Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File: EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier: U5B+w+oj+WyVO+bFA7kCpDJ23u82UN+xtLdeGFCEEio=
Subject key identifier: 7E:3D:44:BB:22:A5:48:E4:3D:60:5B:DC:A8:88:CF:75:09:3D:A5:79
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial: 019A71B92FAA14A624C770CA70AEA1B717DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: 2CUDnPzPHNqbCWKCZFVlFgWU_Ww.roa (hash: bthC2bFYzQs+lVNqZxrhsxyhvDDeUXNWtR+Uh+f7dJw=)
2: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: PDpv4czK1Ks80CDw64reQT0Hn1lYB6Q28R2KyrHS4qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2f:aa:14:a6:24:c7:70:ca:70:ae:a1:b7:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=7e3d44bb22a548e43d605bdca888cf75093da579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:c7:71:a9:2b:17:f5:52:57:ad:ad:c7:fe:
92:69:f7:ae:f9:90:56:0a:73:ff:29:78:42:94:6d:
0c:0e:f9:84:5f:59:36:fa:fa:fa:27:7d:ce:ac:a1:
60:46:91:3d:81:21:fb:6d:4a:e8:d7:cf:9f:15:66:
cd:dd:bd:fd:22:5d:27:fe:5c:48:38:c2:3a:b9:de:
4b:89:91:5b:39:a6:8e:b2:16:06:be:fc:44:6a:ca:
de:dd:21:79:98:d3:12:49:e2:29:3d:ef:dd:54:31:
c4:1d:9e:ec:65:da:d9:fb:b5:26:a3:79:b7:43:ce:
1d:f4:c7:ac:db:09:63:79:55:34:06:5d:5c:ea:df:
de:a7:7a:6a:a2:9d:d3:6a:82:8d:31:95:e7:15:23:
28:3c:04:de:0f:6d:f9:29:ab:e6:6f:6b:5a:73:91:
aa:92:ff:12:ac:d1:b3:2e:e6:31:39:01:0c:4a:26:
42:4a:b3:f5:9f:1f:c8:4b:7a:78:83:50:6e:d3:ec:
30:c0:4f:6f:54:4a:51:9a:78:fa:0a:2b:51:57:63:
c8:40:7d:0b:bc:2f:61:b8:eb:7e:ee:18:d1:85:cd:
ba:b6:ed:c8:c1:a7:77:65:65:5e:57:d2:f8:e1:a2:
a9:6f:be:9d:8a:d4:d3:71:d6:bc:95:f5:cd:df:19:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:44:BB:22:A5:48:E4:3D:60:5B:DC:A8:88:CF:75:09:3D:A5:79
X509v3 Authority Key Identifier:
keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:1d:93:6b:d6:80:83:1c:51:c1:87:a3:cf:4c:b2:fc:b7:
3f:19:42:a1:a1:1b:46:8c:7a:a7:42:bc:5f:70:6a:17:d8:1b:
1a:8c:7d:56:a9:22:52:da:24:93:37:78:8c:dd:c7:55:d4:c9:
2a:46:4a:f1:68:6a:66:40:73:d3:04:5f:fb:76:3f:a8:bd:9d:
9f:52:f5:b9:75:92:53:f7:57:ca:57:00:d6:d6:61:af:db:f4:
07:25:36:4e:e2:98:47:79:f0:78:01:cc:b2:9e:01:28:df:78:
b9:ee:c6:d5:f5:a9:1a:63:5f:29:16:6a:e3:a2:2b:fb:49:db:
ad:03:d7:20:0c:cf:c8:90:bd:57:ed:d6:14:3e:0e:ac:c7:c9:
17:6c:b1:c7:cb:77:11:91:d3:aa:b6:87:e0:5e:97:29:c7:d1:
b6:1a:91:26:e5:0e:90:0a:ed:9e:6b:a0:80:3e:15:1c:94:9d:
29:99:6e:12:43:eb:b5:9a:f6:2d:fe:55:fa:a2:8a:42:12:63:
20:c2:a4:b7:26:21:c2:92:ba:94:15:03:61:86:c6:b8:f9:63:
a5:38:3a:c1:eb:aa:a9:9a:f6:72:20:5f:8d:f9:6c:7b:46:5a:
53:29:5b:1e:04:ca:de:db:18:19:9d:3b:92:b7:56:e0:fa:84:
74:4e:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client