Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: SewFsn+nzFDSdomD9xXoTN5MtqYiTRGdrVzVbeqVMxY=
Subject key identifier: E5:47:4C:D7:07:06:DC:60:97:48:EC:92:EA:FD:42:D3:C0:C1:45:75
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 019931FF370517A04CA758F45009E36DE981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1682
Signing time: Wed 10 Sep 2025 05:00:33 +0000
Manifest this update: Wed 10 Sep 2025 05:00:33 +0000
Manifest next update: Thu 11 Sep 2025 05:00:33 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: q6n+BBtOw4bCYynZywkia9skZxCvtkdWxOMgcJFD2P4=)
2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:37:05:17:a0:4c:a7:58:f4:50:09:e3:6d:e9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Sep 10 05:00:33 2025 GMT
Not After : Sep 11 05:00:33 2025 GMT
Subject: CN=e5474cd70706dc609748ec92eafd42d3c0c14575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:0d:92:a7:43:ff:e3:96:f9:d5:44:65:cb:
e7:29:2c:0a:b5:db:67:da:3f:d3:57:ae:ee:60:3d:
20:35:39:4c:1d:e2:a1:36:a2:8c:90:8d:38:69:6e:
e9:d6:9a:77:19:d3:f4:69:36:91:0c:7e:56:bc:47:
15:d2:34:10:96:e4:eb:83:b3:74:a7:8a:f8:b3:60:
3b:00:92:61:6f:61:b9:11:6e:29:a3:f9:26:54:0c:
f9:21:95:b1:94:79:8c:27:4e:6e:d8:d5:ed:47:63:
a2:67:d0:34:45:ca:c2:44:43:91:86:13:45:93:f5:
da:bd:b6:ed:ad:1c:a0:12:8b:6b:1e:78:f4:e7:9f:
ca:c4:c9:ae:06:7a:e4:e2:b1:7f:cf:8f:02:29:cb:
2a:b6:c7:b2:7e:7b:54:f6:38:07:d8:76:66:58:59:
fb:1f:82:46:bd:05:0a:7c:3b:88:34:8d:97:10:32:
34:64:9e:c9:ab:ed:ee:e4:71:0e:e8:69:f1:bf:73:
2f:a4:f6:8c:44:96:97:f7:c2:d1:61:ef:d9:49:dd:
be:97:83:cf:82:da:f9:12:1d:e4:92:21:e3:2e:08:
af:84:3e:0d:99:d4:94:58:47:b2:af:25:f3:5b:10:
46:a7:4c:ad:7d:9f:d4:76:b9:55:af:8c:07:35:f2:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:47:4C:D7:07:06:DC:60:97:48:EC:92:EA:FD:42:D3:C0:C1:45:75
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:d4:94:1a:d3:5a:7f:fd:df:c0:6f:9f:69:43:65:d7:16:
3f:91:03:28:0d:5f:51:f6:d3:db:86:14:65:ef:f5:61:fc:8d:
d0:92:33:f2:a2:9c:14:4d:59:f6:ab:44:d1:98:3e:94:1e:69:
eb:60:81:b3:3c:fc:e3:79:1b:c7:c2:3c:a2:67:af:b6:f9:e1:
8f:bd:e3:72:2a:11:ea:dd:06:1f:7e:1b:a9:c4:fa:21:21:58:
c3:7f:0b:4d:df:1a:7a:0d:79:ef:e9:b9:78:31:16:14:0d:4d:
e1:e0:0d:0d:24:0a:53:a5:8b:7f:1c:1f:ef:41:87:c0:b5:41:
18:19:dd:d0:f1:43:39:0c:f1:26:cc:f5:0a:80:c1:04:55:e0:
65:a1:66:21:af:6d:45:70:99:d2:0b:27:97:e0:59:c9:40:a3:
af:22:c2:dd:20:48:df:00:ba:a7:23:f8:48:86:3f:77:a5:65:
8a:41:4b:4c:45:bb:37:6a:b7:19:85:56:a9:62:16:cc:3b:b2:
04:a8:ae:57:17:3a:55:8c:60:85:5a:5e:94:5e:c9:b0:6c:6c:
ef:06:85:a6:50:3b:60:6f:0a:c7:f8:41:ba:a9:16:97:25:48:
5b:04:7e:b8:e4:f2:74:72:7e:fe:71:37:94:30:c0:49:2c:8f:
db:0a:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:44:16 2025 by rpki-client