Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier: GUqkH6+WPK5TZ5EOPPY6jYHx6gM+MYJyCV6cEYqo7F8=
Subject key identifier: A4:85:8E:F6:59:8A:0C:71:3B:30:6D:6A:69:CC:7F:30:56:24:36:C7
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 01974D0E167A0D694A39B15CDCB028FC9D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:00:58 +0000
Manifest this update: Sun 08 Jun 2025 01:00:58 +0000
Manifest next update: Mon 09 Jun 2025 01:00:58 +0000
Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: 4ko0FxRVhImFfX2KbEarCmu+bMsYOTrRYOpkG1wTZN8=)
2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:16:7a:0d:69:4a:39:b1:5c:dc:b0:28:fc:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jun 8 01:00:58 2025 GMT
Not After : Jun 9 01:00:58 2025 GMT
Subject: CN=a4858ef6598a0c713b306d6a69cc7f30562436c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:c4:e1:71:5c:7f:f1:e6:91:a3:20:f9:bf:
67:b9:db:02:bf:a5:71:4b:e3:4e:6c:90:ce:b1:87:
d9:df:75:8b:8f:84:af:5e:3a:1b:8e:86:36:a8:c2:
62:66:91:cf:e1:42:7f:f1:49:7d:d0:c5:24:a3:68:
e2:5c:a9:5b:f5:36:42:ef:a5:dc:f7:5a:64:ae:76:
10:82:60:66:c6:85:3c:08:e1:8b:42:e8:7c:44:81:
de:5a:e6:1b:05:ec:bf:d5:3a:c4:c4:37:13:bd:1d:
76:bc:68:25:b1:5c:54:77:f9:98:03:11:df:1f:32:
b8:52:2e:8a:14:e9:f8:ac:a8:a2:a7:c2:bb:94:d5:
e3:1e:be:ef:a3:9e:39:2f:28:93:0e:b3:e4:f8:4e:
20:bf:40:23:e7:5c:af:6b:52:3a:80:ce:53:2e:ed:
12:d3:08:33:74:20:fe:64:a4:cf:12:a4:79:0a:6b:
ae:20:65:a9:82:7f:0d:7b:bc:af:c3:4f:00:4a:27:
db:a6:e8:2d:1f:b6:d2:06:fc:4f:86:31:c6:ca:e1:
55:98:7a:3e:75:ab:7e:52:f7:da:c2:6f:a5:b9:09:
e8:d5:66:91:20:11:7f:90:f4:08:42:21:0c:6a:0d:
d7:0f:44:17:3a:90:f9:7f:db:78:08:f1:86:ce:b1:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:8E:F6:59:8A:0C:71:3B:30:6D:6A:69:CC:7F:30:56:24:36:C7
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:1b:c5:22:67:78:78:78:88:e7:de:f2:73:79:dc:5f:e2:
77:08:81:a1:2f:ae:50:5f:2c:07:ab:df:2e:8d:a4:08:6d:08:
ae:52:61:21:84:b5:89:f4:c4:e5:79:fb:56:e9:d2:4c:ab:f8:
07:05:f7:41:71:1f:c5:d2:6f:68:17:2e:d9:3e:09:11:e0:da:
97:ba:a0:a7:17:6a:05:ac:5c:36:d3:eb:1c:da:11:ff:c5:24:
15:bb:58:89:b1:e5:f6:49:24:89:3d:c9:08:7c:89:19:47:b2:
a8:72:f9:03:30:8e:62:48:0c:d8:40:c4:16:3a:fc:47:86:14:
c9:4b:2b:65:df:35:cd:d9:12:47:7c:fb:98:36:f1:4c:2a:ba:
01:92:38:c7:1a:7b:0d:4b:d6:e1:1f:9e:fe:05:d0:33:f0:87:
8b:72:74:59:79:04:de:29:19:47:56:a3:28:93:44:d7:65:ef:
6f:80:8a:da:1c:cb:f9:23:13:16:ba:00:7e:50:ed:23:ea:cf:
2e:b9:8d:9d:51:8b:7a:61:9a:d5:3f:2f:3c:85:31:64:04:5c:
53:81:57:c1:87:02:03:55:c7:8a:b4:40:be:1f:68:c1:2b:d8:
67:2a:b1:0e:06:60:29:05:61:91:e6:87:4f:57:67:ce:59:07:
d5:23:e0:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDhZ6DWlKObFc3LAo/J0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3M2U4MzE0NmE0Mzg2OWY2NTc0NTFlNzZkMGEzMDVmMTVh
N2FlZTkwHhcNMjUwNjA4MDEwMDU4WhcNMjUwNjA5MDEwMDU4WjAzMTEwLwYDVQQD
EyhhNDg1OGVmNjU5OGEwYzcxM2IzMDZkNmE2OWNjN2YzMDU2MjQzNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvE4XFcf/HmkaMg+b9nudsCv6Vx
S+NObJDOsYfZ33WLj4SvXjobjoY2qMJiZpHP4UJ/8Ul90MUko2jiXKlb9TZC76Xc
91pkrnYQgmBmxoU8COGLQuh8RIHeWuYbBey/1TrExDcTvR12vGglsVxUd/mYAxHf
HzK4Ui6KFOn4rKiip8K7lNXjHr7vo545LyiTDrPk+E4gv0Aj51yva1I6gM5TLu0S
0wgzdCD+ZKTPEqR5CmuuIGWpgn8Ne7yvw08ASifbpugtH7bSBvxPhjHGyuFVmHo+
dat+Uvfawm+luQno1WaRIBF/kPQIQiEMag3XD0QXOpD5f9t4CPGGzrHB3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSFjvZZigxxOzBtamnMfzBWJDbHMB8GA1UdIwQY
MBaAFNc+gxRqQ4afZXRR520KMF8Vp67pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDkt
ZDNiMjdhMDIyNWIwLzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDktZDNiMjdhMDIyNWIw
LzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH28bxSJn
eHh4iOfe8nN53F/idwiBoS+uUF8sB6vfLo2kCG0IrlJhIYS1ifTE5Xn7VunSTKv4
BwX3QXEfxdJvaBcu2T4JEeDal7qgpxdqBaxcNtPrHNoR/8UkFbtYibHl9kkkiT3J
CHyJGUeyqHL5AzCOYkgM2EDEFjr8R4YUyUsrZd81zdkSR3z7mDbxTCq6AZI4xxp7
DUvW4R+e/gXQM/CHi3J0WXkE3ikZR1ajKJNE12Xvb4CK2hzL+SMTFroAflDtI+rP
LrmNnVGLemGa1T8vPIUxZARcU4FXwYcCA1XHirRAvh9owSvYZyqxDgZgKQVhkeaH
T1dnzlkH1SPg0A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:21:13 2025 by rpki-client