Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier: AxbJBPI4O4b1+iIP+wMyqDraJ7KuXqgVhnX1oijnu8I=
Subject key identifier: 02:4C:72:B0:96:58:F9:7C:08:54:EE:A6:1E:37:63:25:55:98:2E:84
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial: 019A7301B111A80B9E5B1A5D8B6D3A2C34B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 13:01:21 +0000
Manifest this update: Tue 11 Nov 2025 13:01:21 +0000
Manifest next update: Wed 12 Nov 2025 13:01:21 +0000
Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: JGNhdsQIOj7ast+M6UUNuFKGR4c5ckzzIVI6Gr7x2WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b1:11:a8:0b:9e:5b:1a:5d:8b:6d:3a:2c:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Validity
Not Before: Nov 11 13:01:21 2025 GMT
Not After : Nov 12 13:01:21 2025 GMT
Subject: CN=024c72b09658f97c0854eea61e37632555982e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:5e:b5:f1:b4:75:d6:dc:04:d8:8d:ed:22:
cc:31:d9:99:77:ae:b7:cd:59:bb:50:cd:1a:35:f7:
db:fa:c0:d6:b8:47:1a:1c:8a:b3:6c:cf:ce:da:cb:
b0:60:33:b2:36:73:c2:8c:38:e6:20:32:b4:3a:b2:
4b:29:92:35:1d:e7:a6:e4:33:b2:dc:b1:51:14:93:
ba:5e:ee:a4:18:4a:8d:ce:1f:21:e3:fc:db:d8:8e:
f7:21:53:9a:b0:69:79:d7:60:63:32:47:3d:bb:c7:
a1:e4:08:d4:50:66:60:62:e7:84:35:89:84:07:f4:
ec:ad:7d:97:01:d9:31:63:3e:2f:11:03:01:a8:e5:
9d:06:b9:ae:91:99:f3:ed:a9:44:c7:96:25:e1:38:
3f:c6:66:76:ec:f1:a7:0b:e9:16:32:9b:85:f0:35:
54:64:5c:18:e0:b8:2f:20:29:6a:43:a9:2a:1b:6f:
95:ab:88:a1:a0:53:43:b5:d7:5b:c5:aa:f5:d6:cd:
83:55:7d:b4:53:1b:9d:8d:b3:f2:ac:62:7f:33:be:
5b:f1:11:13:aa:06:c2:70:9a:13:d2:d0:5e:3f:52:
c3:60:7f:cf:31:02:ec:ae:52:bb:49:b2:b4:84:42:
e3:bf:79:bd:1b:ff:44:5c:43:9f:86:b8:00:75:85:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:72:B0:96:58:F9:7C:08:54:EE:A6:1E:37:63:25:55:98:2E:84
X509v3 Authority Key Identifier:
keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cc:e9:8d:23:15:0a:36:18:23:f3:78:80:1f:70:32:73:0b:
7d:77:ff:63:d7:f8:c8:59:5e:d9:48:f2:65:19:59:d3:be:44:
d0:9a:7c:15:df:ce:72:d0:f7:e4:8e:8f:50:af:24:c3:9c:2a:
1f:62:a9:00:d4:8b:e2:cc:eb:2a:22:8d:f7:2b:7b:7a:c3:3b:
b3:6c:88:8a:2d:aa:ef:28:47:0b:90:83:fa:71:87:9f:57:b7:
2a:0f:34:49:3e:2e:34:29:90:c7:25:0a:3c:c0:9f:21:22:97:
09:09:49:4f:b8:c4:00:8b:b7:13:79:9d:00:53:3e:20:d3:10:
df:55:51:3d:35:b2:de:9b:eb:ab:72:22:80:33:d3:94:d8:94:
45:bf:5c:b6:53:d3:7c:18:4c:e4:84:1a:18:29:d0:ff:75:c2:
ce:02:7a:29:cf:67:54:85:e9:e7:63:57:24:2a:82:9c:54:2c:
e8:98:2e:b9:dd:ce:86:59:b6:24:d4:ee:ed:3f:72:02:80:40:
09:9f:c9:60:f8:1a:e5:f8:fe:6a:e3:a4:c3:f3:f1:ef:26:8a:
57:df:21:ec:36:75:d9:e7:92:95:09:79:ea:d2:ba:d9:79:6c:
1c:92:74:d6:00:36:73:15:5e:c1:f2:ac:73:58:16:c8:12:ce:
9f:71:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:43 2025 by rpki-client