Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: DdN8vyv4TPWxszRuhyTLtXM6QVAFqOBzEeZqD/80L64=
Subject key identifier: E8:AA:1B:90:48:DB:6E:04:88:01:7C:FE:EF:70:9C:44:2B:9E:07:7F
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 0198496606CF8A2D0BE226530E51B6BCFFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:19 +0000
Manifest this update: Sun 27 Jul 2025 01:01:19 +0000
Manifest next update: Mon 28 Jul 2025 01:01:19 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: HEf3/SDumaLwO4yBCR5j2koSt/zeE8D5zqaimhEEbt8=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:06:cf:8a:2d:0b:e2:26:53:0e:51:b6:bc:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Jul 27 01:01:19 2025 GMT
Not After : Jul 28 01:01:19 2025 GMT
Subject: CN=e8aa1b9048db6e0488017cfeef709c442b9e077f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:25:42:d2:62:e5:3c:bc:11:97:1e:d6:15:
b8:ca:a2:ea:ab:94:ec:90:fd:46:c9:82:af:4c:98:
04:c5:ae:53:6e:76:10:2f:3a:e6:b0:4c:ea:7a:71:
a4:51:c0:31:17:d0:9b:bc:14:a3:a9:92:ac:39:b5:
59:62:3d:6b:ed:f1:df:59:e0:45:f7:b5:0d:26:d7:
ff:6f:2d:bd:03:b4:f9:03:0f:f9:a2:31:db:ed:25:
63:0a:7f:25:8b:c4:2c:63:1e:67:12:b8:29:7a:ea:
c2:18:31:1e:09:5f:da:9f:2e:cf:07:e4:0d:39:35:
f9:24:e8:cb:bb:89:d1:e5:2d:d1:76:df:c7:98:e5:
d5:6f:dc:62:d7:25:08:4e:28:24:43:dc:86:c3:2a:
5c:2a:ff:b3:47:9b:ec:86:17:ea:c2:98:48:84:a6:
dc:54:38:80:36:dc:2b:c1:54:d3:06:87:dd:fe:95:
45:b5:01:5b:14:95:c0:0c:46:4b:88:84:dd:4c:8e:
eb:02:53:8f:d9:62:51:ba:28:89:6a:8f:66:00:4d:
0e:1a:91:75:4a:47:ae:3a:c1:1a:00:02:27:76:d9:
a2:e6:79:62:2e:fe:96:6c:71:d1:23:11:62:db:11:
c6:e6:8c:69:b2:57:11:67:93:12:4b:01:af:e3:4a:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:1B:90:48:DB:6E:04:88:01:7C:FE:EF:70:9C:44:2B:9E:07:7F
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e3:99:66:84:26:aa:45:57:e4:55:36:ab:af:7d:50:16:26:
84:c6:1b:46:08:2f:bb:d0:47:58:3d:37:f0:34:95:93:ae:e8:
00:84:67:de:da:f2:75:b6:f1:79:f0:6e:86:66:ea:93:38:db:
74:49:fc:ec:19:9f:ad:fb:2d:d5:2f:fa:09:41:e1:bf:ef:0a:
67:88:02:5a:d3:db:f7:82:ff:34:c0:1c:8c:f5:b2:eb:f8:5a:
01:10:84:80:6c:66:a7:8c:bc:38:1b:16:5d:79:a4:34:57:55:
38:72:fc:e3:e0:8e:e7:23:8a:44:4f:61:1b:f8:67:d4:ab:ac:
8c:a5:0e:02:41:b0:7e:dd:55:f1:fb:78:e8:41:e3:a9:d4:ea:
57:ac:5f:be:80:7e:64:99:a4:51:0e:20:7f:aa:69:37:58:1d:
10:e4:53:f6:5e:e0:a2:d0:d7:33:15:f0:3f:5b:be:9b:1f:d8:
be:db:a1:82:ec:39:03:4a:7e:fa:44:2e:af:56:69:83:69:3c:
9d:ae:cb:52:22:cd:0f:ef:a5:10:54:51:22:1c:b3:a6:1d:ac:
45:9f:38:88:b6:24:33:77:04:b3:9b:87:72:96:87:ff:d9:32:
d4:07:c0:01:37:d5:cf:52:79:82:80:2a:33:94:fa:31:7b:35:
af:a7:87:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:18 2025 by rpki-client