Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: Ph80I+/YR59g2YfDyjLvMRicuUWj3sf8HN6gwexV9HA=
Subject key identifier: 4B:3D:7B:C0:20:59:8B:55:C3:64:04:54:F2:F4:72:0F:CC:41:A8:31
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019866945D8FC7618FDE8D55347238ABE174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 1610
Signing time: Fri 01 Aug 2025 17:00:55 +0000
Manifest this update: Fri 01 Aug 2025 17:00:55 +0000
Manifest next update: Sat 02 Aug 2025 17:00:55 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: PqKcKfbSC3J8IypYKoTYuq0m7/19mtHCf6OGKV5SzC4=)
2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:94:5d:8f:c7:61:8f:de:8d:55:34:72:38:ab:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Aug 1 17:00:55 2025 GMT
Not After : Aug 2 17:00:55 2025 GMT
Subject: CN=4b3d7bc020598b55c3640454f2f4720fcc41a831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:a6:4e:c4:d0:20:08:3e:f0:b0:c0:5c:56:
4d:b6:e8:b9:2c:ae:f2:c4:c8:a7:01:ba:31:bb:b5:
95:4e:97:34:d8:16:7a:3e:5a:d5:7f:da:8c:e1:ea:
8b:31:9d:b6:af:62:b3:d4:70:63:1c:d7:36:bd:4e:
65:a8:77:52:b2:6e:78:f3:0a:62:2a:e8:00:cc:64:
b8:8d:4e:2f:4e:92:9c:f7:7b:64:49:db:42:c4:a2:
6c:5e:0c:9e:f0:ab:2e:99:64:b5:10:a9:18:38:61:
6a:49:a6:56:70:92:34:05:5d:af:ab:a6:de:76:b4:
20:9f:32:19:fc:6c:31:b5:d2:ae:63:10:07:b6:14:
42:72:6d:ee:29:06:12:41:3b:9a:25:f5:92:f5:ae:
57:da:a1:dc:2a:48:c0:f4:ef:3b:75:8d:1e:06:7b:
af:8e:6c:ef:50:c1:85:98:6e:f9:fe:85:8e:00:58:
d8:27:3c:3b:3e:6a:5b:df:c8:69:b2:fb:04:6f:69:
48:2c:c4:59:c6:95:34:0e:c9:86:1a:70:b3:b9:3e:
2e:c5:c1:cf:82:4d:18:2a:5c:ae:ee:d3:be:54:ee:
1a:3f:b1:81:8b:1d:2e:fc:8d:d7:f6:cf:9c:14:71:
53:c0:c7:c0:2c:8b:87:87:db:30:60:bf:81:b9:f2:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:7B:C0:20:59:8B:55:C3:64:04:54:F2:F4:72:0F:CC:41:A8:31
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:86:ce:6b:2f:9e:6d:96:9e:d9:53:bf:cd:74:ab:2c:d9:93:
b5:5e:c6:49:d0:a0:78:da:5d:c0:95:ae:57:e7:92:a7:b2:2a:
f2:b3:b0:ee:99:34:98:8e:91:41:b0:b3:4b:85:1a:b4:e4:af:
c5:a4:4b:15:6d:2b:48:04:83:42:73:68:39:40:62:ed:9f:2b:
34:a0:c8:3a:ea:4b:ea:3f:a4:fa:b1:4e:ed:7a:5d:8d:d3:49:
df:a2:d3:4f:a5:13:de:d4:28:63:72:a9:d1:2d:85:cd:de:b9:
dc:eb:0f:94:29:46:b5:e2:a6:fa:88:04:f9:a3:55:50:8d:09:
92:08:be:47:35:85:4e:18:4f:7e:a0:39:dd:6a:e8:5c:8c:c9:
f2:db:9f:60:e7:47:b9:c0:37:9b:bb:0c:ee:2d:ca:0e:39:5d:
71:2e:7c:f2:dc:43:d0:fc:5f:b6:f9:89:08:61:be:89:9f:8f:
9f:64:e5:9a:9b:f9:f1:4a:e8:2c:16:99:82:bb:72:be:69:7c:
20:12:59:e7:c4:22:e8:0f:8f:40:6f:9d:b8:28:a0:8d:e2:ee:
c0:eb:a3:f4:4c:b2:1e:b0:33:d4:33:9e:5d:c9:12:d8:3b:a4:
96:97:cf:48:c5:a3:38:4c:65:03:60:2f:93:9a:58:17:57:46:
33:ce:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 19:07:08 2025 by rpki-client