Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File: eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier: m990/FQvY+/9Ci6h9BYfFYbK67D4fDab7IouUoh2qOw=
Subject key identifier: 20:A3:0D:71:13:61:E3:C0:29:9D:18:7E:87:3D:A4:67:01:AD:86:2F
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 01984AAECC11FCC371BF017209379078F441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number: 0F2A
Signing time: Sun 27 Jul 2025 07:00:25 +0000
Manifest this update: Sun 27 Jul 2025 07:00:25 +0000
Manifest next update: Mon 28 Jul 2025 07:00:25 +0000
Files and hashes: 1: IDffwXSXahN5-5PWuJ4XE3BnZeo.roa (hash: 1+Z8cC/8+v/4brLtfip5esLm8Gxo3GEZJmCR2m2xqjM=)
2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: L1b+237w2fBGNFv3grr+IVFWJnpXHe3zGHiHCOXnmmk=)
3: ltph-6gi_L0tRRLCXMre4piqZuw.roa (hash: MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:cc:11:fc:c3:71:bf:01:72:09:37:90:78:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Jul 27 07:00:25 2025 GMT
Not After : Jul 28 07:00:25 2025 GMT
Subject: CN=20a30d711361e3c0299d187e873da46701ad862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:24:46:f8:75:ce:c0:8c:03:e6:04:c4:51:
a5:6c:a1:7b:4a:91:34:f4:25:2c:1b:e7:c4:2f:32:
a1:47:54:96:1e:28:44:bd:02:c9:2d:26:d1:93:1d:
85:cb:f9:48:ba:14:b6:15:28:44:a4:59:a4:d8:66:
19:c7:da:fd:3a:76:a6:64:50:12:10:f9:da:05:20:
b3:7c:e7:4c:07:cc:bc:38:f5:ff:a8:18:a3:63:cf:
a2:60:89:b1:78:90:0a:a6:cd:6b:ef:cb:f7:2c:7a:
b9:7d:26:c5:58:a6:28:9e:82:8c:e0:f2:04:1d:28:
4e:be:2a:68:12:59:ea:df:1f:0f:80:7b:af:af:d0:
b8:3b:e0:48:c8:3b:23:f2:b3:c3:38:a1:ba:c5:a0:
43:bc:e6:cb:68:78:61:b4:35:f3:35:f0:27:21:af:
0c:79:79:83:48:ff:2a:cc:56:24:29:36:a1:b6:dc:
e3:8c:69:e1:1c:a3:d7:60:a2:25:c5:b2:25:90:d4:
ac:b0:bc:4d:f7:8f:3c:a9:42:db:95:9c:7c:ad:dd:
9e:8f:69:de:b7:06:30:42:95:71:18:48:2a:06:32:
66:cd:6f:14:f5:ec:17:95:44:13:86:fb:66:6b:f3:
a8:69:db:03:52:f5:99:fb:4d:5a:a4:b0:93:a2:a9:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:0D:71:13:61:E3:C0:29:9D:18:7E:87:3D:A4:67:01:AD:86:2F
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:03:74:83:7a:2b:27:72:b3:92:c2:79:c7:65:ea:14:80:58:
8d:a6:27:c5:8c:12:b1:82:82:0f:ef:f6:5a:48:ee:71:ed:a1:
22:e0:ab:9a:db:b6:91:a4:ce:66:5d:bd:e3:8d:dc:27:13:48:
aa:3e:3f:bd:f4:ae:9a:8c:04:cb:0c:36:63:76:dd:99:b6:67:
a9:ba:62:6f:c5:52:bc:11:d6:73:77:57:39:7e:1c:79:d9:1d:
2a:f8:46:bc:69:4b:87:9e:8d:b9:b5:4f:e0:d5:fd:c2:c9:7c:
a9:e5:6a:f5:24:89:70:ab:a3:1f:27:31:7b:8b:fe:c2:ae:85:
dc:4a:d2:70:d6:d6:07:14:4d:27:97:75:27:72:c3:56:8f:58:
87:e7:7f:15:7b:26:45:cf:63:44:71:3f:e3:eb:e4:f7:68:31:
3b:e2:b1:c1:f2:e9:bf:5d:14:41:e7:4d:b4:6c:00:66:59:ab:
29:c6:f3:93:44:1c:a2:42:22:2b:a4:9e:8c:5e:a5:96:bd:67:
b0:84:56:8d:77:a9:c6:3e:36:35:be:a8:2e:92:f0:34:0f:ad:
1b:7d:7e:34:4e:6a:95:b9:57:d8:18:a2:13:99:bb:b7:19:83:
2e:98:07:a1:8c:cd:e0:ae:fa:72:91:be:c5:c8:03:ac:da:ee:
e5:2d:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:03 2025 by rpki-client