Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: OKaqbRMrtCkdzrtUQFfxPi4GNsFwUMlNlpEZOV9udNY=
Subject key identifier: 25:85:C0:C8:8A:B3:82:78:01:6D:FF:21:BB:1E:20:CA:E1:71:3A:C5
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019847E49085AD881869685EF198BE5CD823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 18:00:18 +0000
Manifest this update: Sat 26 Jul 2025 18:00:18 +0000
Manifest next update: Sun 27 Jul 2025 18:00:18 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: ZIvVGSsTaYoJ5sjZsQpfsSgOXZ0fcMVBTdlmYJEvgz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:90:85:ad:88:18:69:68:5e:f1:98:be:5c:d8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Jul 26 18:00:18 2025 GMT
Not After : Jul 27 18:00:18 2025 GMT
Subject: CN=2585c0c88ab38278016dff21bb1e20cae1713ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:43:98:10:4e:f1:9e:03:2c:79:06:f7:35:
62:63:b1:5c:ca:6d:5a:3b:81:86:1a:92:60:e9:38:
b1:41:4a:f5:11:f1:4e:ab:0f:01:a9:34:6e:9a:09:
4d:22:c8:d2:4a:fa:50:33:ee:35:fc:7c:dd:c4:d2:
e6:89:be:e9:99:5b:89:78:e8:b3:03:64:c0:57:03:
46:4a:4f:ba:57:46:ca:a3:75:3d:5d:e6:92:01:6b:
69:0d:b0:1a:bc:2b:47:c7:f2:09:3b:aa:fd:9d:3d:
ba:03:97:da:e1:74:33:37:1b:76:1a:f5:4a:da:d6:
d4:e9:ee:ab:3e:6f:4c:80:94:fb:2c:fc:03:75:8d:
c0:c1:1a:6f:35:48:23:8f:68:94:78:cf:f6:d8:6e:
e5:fb:b4:f4:16:23:a8:ef:8b:22:ad:96:ab:c4:1c:
42:18:ca:aa:39:18:b9:2c:48:85:12:6e:aa:35:37:
0e:12:76:09:69:de:1c:d8:ac:33:ed:dd:d1:90:d5:
ca:74:92:32:2e:0b:3b:25:28:e0:98:dc:36:93:98:
df:f4:67:04:93:6e:3a:c9:ff:f2:37:37:90:6b:38:
3c:11:e6:02:f9:26:b4:23:6f:8f:26:e3:7a:0d:b0:
69:9d:81:f3:9a:b6:53:a6:77:23:2c:f1:44:8c:24:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:C0:C8:8A:B3:82:78:01:6D:FF:21:BB:1E:20:CA:E1:71:3A:C5
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:35:39:d5:e0:6e:85:52:f6:99:40:73:24:fb:0d:94:9d:8a:
62:76:a0:4d:66:2b:93:2a:29:18:32:94:81:a0:ad:ad:e5:e9:
f9:04:e9:92:dc:ff:a5:d9:79:51:f1:5d:89:93:43:cd:21:81:
e3:ed:f5:d5:80:82:78:0f:1e:33:5c:82:31:fd:f1:ca:a3:1f:
a7:ff:8c:1b:ac:72:13:fd:85:81:3a:ce:93:66:c5:20:f8:2e:
5b:d7:2d:c9:58:de:87:92:7c:de:82:1f:b7:ba:af:7d:bc:4f:
dd:36:ba:eb:9c:67:70:44:48:af:0b:5d:b6:3c:8a:f9:a6:1a:
bd:50:74:5e:2b:f6:47:45:0a:cc:0b:70:94:e2:0c:41:ae:29:
0e:c9:2e:38:24:2c:90:d8:cb:27:a1:7d:05:cc:a8:31:0a:b3:
72:fd:fd:cc:53:3e:03:df:82:09:24:45:f5:56:7f:cd:f8:af:
8a:4d:2d:48:d1:44:30:0c:4a:07:da:7d:ca:a6:35:a2:2e:ee:
a1:77:39:cf:3c:80:85:bb:55:27:7f:1d:7b:ba:7d:37:d9:42:
fc:b0:3a:49:98:bb:dd:03:96:9e:90:0c:2f:d2:ae:c3:65:33:
dc:60:e1:d0:c5:11:45:e5:f5:43:9f:13:3c:18:89:05:6b:d0:
e2:fe:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:28:37 2025 by rpki-client