Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File: eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier: LQvTa1j4U0wRf2QYupEWY+VLW3FqX0PrInUiVaAEynk=
Subject key identifier: BB:E6:2D:17:82:63:85:8C:8B:30:68:83:15:A2:5A:5F:02:14:57:9F
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 019960C668A4C9F4B70B208060B4D90063BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number: 0FBA
Signing time: Fri 19 Sep 2025 07:00:39 +0000
Manifest this update: Fri 19 Sep 2025 07:00:39 +0000
Manifest next update: Sat 20 Sep 2025 07:00:39 +0000
Files and hashes: 1: IDffwXSXahN5-5PWuJ4XE3BnZeo.roa (hash: 1+Z8cC/8+v/4brLtfip5esLm8Gxo3GEZJmCR2m2xqjM=)
2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: gt9yKk0uebTJWsRejVTQl1L5TBdhGQTRwUlkfIq1maM=)
3: ltph-6gi_L0tRRLCXMre4piqZuw.roa (hash: MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c6:68:a4:c9:f4:b7:0b:20:80:60:b4:d9:00:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Sep 19 07:00:39 2025 GMT
Not After : Sep 20 07:00:39 2025 GMT
Subject: CN=bbe62d178263858c8b30688315a25a5f0214579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:25:22:e1:88:41:da:9a:09:06:d3:e6:db:
45:52:1c:12:47:87:52:66:1e:ac:ba:88:42:04:f1:
a3:a4:c4:77:08:56:73:88:9a:d6:b2:86:35:17:cb:
43:b2:3d:86:4d:65:b6:9a:ca:70:bd:30:5b:72:cf:
af:59:5b:d3:96:8c:64:9c:fe:07:49:5a:79:0e:a4:
55:e5:53:d7:bc:2f:0d:32:df:86:04:4d:c7:38:85:
ba:32:25:55:7d:02:e8:c5:e1:66:a9:40:33:f5:7a:
3f:ab:f5:ac:a3:38:5a:7c:d3:24:1e:d7:29:f5:5d:
ef:cf:75:0a:56:4d:ec:ef:08:f4:57:8d:5b:3a:e9:
68:42:d7:d1:d9:02:1d:df:3a:54:7e:11:4c:97:6c:
16:d9:e0:aa:ed:31:94:5c:dd:af:4f:24:d4:f9:b1:
20:50:88:7e:d7:e0:37:44:14:b9:16:67:ff:0b:fb:
5a:51:62:68:50:35:3f:54:6c:d3:a9:2d:89:3a:f1:
e5:26:8a:6d:f7:d8:39:fb:02:0e:0d:37:90:40:e6:
3a:78:e9:cd:5a:8e:eb:ff:2c:7c:b6:81:3c:0a:fe:
78:ce:d1:95:43:01:28:d4:d1:ec:06:06:ca:a0:65:
ae:eb:c3:11:ca:18:42:61:e9:ec:c2:59:d4:ac:fc:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:2D:17:82:63:85:8C:8B:30:68:83:15:A2:5A:5F:02:14:57:9F
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2b:68:8b:c4:44:f3:5c:96:c2:87:3a:b4:24:81:f1:c2:5a:
29:b2:be:0d:2a:a2:e9:6a:e8:01:57:b5:63:5d:ed:9c:7c:7c:
ea:e8:52:c4:c8:df:d1:a4:5f:f1:31:f6:23:c4:cf:aa:67:65:
35:b5:7e:e0:b4:47:77:55:b8:6d:ab:f2:f5:64:a8:cb:1e:c8:
11:30:10:7c:f8:7a:c7:c0:00:48:c4:93:b6:08:bb:9e:17:b7:
fb:60:b3:c8:f8:c6:61:07:b4:60:df:3f:1a:c3:3c:6a:5b:08:
74:f7:2d:9e:26:72:70:c6:f4:30:d2:0d:d0:30:d5:5f:8d:f5:
dd:cd:dd:58:b8:9d:5b:0c:5a:c9:bf:c5:03:64:ab:f6:94:7d:
1b:74:3a:fe:b0:93:ad:ba:a1:d5:7c:a3:79:67:a2:50:e6:f5:
57:a8:4c:25:6c:8e:15:d9:26:6f:96:9b:4c:83:4d:80:8e:5a:
ec:fc:fe:7f:95:af:ea:cf:a6:0b:55:5c:da:d2:1a:5a:e2:b1:
88:4c:eb:33:9e:61:7a:0b:fa:ce:c4:c8:8a:77:54:ba:7f:09:
59:0c:cd:02:66:8a:86:8e:c3:26:9e:4f:02:73:d7:f8:48:78:
73:49:4f:33:1c:7b:bb:10:ff:44:cc:16:8e:40:7b:ba:e7:ad:
45:76:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:22:30 2025 by rpki-client