Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: qyU04xjCCrW6FuWX48Fv9vMiJ2Bc4MIKM07SuG8SiZM=
Subject key identifier: 0F:E5:61:96:DB:85:09:86:B7:A3:6E:78:27:3F:67:86:61:48:74:D5
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019A72266258FEB04B8B4CD8BF250D6CAA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: K27CTtBgJZFrY8o4HWh1xRS9dwVwjmxMSv2nE6xiHAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:62:58:fe:b0:4b:8b:4c:d8:bf:25:0d:6c:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=0fe56196db850986b7a36e78273f6786614874d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:f8:ca:b1:96:97:fd:b6:be:5c:22:22:4d:
4f:d2:29:0f:38:5c:cf:72:c0:db:70:33:69:84:20:
84:56:00:bb:2c:48:08:30:40:24:c9:91:0b:72:fd:
6b:3c:88:81:7c:99:0f:8d:eb:b5:be:a1:3a:85:c3:
c3:d3:38:a0:c5:93:21:41:31:89:96:46:02:b8:47:
0a:8a:d2:01:59:7f:0d:80:4e:f5:84:0f:17:5b:3c:
f1:90:7a:43:69:59:06:a1:d4:89:36:57:63:94:7c:
ce:24:12:83:59:6d:35:70:ea:15:63:e9:c8:ae:8c:
14:f1:11:bb:41:47:1b:88:0b:83:b9:60:db:ad:24:
02:96:75:6f:4c:5f:bf:d8:29:cd:59:60:d0:29:69:
d7:13:48:be:72:f4:77:37:d5:e1:99:b0:4b:bb:e7:
c2:2f:87:e8:5a:1d:49:fc:07:7a:f6:d1:1e:15:42:
b8:a3:cf:2c:46:87:b9:a5:8a:5e:6f:5d:db:a0:d9:
b4:62:07:a0:70:5c:b2:b1:a8:67:51:4b:94:7b:e5:
2c:e8:21:33:ea:44:cb:b6:46:3d:d6:ac:3b:02:16:
36:cc:66:6e:3a:1e:93:d3:33:c9:f9:0d:94:86:31:
58:45:e2:7d:1a:4c:e1:8c:79:c4:62:d5:93:d5:b7:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E5:61:96:DB:85:09:86:B7:A3:6E:78:27:3F:67:86:61:48:74:D5
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:26:9e:9f:99:7d:92:ce:18:eb:b2:65:15:d5:36:91:0f:9e:
ef:05:de:77:aa:6b:63:df:8d:f0:81:8a:de:4b:2b:51:8a:dc:
7b:c0:f2:35:12:51:47:ba:f4:ba:3e:bd:e3:d3:eb:30:25:3c:
28:ec:11:da:52:54:0b:b8:b8:b6:06:04:37:0c:ac:69:2b:fc:
8f:96:02:fa:0c:1d:3f:fe:2d:72:7b:e0:31:90:c5:28:31:f2:
f9:b3:01:a0:ed:63:94:41:9b:c4:0b:48:9f:ff:82:9a:33:92:
f9:a2:98:5c:80:01:64:77:42:8d:1d:cd:71:99:dc:10:e4:57:
4e:d8:90:36:28:5e:b0:58:53:51:13:19:2b:c5:92:0b:d9:61:
24:b4:7c:29:f5:81:ff:9d:52:65:39:a5:98:69:06:d1:25:e3:
12:0f:5d:e5:58:4b:1e:5e:0d:68:9a:5a:29:1b:22:f7:a8:ee:
58:0a:93:cc:af:52:e2:98:4c:56:c7:cd:73:04:35:f1:b7:71:
8f:0c:c9:07:0a:13:62:66:3c:f1:f0:4a:9c:fe:ce:16:4a:9d:
5d:1f:93:b0:e6:77:79:a1:c2:c9:c0:de:d8:67:e4:b9:6b:23:
1b:cb:31:d5:67:68:5e:fd:52:e0:e2:13:27:80:67:bc:73:0e:
7b:c2:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:37 2025 by rpki-client