Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: mXRupcGzoYp7Kk88Gbe19h2+LpDoBBnGF27UdvFGXIw=
Subject key identifier: 2E:1F:EE:40:E7:36:37:9C:77:AB:C3:C6:8E:C8:53:1A:50:36:A9:18
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 0197507CA5354F1EB02E5F07C704A23B89E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 17:00:35 +0000
Manifest this update: Sun 08 Jun 2025 17:00:35 +0000
Manifest next update: Mon 09 Jun 2025 17:00:35 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: TfeJ1P1H2y59nU88rOX/vZtc94jgiGLlht/cWOY1ODw=)
2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:a5:35:4f:1e:b0:2e:5f:07:c7:04:a2:3b:89:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jun 8 17:00:35 2025 GMT
Not After : Jun 9 17:00:35 2025 GMT
Subject: CN=2e1fee40e736379c77abc3c68ec8531a5036a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:33:df:45:63:58:26:d0:1c:84:8f:90:5a:
08:85:ed:6c:61:bd:34:cf:39:3e:18:e6:85:9e:5b:
50:19:b4:23:dc:7b:8f:9c:55:08:59:18:5c:3b:ba:
a8:fd:ff:b9:a9:52:db:ad:b9:77:0d:12:e6:91:71:
4f:ce:35:60:84:fc:60:ec:2d:33:f1:9b:32:d9:cf:
04:ed:e0:8a:d4:dd:c8:2e:ac:56:04:64:dc:22:a3:
b9:9b:cd:8e:59:3f:bd:7a:80:42:18:a8:da:cf:21:
47:48:0e:44:45:3c:2b:04:73:79:52:2f:bd:09:66:
d1:d8:af:c2:13:4c:b1:f9:a2:a3:e0:eb:2f:da:37:
53:68:f5:af:6e:04:07:1d:3f:9b:36:4b:17:82:3a:
ca:00:26:46:4c:2e:61:84:31:2e:9e:84:07:15:58:
fb:ec:03:fa:68:1b:47:88:21:0e:d3:8e:5c:a5:aa:
b7:d6:d5:df:7a:d1:47:aa:ab:f6:1e:8d:69:af:2f:
cf:52:60:72:5f:55:1c:63:8b:e7:99:9f:4c:c9:69:
42:8e:2c:d9:89:57:96:a2:6c:c7:64:c8:89:38:8c:
01:b0:76:cf:8f:43:0d:67:fd:a4:c4:73:53:83:4c:
0b:ac:3a:59:6a:71:37:25:03:46:8f:58:c3:15:76:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:EE:40:E7:36:37:9C:77:AB:C3:C6:8E:C8:53:1A:50:36:A9:18
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:89:e0:e0:67:bc:91:e2:dd:63:6e:a2:31:a6:1f:13:67:ba:
87:50:a5:b0:33:25:f9:59:1c:fa:9d:cb:73:7f:7d:f1:1c:ea:
c5:ed:03:8c:59:15:e5:1d:65:b9:60:70:31:0a:a3:96:48:4f:
9b:6e:f8:0a:57:fd:dd:39:e1:b5:46:bf:96:f4:ec:21:af:05:
d4:8a:e6:d9:8d:28:5b:ec:01:52:28:e5:99:ce:92:c6:7b:07:
44:8c:11:f3:8a:79:e8:46:cd:6d:1d:c6:ed:33:40:17:27:23:
d1:47:fe:e8:30:e5:50:01:a6:24:b3:46:da:3d:3a:9f:de:08:
a0:a7:ac:bf:fa:21:3f:59:80:c8:40:0e:8a:40:a7:de:16:f7:
c6:b1:eb:30:d0:be:81:13:9e:40:d9:f5:6f:41:6a:aa:7c:42:
93:a4:a3:3f:b5:22:3c:08:49:ba:9c:89:8a:32:7d:5e:78:cf:
7b:0f:c7:50:cb:00:24:9f:4c:82:c7:5f:b6:39:ba:7c:a9:28:
bf:87:29:f0:51:89:da:05:2b:e3:11:72:40:65:31:ed:36:4c:
88:df:87:bf:b0:0d:a0:1b:5e:11:f3:50:2f:18:b3:6d:a9:7f:
12:c9:0f:51:f0:61:d9:64:62:15:76:fb:b3:8c:04:f4:18:d6:
f1:e6:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:05:53 2025 by rpki-client