Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier: /PaK+RcXlsOk4yytMronqgfFkK3GDTzQNbX+K1Vf0H4=
Subject key identifier: 06:EE:AA:B7:FB:1A:38:FC:81:9D:B4:34:E6:DB:13:8F:5C:93:84:17
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 01984A0A313CAE5BA94F9C32623AD2C71B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:38 +0000
Manifest this update: Sun 27 Jul 2025 04:00:38 +0000
Manifest next update: Mon 28 Jul 2025 04:00:38 +0000
Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: TBSXclfaQ1P91ikVJ7VqxObTf6PtVEUK+Ez7j+7QeCc=)
2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:31:3c:ae:5b:a9:4f:9c:32:62:3a:d2:c7:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jul 27 04:00:38 2025 GMT
Not After : Jul 28 04:00:38 2025 GMT
Subject: CN=06eeaab7fb1a38fc819db434e6db138f5c938417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:3e:d1:71:11:42:eb:a4:26:8a:0f:78:ee:
a9:63:86:15:72:24:9c:04:f9:c5:9a:8c:f7:47:ce:
49:eb:dc:98:55:bd:fa:0f:3f:f6:47:44:4d:0d:8f:
49:7c:e1:3d:77:a3:a5:29:87:a7:da:a6:7e:f4:3c:
b4:b7:9d:a4:b2:f5:32:09:cd:08:d1:cd:55:10:92:
a5:15:ab:aa:d5:98:b6:46:71:47:92:4e:3c:2c:d1:
63:ee:40:1a:4d:6e:ac:ef:a6:3b:d0:7e:3c:09:96:
77:41:94:b8:8a:3a:73:9c:04:56:c3:44:be:73:89:
54:50:29:95:f0:b8:e1:57:d0:d9:ef:23:50:df:0d:
f7:dd:4e:be:ba:2a:00:ab:21:92:91:6b:75:8d:64:
10:7d:7b:ac:2a:8a:7c:c3:35:6b:44:3f:bb:4c:6e:
cc:a9:ff:c3:c2:2e:0e:d6:66:1d:71:c9:0f:48:56:
63:98:86:11:8b:03:c8:e2:6d:38:6c:0e:7b:ec:a1:
3a:55:a8:a3:f8:cc:08:6d:69:27:e8:dd:41:90:ad:
2b:a5:b5:65:dd:8e:ab:9b:03:5d:f8:66:9f:f8:43:
99:04:82:b7:04:22:bc:3d:b2:ad:62:52:82:ee:d0:
37:69:ab:b6:d2:17:3d:bf:a5:fe:26:33:a1:26:3f:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:AA:B7:FB:1A:38:FC:81:9D:B4:34:E6:DB:13:8F:5C:93:84:17
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:85:62:b8:f3:7c:ef:72:f4:f0:1c:39:65:59:b3:0a:e8:
e5:64:54:f5:af:db:fb:cc:1d:d4:50:08:ce:95:52:f7:b3:33:
1b:df:9b:69:60:7b:dc:9c:fb:e9:09:a1:b0:06:c0:7f:6a:0b:
39:a9:e9:59:fc:95:a5:2b:cd:e8:95:44:0e:3c:67:b8:72:93:
27:8a:70:a7:f3:53:43:6a:d0:e4:79:00:1f:dc:d6:1f:4c:e8:
73:43:42:1c:93:52:db:af:c8:df:39:b2:80:ec:9d:b9:f0:45:
14:59:d1:d6:ba:2d:01:2b:c7:8d:7a:67:ec:40:f0:be:06:cc:
d3:e6:5e:ef:83:7d:45:38:63:ad:d7:20:fb:a9:79:11:b4:1f:
b2:79:ad:24:d1:26:8b:74:35:2b:71:16:d5:c9:33:d3:67:c4:
27:0f:7e:60:11:34:de:29:35:bc:8c:55:1d:55:7d:91:90:f8:
b4:30:5e:a2:a6:85:56:94:76:08:c0:26:d7:31:58:b0:83:ff:
f2:9a:5b:8c:34:4f:35:41:20:44:a0:ba:5f:b1:b0:5b:a6:36:
ca:59:4e:a7:d7:0e:b7:c2:df:99:b0:96:30:f3:f8:40:4d:76:
b3:3e:11:dd:84:1e:db:4c:5b:8e:43:61:74:1f:35:fc:c3:5f:
c0:c9:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:27 2025 by rpki-client