Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: 0HRoOao/vKyTVaCFRwGyCYtvuxn3KrwKZuRHackH8QE=
Subject key identifier: 70:57:5D:D4:61:FC:5A:58:61:73:18:0B:0E:8B:29:06:0F:3C:9B:E0
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 0197B77C1C4F25D7E7BE417583ECAEF4BA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: ezrAxoutVDGzlwt7KD6hvKmiasCgzY+eDsHO21/zryY=)
2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1c:4f:25:d7:e7:be:41:75:83:ec:ae:f4:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=70575dd461fc5a586173180b0e8b29060f3c9be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3f:e0:6c:ff:c7:bf:30:cb:3b:05:d7:4d:9b:
0b:b1:b6:cb:c7:99:4d:36:c9:fd:0c:8c:ec:4f:80:
87:f4:de:98:e0:27:9f:c2:22:f3:95:00:b4:4b:27:
24:da:b0:aa:6c:31:0f:ae:0d:e1:ce:38:41:4d:c9:
d4:a3:3c:05:b7:d6:42:cd:cc:30:2a:47:aa:ff:dc:
94:40:ac:33:ac:91:c2:1f:9b:d2:12:1d:5e:5f:e3:
3e:5c:b5:73:e0:ab:4f:80:e1:7a:4a:cc:1c:24:22:
1f:09:53:28:52:75:48:f6:b1:66:b9:21:48:c2:57:
8d:6e:19:c5:69:9e:2c:47:a2:21:38:e0:8b:a4:58:
30:36:7d:af:36:14:45:12:16:12:df:27:3c:29:13:
e3:d3:ba:c1:a0:99:9c:d6:01:27:92:4c:3e:f6:03:
ab:e2:be:26:0f:2c:ad:fe:5e:a2:2e:01:14:23:58:
29:73:36:b7:20:99:c4:a4:7c:c7:d9:45:10:c9:fe:
a8:26:60:c8:74:96:aa:62:8d:d0:59:a1:9e:1e:3b:
73:e5:61:5c:a4:70:1b:eb:2a:c2:63:b0:38:65:d2:
84:05:2f:90:ca:68:41:8d:08:8a:ae:f6:1a:bd:df:
6e:99:cb:f4:7f:d0:89:17:a6:91:7f:c0:59:1d:c2:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:5D:D4:61:FC:5A:58:61:73:18:0B:0E:8B:29:06:0F:3C:9B:E0
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:53:ca:5f:59:0d:43:5e:ea:98:6d:a1:bd:d7:34:e9:22:
8b:a3:42:42:d6:1d:d1:69:49:97:2b:8a:14:dc:2a:13:0a:e3:
28:d7:b9:f6:12:f2:85:40:c1:50:a7:87:6b:8a:27:43:75:2a:
66:c7:20:e8:0f:dc:25:90:6e:ee:87:c4:76:37:32:74:e8:8d:
cd:c9:29:9c:7f:f3:f4:fa:e0:e6:f7:66:b6:73:ea:b6:5c:c7:
97:71:00:6d:4f:45:c2:84:29:79:a7:27:50:7d:53:51:7d:21:
de:2a:3d:8c:c7:f9:01:d3:c5:79:94:d1:02:d3:0f:dc:62:98:
2b:b0:bd:a3:a3:34:ae:2b:56:8d:3c:a9:c1:8d:0c:b6:d8:11:
30:a5:40:ab:ca:92:89:fb:80:3d:10:c2:cf:ce:b5:a2:1c:73:
a0:78:3c:68:e2:69:f3:c5:f4:a2:e9:02:61:b8:79:f5:d6:dc:
dd:84:8a:f1:d8:6a:33:f7:af:74:ad:75:f1:bd:a4:34:c3:f8:
81:2e:e4:83:42:2a:e0:aa:28:30:d2:85:1f:41:cc:6f:f0:dc:
8c:b7:63:35:17:8e:14:41:0d:4b:83:16:6e:7a:58:60:18:9e:
13:09:c5:12:ed:1f:74:f7:51:5d:aa:07:29:90:c1:c1:7a:c8:
98:82:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:35 2025 by rpki-client