b6:50:fd:ae:7e:e6:00:85:de:be:4a:8c:9a:55:09:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:CD:92:F2:39:96:55:0A:0A:20:39:1E:02:54:17:A2:8E:2D:74
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:c6:eb:76:d2:63:53:67:fa:8e:97:2c:ea:3f:7c:ac:51:
7e:54:5f:d9:e2:a1:5d:45:30:f3:0a:4a:49:9c:24:46:97:e6:
42:59:50:98:b1:dc:02:4a:35:59:49:f4:94:18:49:8b:f5:8f:
58:26:2e:dd:ef:6f:69:4b:75:97:61:d6:e7:4a:41:90:29:5a:
85:84:f1:68:28:b0:76:c6:21:0b:6e:88:8e:e1:75:3c:60:ce:
8b:00:b5:6b:f6:36:cc:73:de:4a:b0:e2:46:3f:7a:fa:73:51:
ba:ae:2a:2a:84:a0:97:02:6a:7a:c4:b7:07:46:1b:8b:67:8d:
8d:d6:e1:96:17:d2:b1:55:67:f8:6c:2c:d0:d7:95:db:6f:3c:
f2:85:66:d4:89:aa:4a:2f:48:22:50:35:50:6f:43:9a:29:61:
d4:96:43:1a:4d:e2:a2:36:a4:42:ca:78:37:d7:25:af:b6:cb:
be:ee:fa:06:63:c2:9b:ce:e7:bc:5e:68:f3:0e:60:1d:ec:81:
ac:f9:0e:29:f5:d5:dc:4b:72:e3:53:37:6c:9a:c7:d0:0e:c7:
a1:84:c4:dd:a0:68:b4:cb:dc:cc:3d:a3:18:a6:03:a3:d0:57:
c7:0f:c3:fb:81:04:2d:1f:0c:7e:18:d4:21:7a:ac:3b:36:89:
f8:43:09:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBk88OGYY0OJiQfOFhC4+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZWVmZjY5MDExYWQwMWExYjE3OWE2ZGQ3MGQ1OWExMTE2
ZjUxZjMwHhcNMjUwNTExMjMwMDExWhcNMjUwNTEyMjMwMDExWjAzMTEwLwYDVQQD
EyhkNmQwY2Q5MmYyMzk5NjU1MGEwYTIwMzkxZTAyNTQxN2EyOGUyZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55VZ0nlaCM/KFEWsEx+hhijWV0Uf
9TzdhyaMKxyB3+guPCSs7o/3aV+XRYMGutyfUMLmYRlBq+edbWJgdx7cd0x6SBeo
nvJeg5/Bj3vxKD7I4wr6CxiAywkpmp+F+z/Cq+LZdU8zyeiZX66+MX2rP8JpouM3
rcqT3Y51HcWnAeZi/ScQNHFNmH59hFZTklYdkIIhtIDVyuFNKcwk8X1dqxM5LR0k
OH2oeql9JlBDDzWDuVfl0m2KPc1dztvxnN9pL4oVvtwjxlygthdV2NcyeTB3pbba
60dUykpmy1NAfA9dr2PTUHXeVmVb8hErZO62UP2ufuYAhd6+SoyaVQn6/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbQzZLyOZZVCgogOR4CVBeiji10MB8GA1UdIwQY
MBaAFNbu/2kBGtAaGxeabdcNWaERb1HzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAt
NTFiMmFhNTk4MGJlLzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yMjMxZDItY2Q5YS00Y2YxLTgwZDAtNTFiMmFhNTk4MGJl
LzEvMXU3X2FRRWEwQm9iRjVwdDF3MVpvUkZ2VWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGjG63bS
Y1Nn+o6XLOo/fKxRflRf2eKhXUUw8wpKSZwkRpfmQllQmLHcAko1WUn0lBhJi/WP
WCYu3e9vaUt1l2HW50pBkClahYTxaCiwdsYhC26IjuF1PGDOiwC1a/Y2zHPeSrDi
Rj96+nNRuq4qKoSglwJqesS3B0Ybi2eNjdbhlhfSsVVn+Gws0NeV22888oVm1Imq
Si9IIlA1UG9Dmilh1JZDGk3iojakQsp4N9clr7bLvu76BmPCm87nvF5o8w5gHeyB
rPkOKfXV3Ety41M3bJrH0A7HoYTE3aBotMvczD2jGKYDo9BXxw/D+4EELR8MfhjU
IXqsOzaJ+EMJSQ==
-----END CERTIFICATE-----
Generated at Mon May 12 08:18:30 2025 by rpki-client