Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json)
Hash identifier: vAyusM8k8IYN7SelbjK+hIpZ2ttGYbeFJHCO8bgAx28=
Subject key identifier: 08:9F:40:FA:06:64:42:7D:54:AE:F1:7A:87:B7:7A:D4:45:A3:34:E5
Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a
Certificate serial: 019847ADD93130835C82437623376D8D4F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
Manifest number: 0AE1
Signing time: Sat 26 Jul 2025 17:00:32 +0000
Manifest this update: Sat 26 Jul 2025 17:00:32 +0000
Manifest next update: Sun 27 Jul 2025 17:00:32 +0000
Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: ZS+7DZZy4DBYgE/ESPI9BXrJXCdi3PaaZLjLxfxyCP4=)
2: iR8kHHuMHXHdpW9oFEB19MCcm1M.roa (hash: cqHEhbc9Bc/QLDbHqxDN/gK7OPZ3taLde0WraYz/2vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d9:31:30:83:5c:82:43:76:23:37:6d:8d:4f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a
Validity
Not Before: Jul 26 17:00:32 2025 GMT
Not After : Jul 27 17:00:32 2025 GMT
Subject: CN=089f40fa0664427d54aef17a87b77ad445a334e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:83:1e:87:ec:43:c9:9d:95:2a:7e:cd:cb:
43:fe:fb:88:15:14:78:ac:90:23:e4:02:84:b3:13:
64:28:15:9d:4f:6e:dd:15:b8:1e:2f:26:fd:12:97:
46:d9:77:9b:f2:3e:f6:31:9e:0e:e2:7a:63:f8:2e:
a0:2e:b1:b7:e0:31:3c:d6:f2:e9:15:4c:46:b6:7b:
f1:05:87:56:85:c8:81:3c:25:b4:1a:ff:93:ac:82:
ae:ce:dc:6d:2a:14:0a:67:3d:66:7f:52:ff:3c:80:
07:ac:62:dd:4a:f6:50:b1:67:65:73:44:cf:11:d3:
cb:90:48:29:ea:a7:de:c4:b2:7e:2c:8a:18:00:bc:
cc:8a:8b:3b:e8:1e:9f:d7:99:ea:fb:e1:d4:b7:08:
ca:86:4c:f7:d6:13:47:9d:47:e0:dd:c4:a1:94:66:
12:f1:00:65:44:f7:45:20:3d:05:bd:cc:03:c2:ae:
fa:a1:b8:de:95:b0:c2:15:14:e4:4a:41:27:26:94:
66:6f:64:c6:84:e1:33:0c:07:c3:66:cc:6e:c0:c5:
7c:29:28:39:c9:03:34:cd:6f:df:c5:51:76:ac:e8:
55:64:4c:3c:20:a9:5a:2c:32:08:43:f4:47:41:f3:
d6:81:0e:f6:06:a1:d7:f9:7d:f2:75:1f:f4:0e:d5:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:40:FA:06:64:42:7D:54:AE:F1:7A:87:B7:7A:D4:45:A3:34:E5
X509v3 Authority Key Identifier:
keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a5:b8:3f:0f:49:cf:38:09:4f:c9:e6:fb:97:71:42:20:a6:
84:a2:8f:06:a0:a1:5b:4d:42:7b:02:69:56:30:6f:08:91:26:
db:c8:8f:c6:24:27:79:12:41:64:f4:e6:1e:62:a7:d0:d6:d6:
79:95:b5:39:21:b9:f4:4a:11:f7:40:a6:49:da:d7:23:54:2d:
3a:a9:e6:93:ae:26:33:f0:ee:c5:22:0b:a6:13:bb:68:56:e7:
c1:7f:93:b8:84:25:01:77:66:2a:38:a7:10:91:3d:14:a2:4c:
84:30:18:c0:1f:1d:bf:5b:6f:ca:24:11:d2:7f:51:fb:6e:a0:
65:11:31:9a:12:7b:5b:3c:37:3f:86:8c:64:8a:9f:6e:ba:8b:
1d:93:85:4c:3b:bd:89:d8:ca:72:39:25:cb:ef:42:a8:0a:db:
1f:a9:06:ff:56:d8:96:91:c9:c8:72:a3:72:dd:25:6a:9e:ec:
94:54:00:e5:7a:47:76:47:cd:ec:12:0d:93:f4:d3:e8:f8:aa:
c3:a2:61:46:94:e6:5a:ba:1b:a9:49:a2:da:54:23:d0:bf:b9:
e7:b1:77:c8:ac:65:04:4d:cd:8e:e6:ee:65:12:5d:1a:91:59:
b5:17:97:6d:60:8c:b9:ab:9a:e1:85:7b:2d:c3:c4:eb:6b:89:
84:fa:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:05 2025 by rpki-client