Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: eqi9PKo05ZSr6vYCeZ/M/2A4ClpO3D7tdcJuYHz+JSQ=
Subject key identifier: 66:8F:34:FA:8A:81:11:FA:D9:52:1D:58:E9:1F:6B:66:89:D2:B5:2E
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 019842874DC8904D1B3A71E64AB2A69CEA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1606
Signing time: Fri 25 Jul 2025 17:00:20 +0000
Manifest this update: Fri 25 Jul 2025 17:00:20 +0000
Manifest next update: Sat 26 Jul 2025 17:00:20 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: 0/qZQk7cCpkSnKVHVci71JJ1BTC4D4rRLdLRVkT3TV8=)
2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:4d:c8:90:4d:1b:3a:71:e6:4a:b2:a6:9c:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jul 25 17:00:20 2025 GMT
Not After : Jul 26 17:00:20 2025 GMT
Subject: CN=668f34fa8a8111fad9521d58e91f6b6689d2b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:a3:e9:ac:c0:82:69:4e:ef:93:a7:50:30:
21:db:b3:c0:4e:ab:68:27:fe:52:7c:72:63:61:4e:
29:21:b0:35:6a:82:fc:fa:e0:53:ce:e0:16:f9:62:
19:76:ca:a7:e7:d2:ec:61:4c:cb:41:f6:ff:f8:d4:
8c:4d:26:8f:8e:b7:ad:fd:c2:95:ee:5a:25:11:d0:
1b:43:6e:bb:23:b2:64:25:13:c3:74:e4:2e:48:32:
8f:8d:08:ff:16:1d:a3:39:34:27:c0:ce:93:a4:a6:
70:e9:cb:30:2e:d7:01:80:7d:b0:57:e2:31:88:67:
1f:f6:f5:4e:2e:bb:09:17:6a:18:24:a2:d0:5e:98:
86:64:93:4b:72:1c:25:e2:47:e8:69:c1:a0:84:40:
83:7d:95:59:00:10:c9:7b:a8:73:ed:44:d4:11:b1:
9e:da:6f:b4:fe:88:c0:5d:23:cd:ac:00:6a:e2:87:
48:16:b8:ea:b3:d2:3c:8e:09:2b:58:71:c4:8a:fd:
06:0c:5c:9c:53:5a:f9:f6:9b:f6:68:5f:ac:02:52:
e7:17:81:53:e7:09:4d:03:db:e5:09:29:6b:71:50:
2b:d0:f3:e6:29:b1:f3:81:d4:9f:be:9a:85:21:18:
90:8c:35:e9:94:79:b3:f9:d8:c7:1a:f8:fa:83:be:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8F:34:FA:8A:81:11:FA:D9:52:1D:58:E9:1F:6B:66:89:D2:B5:2E
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b7:c6:96:b0:25:07:c3:70:e6:06:a2:a1:b5:40:d9:56:1a:
48:53:2d:c4:db:ed:5b:b6:5f:61:c9:4d:6d:f5:74:39:82:d6:
4b:65:b7:68:8d:7d:5d:a4:4d:58:2d:5d:10:d6:10:19:ba:c5:
7e:72:a5:d7:2b:9c:80:66:9d:fe:72:f8:a5:94:7d:08:2a:39:
ac:ea:f1:4c:9c:be:ae:d8:8c:4d:5a:37:82:5d:d1:98:14:94:
25:d9:e1:a9:d8:ff:44:a3:a5:59:66:98:92:c9:34:59:3f:36:
72:fb:90:96:d5:1a:71:ad:c6:e6:54:ae:9c:3f:68:9d:7d:40:
81:09:7a:38:85:8e:ce:99:cc:cb:37:fc:b5:d1:48:d7:05:34:
df:a8:12:24:9b:9e:e7:4f:8d:88:c4:ba:c8:0b:48:f0:ef:fe:
c1:cc:5e:79:c8:99:cc:8d:b2:55:eb:e0:e4:94:ab:50:aa:d6:
49:0b:1e:38:23:e3:dd:16:73:49:0d:e4:89:d1:cb:73:7b:a0:
09:15:28:84:25:b8:60:55:bf:5f:6f:86:5c:98:2b:ff:5e:2c:
5a:72:c4:66:f8:dd:0b:69:a6:a8:e4:fa:12:b7:60:5a:f8:20:
61:2c:ce:fb:5d:16:6a:b4:dc:d9:15:54:10:6c:16:58:e5:bd:
82:40:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 20:52:47 2025 by rpki-client