Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: krUALOLqjFFIXwf7n0vm9yhqo+kzpj2kLFe0Zp7WooE=
Subject key identifier: 27:B1:93:6B:62:DE:FD:56:D3:39:53:DE:62:43:12:40:11:DC:79:F4
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 019A725CE4BA0A9C59635081C559FA5735A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: 6sWjE76J2ACVFxnwRua/B1tMR4hKiEsmZqHZxXt9a0A=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e4:ba:0a:9c:59:63:50:81:c5:59:fa:57:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=27b1936b62defd56d33953de6243124011dc79f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:96:74:08:a4:93:04:94:bd:01:45:1f:04:
e9:a7:83:13:20:ca:95:b9:77:43:6b:13:a2:55:57:
0c:bf:03:96:e0:3a:89:75:a7:56:a7:78:4a:9d:a8:
6a:1e:d8:66:7b:dc:ea:5e:5b:78:f9:1c:53:3d:a1:
12:91:bd:54:d4:d6:14:66:51:e8:1d:38:47:81:f8:
b6:11:93:46:fe:67:ac:0d:e2:ec:38:ed:51:bf:66:
bc:aa:e6:08:cc:51:a5:fb:a0:3a:09:03:e1:b9:8e:
e0:39:3f:18:bd:d7:03:99:6f:fa:23:0d:4e:e7:82:
9c:46:b3:37:1f:ed:31:fe:3c:f1:d0:a7:62:2d:bf:
aa:ca:5c:fe:97:5f:b4:89:93:9a:5a:81:5d:ce:76:
04:f6:85:e0:73:4e:f2:f4:32:f9:6e:25:2e:11:dd:
f7:b6:02:74:7a:66:a1:b4:3e:ee:0f:92:f2:dc:02:
27:cb:1b:08:df:75:91:80:1a:de:ba:6d:87:02:21:
8f:78:1b:06:fd:b8:58:83:e1:41:d2:31:35:88:64:
1a:c5:f7:b7:ec:68:0f:0e:8e:1c:45:0a:f5:db:aa:
d4:e6:82:c6:d0:6f:5e:af:87:96:90:a0:ac:a2:5c:
3a:bc:40:d4:f6:fa:fb:93:7c:12:73:6a:54:12:9e:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B1:93:6B:62:DE:FD:56:D3:39:53:DE:62:43:12:40:11:DC:79:F4
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:d4:ec:2f:ce:42:74:62:b2:e0:cc:7f:2f:dd:fb:f0:3d:53:
43:33:a9:87:48:76:3f:1b:86:ab:82:90:69:2b:51:b9:8a:3a:
35:86:94:dd:63:fc:c1:88:de:90:c0:9e:ba:b1:24:11:b8:e9:
d8:fd:88:16:3b:05:a5:40:f5:f1:e7:70:e9:80:2e:30:12:bf:
85:1b:28:ed:8c:9c:f6:fd:76:5f:e3:a5:d7:35:40:70:a9:1e:
6d:29:a0:71:d3:63:d2:da:db:f6:56:61:1a:bf:6d:3c:3c:a8:
4e:b8:0e:b9:44:ef:97:37:f6:54:20:45:81:52:3b:fb:23:94:
50:e1:84:74:0d:e5:b1:93:26:90:ac:29:1b:c1:a5:38:d8:f2:
11:98:ea:9b:61:cb:ab:6f:39:cc:15:ab:d9:aa:82:66:09:7b:
64:87:39:fa:59:c7:94:24:12:f5:62:ea:c2:03:da:e1:b9:6b:
ac:52:4e:86:43:20:63:f5:db:ca:5e:4e:4e:ed:d1:f5:5c:00:
42:8a:0a:79:eb:bd:5f:e5:08:8e:b2:b1:55:08:52:8f:3d:25:
f7:59:c8:7e:65:0d:07:43:b6:67:87:53:d7:3e:2e:42:fe:2e:
37:1d:7c:6d:96:d1:93:2e:92:77:55:a3:9c:16:29:bc:1e:1c:
33:7a:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:38 2025 by rpki-client