Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File: Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier: FvCxfftznogyHTSwPqr/h4C3aVKVt+pUDy3kzMUiZQ8=
Subject key identifier: 5D:B3:E0:3D:E3:AC:A0:C8:82:ED:00:D5:47:8E:16:1F:DA:E4:FA:68
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer: /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial: 019A71B88D66BE13CFF855A0ECDC13B224AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number: 031E
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: O4Fj4YJo2beYVWV0P2AIOsCMsNdpazV5Q7logWxQfhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8d:66:be:13:cf:f8:55:a0:ec:dc:13:b2:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=5db3e03de3aca0c882ed00d5478e161fdae4fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:6f:be:b4:04:27:c4:e4:4a:f1:9b:4e:d3:
19:53:28:15:af:e3:47:0a:f6:8c:9f:3f:9c:4f:64:
e6:db:6b:34:bb:53:9b:0a:29:f1:25:fe:9e:46:f0:
fc:2c:9d:34:86:ee:15:05:d5:06:eb:62:6f:ac:c8:
b9:22:a2:19:b3:08:c4:4c:73:b4:e8:3a:3e:21:72:
9b:1b:de:44:37:12:c5:67:0e:50:b6:44:39:f6:5e:
4f:b2:ff:d4:51:b4:c1:15:13:70:1f:fc:19:00:4f:
95:ff:78:d6:40:55:4d:ac:04:89:f8:e3:7c:28:98:
c6:b2:85:40:4d:7e:6f:aa:3d:0f:a2:4e:52:27:7c:
19:55:43:ea:32:87:0e:fe:b8:7c:6c:6e:4a:82:7c:
a8:28:2d:ce:31:ea:34:3e:80:be:2c:65:7a:e7:c8:
22:3a:8d:a5:ec:db:66:3b:01:95:de:f2:e1:8e:01:
08:18:02:87:fc:4a:4f:fb:2f:da:34:1c:84:7e:32:
8e:29:4b:01:d0:05:03:94:b2:70:e2:d7:b7:f9:52:
ca:40:1d:cd:76:28:0e:cf:5f:e2:24:a7:85:56:1d:
64:46:b7:7f:93:22:c3:41:c2:80:a7:86:6f:c7:f7:
4e:6a:a4:3b:d2:7a:bf:ab:19:76:9e:b0:05:93:fc:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B3:E0:3D:E3:AC:A0:C8:82:ED:00:D5:47:8E:16:1F:DA:E4:FA:68
X509v3 Authority Key Identifier:
keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d8:dc:51:30:ea:0b:46:09:ef:16:28:5d:c5:d0:15:08:bd:
85:73:e5:46:0e:d2:03:a3:62:1e:6c:c4:79:29:5a:73:3e:33:
c2:d1:92:76:f9:2f:b2:56:ec:62:4e:93:78:b5:6a:9c:4c:98:
99:6d:1b:70:76:3b:57:3a:81:78:62:ed:6a:c4:7e:71:42:d6:
73:aa:b0:1f:1e:29:56:ce:84:42:2b:c5:a5:a5:cf:81:16:5a:
90:d9:18:f5:6b:89:ec:72:e0:c1:a9:c9:dc:b2:31:ca:6d:a8:
d9:d6:23:0e:83:33:c7:d4:7a:fd:26:42:49:ba:68:b1:18:9f:
d9:89:ae:ef:24:17:e8:ee:6c:fa:52:f0:2f:8f:e4:40:20:92:
6c:7b:91:69:ee:ca:ac:0e:e7:8a:93:84:fc:35:3b:38:74:a0:
65:7f:1d:f4:37:80:39:1f:96:eb:74:38:88:72:22:61:cb:ea:
53:04:8f:51:93:d0:3f:38:64:69:bd:6e:b7:72:76:b6:55:ac:
8e:f0:21:70:27:91:ba:af:b0:1c:5e:e8:85:8f:e8:d7:a1:c7:
22:6b:93:f1:39:17:80:28:57:9b:58:b3:0f:32:dc:48:87:e4:
f4:ca:82:cb:6a:eb:28:07:29:f0:18:39:a0:e6:57:2b:0b:94:
f9:47:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:07 2025 by rpki-client