Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: FejAd31irXH8K3g/sY/ImHcJoqZ+aahUm4UGzvBe1/g=
Subject key identifier: EA:62:35:9C:63:D9:78:E0:BE:A5:3B:A8:B8:37:13:DC:0F:55:19:EA
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 0198D73B7964C35F57DAD45116399862757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 14:00:55 +0000
Manifest this update: Sat 23 Aug 2025 14:00:55 +0000
Manifest next update: Sun 24 Aug 2025 14:00:55 +0000
Files and hashes: 1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: xUZgJvgpgNqYgfp34+oSGV2eoT6My6fuw54I0bwOXLY=)
2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:79:64:c3:5f:57:da:d4:51:16:39:98:62:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Aug 23 14:00:55 2025 GMT
Not After : Aug 24 14:00:55 2025 GMT
Subject: CN=ea62359c63d978e0bea53ba8b83713dc0f5519ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:aa:24:f4:de:70:2f:88:89:2c:c6:ac:6f:
e1:b7:b4:07:e5:32:27:c2:6c:cb:d2:65:ff:b5:5a:
e4:12:c7:fb:59:85:fe:77:da:e6:74:43:c3:aa:50:
26:ba:db:93:2c:12:e5:61:d2:ca:9b:b3:7b:31:bf:
b8:5c:9f:f4:5f:77:b1:4e:39:35:8a:c9:5a:1c:09:
88:c1:ff:18:c6:86:49:64:e9:41:5a:88:fa:e3:2e:
8b:5c:8f:74:4f:c5:b0:06:4a:17:56:16:b1:1a:da:
ab:ec:98:a1:63:64:bd:ea:fc:a2:9f:9a:eb:5f:82:
74:aa:4b:1b:c4:55:1f:15:a0:14:ea:e0:0d:ab:61:
4f:fe:ee:d4:13:ac:fe:37:fd:b6:f3:c2:58:4c:1c:
7f:40:11:7b:f0:71:fd:c7:7b:34:7d:74:ea:08:c7:
fc:a3:d1:e3:5e:0c:53:1c:d0:ed:00:53:af:69:d5:
72:78:7f:6d:ad:5d:45:34:d0:0d:d3:97:5e:df:f7:
2d:cb:32:c6:b9:f9:0e:a6:2b:75:6f:d0:1b:46:44:
01:5b:e9:f2:64:f3:cf:0d:37:c0:e4:a0:cc:c4:63:
79:be:0e:06:a9:62:7d:f7:fb:af:e6:cc:a2:16:e4:
e2:6b:3e:1f:0c:da:11:26:8c:a9:74:0c:f8:72:f4:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:35:9C:63:D9:78:E0:BE:A5:3B:A8:B8:37:13:DC:0F:55:19:EA
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:84:b2:b3:53:47:f6:9b:1a:9c:82:5f:85:db:32:02:d4:5a:
23:2d:01:45:e3:99:82:e6:ae:df:5f:76:3b:35:9b:7b:ca:f8:
63:a3:6d:19:58:2f:22:fc:78:d0:33:91:f4:b1:ea:af:06:a6:
3b:46:15:3e:91:cb:be:a2:d0:ec:19:9f:92:af:bf:57:2b:01:
25:2f:e4:42:71:47:f8:32:3a:3b:5e:6b:a2:78:82:c6:16:11:
97:eb:2c:8a:d7:6a:f2:1f:fa:f8:2b:9d:64:84:6a:6d:a2:37:
db:8d:96:e7:96:86:4f:ec:63:71:ce:0a:82:71:51:78:82:f9:
17:93:09:d3:22:06:dc:17:5d:fd:15:bf:50:19:53:96:ac:e6:
6a:f0:c0:b8:ac:41:22:e5:ca:94:b6:f6:0c:af:4d:9e:c6:74:
9a:e2:e5:35:81:33:2a:25:24:ae:21:c2:66:76:b1:9e:11:d1:
fd:ee:8b:e0:b7:f6:bf:8f:c8:52:c3:d8:e4:fc:2e:62:23:f9:
33:1f:eb:43:3b:6b:fb:5b:e2:43:d7:e8:f6:ff:b3:cc:e9:3a:
4e:0a:5e:06:48:fe:c6:9a:af:96:83:6e:f9:9a:d2:67:5d:8d:
46:01:d4:59:a6:05:bf:80:35:5a:fc:20:5a:92:6b:08:76:e0:
2b:1a:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:26 2025 by rpki-client