Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier: SdfCBLozZbwIUzBkwtiUmiEXqFKE5yLaJgs6dtNHSGA=
Subject key identifier: D1:00:C6:85:F1:30:3B:08:15:9B:6A:8F:25:C2:88:42:BB:3F:3D:B9
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 019938DF23BAB1FB92134D491B5E302B5E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number: 1684
Signing time: Thu 11 Sep 2025 13:02:51 +0000
Manifest this update: Thu 11 Sep 2025 13:02:51 +0000
Manifest next update: Fri 12 Sep 2025 13:02:51 +0000
Files and hashes: 1: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (hash: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=)
2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: kD9b7xJtGlzGYdWn4TXZ7Q1ZOTL5cJ4kM+1ohAsK+Ws=)
3: HOQaozgHqyl7GjdOmYwJNgxkNvk.roa (hash: PI4rJK1t31rRGgg84yxq7H32pDXq4vLAXeRJDFTb2uo=)
4: L-ktSUmEt-j51Ho1YnwbbaZLrZo.roa (hash: mUCe0wNtZCh2tznUGkMZqDrtHqmD+Hv4+N6i6ZjwUMM=)
5: P2rIwR1CtoaVBqGPtk1uKZu6EAM.roa (hash: 5tzkl0E5Oyrnj5xi/xWoXdn3cp0c7cD7Nd4Yhdv1uSk=)
6: hysK0HS4yMpxAiu_amCNQZnsMEk.roa (hash: h9bkQ2M0Hp/TMn65+jd+66CUZ78mTaddUxEZ1BNe0q4=)
7: ytEJnGu8gq3161Uk5CSgUCmxit8.roa (hash: 6lM2R/ZrStC7kH6e29r6pEEmVzeiHBYKhVC23vS8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:23:ba:b1:fb:92:13:4d:49:1b:5e:30:2b:5e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Sep 11 13:02:51 2025 GMT
Not After : Sep 12 13:02:51 2025 GMT
Subject: CN=d100c685f1303b08159b6a8f25c28842bb3f3db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:00:c1:20:41:b1:f9:99:9c:b2:46:4e:43:
34:11:a4:74:f6:24:93:04:8e:72:f4:d7:e1:47:8a:
18:d4:09:65:f1:a7:83:a2:b7:c3:82:b4:bd:02:75:
c3:96:50:92:d6:ff:38:69:f8:ef:48:8a:8b:20:65:
05:3f:db:ca:4a:70:09:41:02:35:58:f3:d2:f1:d6:
6b:ec:06:89:51:15:6a:80:fd:20:d3:d3:6d:d2:cc:
41:1d:cb:22:aa:64:92:a9:b8:db:32:22:d5:17:fa:
46:ce:e0:89:a2:0a:ae:41:75:b7:b7:90:cb:0f:f6:
1a:e5:77:17:30:c1:44:a0:8c:a4:f4:19:50:f0:d8:
bf:07:4f:d1:1b:42:fe:fb:e1:c7:88:9f:3c:9a:77:
51:f9:99:3e:47:1e:6f:34:96:94:e4:4d:48:d3:7f:
74:20:40:f4:35:82:b3:fc:47:42:11:12:6e:98:13:
21:6f:04:5f:39:05:46:4d:7a:78:0c:91:b1:58:af:
08:a0:27:eb:94:dd:b4:00:96:44:94:15:ce:0a:a0:
c4:3b:6f:28:b0:ac:29:0f:9b:9b:d0:95:89:a6:2e:
c8:3f:96:5a:cd:ef:8c:42:26:27:85:1c:40:5a:22:
30:58:e8:f2:6f:bb:40:c5:e0:01:95:64:51:22:02:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:C6:85:F1:30:3B:08:15:9B:6A:8F:25:C2:88:42:BB:3F:3D:B9
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:9d:a2:01:92:fb:80:2a:06:0e:31:2f:19:dd:ed:ca:f6:
31:24:d9:b4:2d:48:12:bb:cb:66:58:5c:dd:7a:e5:66:81:22:
1d:ed:e3:e1:e3:90:5a:0b:c4:83:07:68:15:da:e8:8b:eb:14:
b2:fe:cc:e5:31:98:df:b8:a7:94:04:90:e6:07:39:98:82:84:
72:2c:b6:8e:23:4f:a8:d8:4f:aa:86:c9:6c:27:d7:0d:9d:f0:
91:82:67:7a:80:85:52:36:59:27:2b:c9:35:ab:e6:7c:ac:c8:
f3:81:68:af:65:ed:65:18:ff:4f:18:b3:42:58:47:97:f3:bd:
47:33:30:31:d7:ad:48:49:33:4d:e6:22:78:94:bb:be:06:7a:
10:78:e8:ad:4b:72:93:f9:93:30:63:2a:a4:9d:b5:0a:fb:74:
58:b8:67:a8:43:cc:28:a0:51:9e:a4:3e:9d:d1:1c:8e:f1:ba:
dc:66:3c:a4:9c:f9:22:a8:27:79:68:28:85:5f:87:71:55:96:
2d:85:ba:5f:03:72:3c:ce:94:c4:20:e2:0d:47:75:81:14:c7:
48:db:b8:70:b0:66:1f:98:29:01:a4:75:6f:02:20:66:d7:f1:
c7:98:9e:5a:12:e7:81:3d:71:1b:ec:93:c4:3f:fe:5e:d5:76:
b8:08:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:37:03 2025 by rpki-client