Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: 6E3nm6ZIZQQlr7tAjX0Cg5VaIaPmx4UzNfQY4uaksvA=
Subject key identifier: D2:BE:A7:9B:5B:23:FF:C2:E8:F9:D4:D3:1A:A5:7D:31:07:1E:68:16
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019A71EECA9F79BDF1208CECB96570695B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: mGqlSQOYq3SoWBIJBsFNJOZyai5XOo84Dxkjl5HSxJ8=)
2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:9f:79:bd:f1:20:8c:ec:b9:65:70:69:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=d2bea79b5b23ffc2e8f9d4d31aa57d31071e6816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:87:fd:17:38:06:70:03:4c:38:f7:8b:12:
a0:6b:e4:c6:c0:e5:a2:9e:57:ac:1f:5e:73:ce:bb:
b7:08:5d:71:a0:ac:a8:89:15:f8:9c:42:c9:a3:55:
a0:93:a1:05:e9:d1:e8:0d:81:0e:27:91:91:f4:ab:
6b:a5:dd:d5:4f:8b:a8:5f:fa:14:18:b5:f6:31:63:
9c:59:cf:36:27:bf:bc:c3:83:49:6e:03:02:da:45:
f8:48:2d:b1:48:5b:8e:4d:04:12:6e:7e:94:16:e9:
37:d3:75:5e:26:56:29:96:f7:52:cc:ff:a5:1f:c6:
69:d6:e6:0c:20:ee:f5:56:cc:3d:6a:dd:4a:2f:85:
39:a5:b0:b7:aa:fd:75:c9:13:95:44:57:dd:2c:0f:
f9:f2:a2:d7:44:21:58:5f:88:57:0c:c4:6b:33:53:
c7:b7:72:36:0d:01:16:de:da:1a:0f:01:1f:fe:43:
19:45:a8:3f:df:a7:b8:d8:fd:de:a4:8b:ca:45:c6:
63:20:29:ad:0c:e2:2f:f2:03:05:1b:ac:b2:6c:81:
4a:e9:a8:94:de:2c:50:74:81:2c:30:3e:95:bd:d5:
98:3f:f7:7a:d6:a0:a2:ad:87:87:5a:d9:a6:6b:62:
fe:95:52:3a:58:77:bf:8b:6f:87:93:ac:9d:09:b1:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:A7:9B:5B:23:FF:C2:E8:F9:D4:D3:1A:A5:7D:31:07:1E:68:16
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6f:fe:63:4c:9d:56:f9:0b:5a:42:fc:f8:3b:ed:7e:40:d2:
e5:42:bf:01:b6:2c:51:ff:13:83:65:0c:de:e5:06:69:49:ee:
f1:94:80:41:98:4e:07:ad:16:ab:67:be:35:69:f3:ba:77:70:
51:c8:e1:77:91:5c:6d:ad:e8:2d:e8:34:08:88:22:4b:1f:c5:
46:64:23:93:2b:be:bd:ac:ed:1e:7f:9a:dd:2a:6e:c0:07:aa:
e4:73:92:cc:32:b1:c4:28:20:44:c3:d5:83:80:46:6b:ec:22:
a2:c3:16:02:7c:28:58:f8:af:1d:b1:23:68:83:d1:d4:5c:69:
5e:2c:79:9d:dd:8e:66:98:44:84:e9:83:cb:4e:2c:fe:c5:63:
e0:5d:24:3b:e7:c6:66:78:5b:3c:aa:b1:89:f9:80:04:cd:95:
15:b8:08:57:71:b3:a8:15:3f:52:3f:b1:cd:ee:a4:c2:e4:e5:
21:51:d3:5f:8b:5d:bc:cd:cc:c9:a8:74:8b:34:33:98:84:27:
16:a2:ac:b8:21:65:12:b2:d3:31:8e:10:dc:89:a7:0e:86:aa:
40:92:28:c0:23:47:7d:a6:59:2b:1e:66:fc:10:d0:b8:49:02:
e3:24:f6:91:6e:34:7a:98:64:70:ef:34:8d:e2:6f:94:59:f8:
c1:31:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:56 2025 by rpki-client