Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: 3K24WlwVIA9tDycvwAXGfI/Rz5onQdbU/azG8pZ83FU=
Subject key identifier: BC:88:FB:40:87:A2:85:02:DA:12:0C:6C:24:07:C3:18:94:13:60:C8
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019748FA5AD098B480939D56DFD8B9A9BBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 06:00:56 +0000
Manifest this update: Sat 07 Jun 2025 06:00:56 +0000
Manifest next update: Sun 08 Jun 2025 06:00:56 +0000
Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=)
2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: 20yW/gYxf+00y84QMsULlrQ91Vnc7H9cvSMTGqXDizs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:5a:d0:98:b4:80:93:9d:56:df:d8:b9:a9:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Jun 7 06:00:56 2025 GMT
Not After : Jun 8 06:00:56 2025 GMT
Subject: CN=bc88fb4087a28502da120c6c2407c318941360c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:6a:3d:af:cf:8f:3c:bf:82:e2:13:51:6e:
39:d8:ae:60:54:20:1a:21:5c:fc:bb:6f:31:28:6c:
c9:2c:86:3f:aa:6e:91:d0:d3:41:fc:c7:a5:60:55:
2f:07:85:33:18:b0:82:11:9b:a6:5e:65:6e:56:16:
9f:9e:bd:09:be:b3:b7:94:ba:52:88:77:4d:19:ff:
1c:90:ce:bb:ee:e9:34:81:8f:69:46:8f:07:bf:81:
a5:dc:1c:5e:3c:b1:90:40:0b:50:38:bc:93:cc:47:
78:cd:7b:3f:5b:f5:e2:2f:b7:f7:86:c5:5d:e6:df:
93:2a:9d:84:27:7c:74:f7:29:ad:42:94:3c:2e:8b:
d7:93:02:3d:43:de:d9:36:35:8a:3d:27:3a:21:93:
f7:bd:ea:80:be:03:ec:c3:0f:06:f7:ea:92:59:41:
2a:a7:c5:af:91:c3:f6:ac:5d:0e:35:d5:d5:bc:9a:
b8:eb:94:15:06:f5:19:54:30:56:d8:fc:e9:9c:8c:
e4:dc:0c:32:72:34:a3:19:e4:29:30:42:a8:ce:f6:
5f:29:23:5f:42:d2:5d:05:81:7e:51:1d:d3:c6:cc:
4d:56:e4:1b:f6:30:0c:0f:c6:8e:3a:6a:e0:96:7e:
9e:7d:23:aa:19:e2:29:ad:86:30:32:0f:16:23:bf:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:FB:40:87:A2:85:02:DA:12:0C:6C:24:07:C3:18:94:13:60:C8
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6d:13:a4:c0:11:49:6b:f8:70:80:4a:e0:f4:df:a4:a5:d6:
7f:ea:4e:5b:24:96:8f:fd:19:a5:40:e5:58:e6:21:bf:47:97:
09:34:88:9a:49:fa:29:30:3f:de:ae:74:20:fd:12:9f:8e:15:
70:e5:18:b2:fe:f4:2d:9a:7e:90:07:1e:bf:50:f5:13:b9:64:
44:60:40:17:49:3e:23:91:74:26:ac:97:b8:5e:8b:75:d3:44:
e7:4d:65:bd:b7:b5:04:85:ad:3d:87:d0:1f:75:8d:e6:f7:9a:
8d:ea:0d:07:9c:16:ab:13:c2:a2:e9:84:9d:29:e0:82:1e:80:
42:b0:92:25:98:6c:b7:4b:cb:df:f7:a2:5e:c3:8f:f4:b6:1c:
07:91:50:6e:34:2f:1e:ab:43:c9:bb:44:56:f0:9e:b5:06:28:
50:cb:ba:de:fe:9d:15:fc:4e:11:73:d3:48:3a:86:f5:94:51:
d2:92:c6:d1:76:c8:29:69:2b:45:2c:7d:61:8a:25:05:b4:0d:
9f:eb:f1:8a:5d:b8:50:5e:80:18:1f:5a:ef:b7:29:a7:4f:7b:
bd:ee:7b:c0:3c:15:86:49:91:83:f8:c7:45:c1:ab:8a:65:7e:
50:92:91:26:63:71:b2:85:85:6e:b5:36:54:7a:45:7f:4d:69:
c7:42:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:04:24 2025 by rpki-client