Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: YtyPgBZ5PExpNdUKaWhZws4M8ksRvxIfBF89/01qiU0=
Subject key identifier: EE:32:A9:79:69:0C:22:F8:6A:5E:6A:B4:6A:09:43:79:84:28:30:A8
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 01974E8E96EF12E7DA1583941EE9D4DC9361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 0EB6
Signing time: Sun 08 Jun 2025 08:00:56 +0000
Manifest this update: Sun 08 Jun 2025 08:00:56 +0000
Manifest next update: Mon 09 Jun 2025 08:00:56 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: Tt7DgiTw/cZD9g7fTQDpdyt2UDw5Gf2exGHTDyQOOkw=)
2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:96:ef:12:e7:da:15:83:94:1e:e9:d4:dc:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Jun 8 08:00:56 2025 GMT
Not After : Jun 9 08:00:56 2025 GMT
Subject: CN=ee32a979690c22f86a5e6ab46a094379842830a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:ae:1e:b1:a7:44:df:b3:27:3c:02:90:24:
e3:ba:1c:34:ad:bc:0c:26:a4:e1:eb:c6:a1:45:ba:
66:4a:a7:54:6c:dd:51:cb:2c:4b:fe:a8:b5:0b:35:
b7:55:75:f0:34:2b:9a:f4:05:67:3d:da:91:7d:c8:
45:5b:c8:ba:f8:87:ac:12:d1:35:7a:97:45:f1:43:
74:55:52:c5:35:64:72:40:03:2f:a9:47:12:27:69:
b5:15:6d:2e:2c:0a:6c:ee:5c:c3:b1:fe:c8:58:2c:
06:88:ee:9a:62:79:da:da:eb:62:b6:49:0a:42:1e:
d6:15:ac:f3:05:d2:28:77:cf:9e:3b:ff:f7:9f:83:
3b:57:44:c5:ea:e4:44:cb:59:c6:70:fa:a8:03:71:
92:d0:00:74:9e:af:6d:16:48:f8:b9:4f:a0:4d:7b:
6b:22:6b:69:14:4f:4d:8e:50:c2:65:41:7a:5d:fc:
0f:33:0d:29:e7:4d:74:36:68:5f:6a:d5:4d:5a:41:
6f:a3:ed:d1:a7:8e:3f:2f:7c:6a:94:fc:c2:5c:43:
89:54:a9:bc:e5:21:1e:4f:c7:2f:5d:60:87:8f:8a:
c5:51:28:d1:16:95:ef:e4:af:94:f7:97:2f:41:dd:
d7:d0:d1:fa:08:31:a4:bf:d5:c6:b5:4f:7b:1b:d9:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:A9:79:69:0C:22:F8:6A:5E:6A:B4:6A:09:43:79:84:28:30:A8
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:bc:c5:eb:28:b0:8c:4a:e4:7e:1e:8d:3d:a4:c8:c6:e6:
d2:8b:eb:a5:9b:a9:20:70:ba:b0:24:7c:aa:a8:f3:38:31:98:
0e:36:55:3d:f0:3a:6d:75:f2:6b:18:0b:21:7b:10:11:fa:b5:
aa:dc:2e:42:63:38:88:2f:44:43:b2:19:d6:ed:89:b1:d6:34:
f1:27:bb:86:1d:c9:20:d9:cd:3a:99:4b:c4:08:81:f5:b0:0a:
d0:fb:6c:33:89:28:61:bc:6f:29:35:d4:65:64:a7:c6:5a:a7:
2f:92:5f:58:0f:1f:b5:fb:82:d4:ce:09:08:34:8c:57:c3:6a:
9f:8b:8e:08:c1:3c:d4:b8:51:01:9b:ac:75:1b:f0:f5:2b:83:
b9:cf:5c:72:7f:fd:54:7b:82:9b:d5:4f:96:82:58:f2:66:ba:
34:ec:25:e5:f7:16:33:e7:97:d8:50:6d:a4:20:e4:75:cf:5a:
c3:1b:6a:4d:c2:7c:5a:b6:a7:e9:cc:85:ee:ea:50:c0:05:ea:
35:67:65:1e:0b:57:10:1b:b8:7e:10:17:5b:35:1e:d6:6b:85:
ac:8c:f8:f0:6f:23:d1:3e:75:68:72:f5:ea:84:23:c2:6d:91:
cb:8b:4e:5c:d8:98:4b:e0:2c:0b:78:cd:67:de:4e:3b:b9:39:
94:21:aa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:08 2025 by rpki-client