Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: I2X/FGhDZyvpgszW6l0vVJdugnWHs3GePXeL0N7bNV4=
Subject key identifier: D0:B4:F1:4F:A6:83:2B:FD:5D:97:05:E7:D9:AA:BD:C9:F4:C6:65:60
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 01975D93B508172403D95D11CFC0849BFF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 085A
Signing time: Wed 11 Jun 2025 06:00:50 +0000
Manifest this update: Wed 11 Jun 2025 06:00:50 +0000
Manifest next update: Thu 12 Jun 2025 06:00:50 +0000
Files and hashes: 1: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: xNO9skjxCB1BcOJLKIdCDXehLS+4FFJbhMgBDahY00Y=)
2: _xRBA0-FJYAq2bhvbQe3j68XREg.roa (hash: Gym+lS7Pb7qSAGCB20Y3Am819Ocp8b/loNBlr9diFjw=)
3: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (hash: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:b5:08:17:24:03:d9:5d:11:cf:c0:84:9b:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Jun 11 06:00:50 2025 GMT
Not After : Jun 12 06:00:50 2025 GMT
Subject: CN=d0b4f14fa6832bfd5d9705e7d9aabdc9f4c66560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:07:f8:ba:65:da:00:9b:e5:90:31:48:ca:
d6:17:a8:f0:7c:c0:fb:38:8c:57:99:ef:dd:91:77:
88:69:b5:83:f6:8b:6e:df:a8:9d:d3:53:b2:b2:e8:
b4:f2:c5:80:3e:00:d0:8a:41:aa:18:88:cb:5b:1d:
dd:be:99:82:f3:25:26:30:64:83:f9:65:e0:27:d4:
12:01:59:0c:c6:73:cf:06:f5:2a:12:fa:01:42:ec:
a7:86:f8:ef:c8:eb:b1:3d:3d:dd:b0:4e:c2:91:44:
d5:56:aa:c8:ab:b8:50:64:89:7c:f4:3a:dd:c9:b1:
dc:a6:68:c1:6e:27:a3:5c:88:a5:d0:b7:56:1f:a7:
74:87:ca:1a:13:f8:97:9a:bf:28:17:7e:b0:0c:9d:
de:71:6f:26:5a:7b:1a:e3:1b:a2:28:d5:65:a4:89:
c3:15:36:4d:d7:37:6c:82:6c:42:16:fe:31:30:af:
10:5c:cb:08:f6:cf:2d:33:c5:85:ac:2f:d7:26:0b:
3e:11:a4:d1:ca:a8:bf:37:6c:27:fa:85:36:f2:4d:
7a:0e:5a:fd:e7:8f:58:e0:cd:ef:f9:9f:4d:b9:60:
05:6f:85:47:32:8c:99:12:fe:91:4d:68:98:3f:70:
96:3e:0f:eb:03:7b:ae:6a:4b:83:7d:ad:1e:fa:75:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:F1:4F:A6:83:2B:FD:5D:97:05:E7:D9:AA:BD:C9:F4:C6:65:60
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ed:77:89:4a:ef:aa:97:36:f1:60:bc:30:f7:b9:6b:d7:b6:
cd:60:26:fb:eb:8d:0b:dc:6d:93:ac:d5:f2:f1:0b:f9:47:51:
64:b7:0f:53:97:f3:71:f4:64:8a:f1:ff:b7:a9:b7:10:42:4a:
9e:47:81:02:3a:e4:a5:b2:95:c2:57:1e:a8:24:92:30:d4:dd:
b1:6b:d8:5b:2b:cf:56:49:86:ee:89:9f:2b:3a:4e:cd:36:b8:
dd:0c:98:09:0d:71:a9:7e:9d:45:39:2f:da:c9:bf:6b:10:ce:
a6:7d:cf:68:74:41:f0:85:0d:d1:7a:41:40:3a:19:ed:5e:44:
3c:2a:24:8c:23:18:38:3e:07:b8:db:ff:2d:5e:36:ba:c2:15:
58:68:aa:76:e6:cd:ce:ee:2e:b4:88:67:b3:ad:89:21:9c:73:
86:3b:78:02:23:1d:ad:68:60:91:d8:8a:97:ce:78:55:9b:e4:
c4:64:d7:54:e3:a8:ed:a0:f9:35:42:2d:e2:ec:c3:48:91:49:
c3:f3:45:7b:84:7f:8c:98:5b:f4:96:6d:a1:6c:62:52:04:a4:
ce:83:40:2b:4c:b4:4b:a1:1c:45:d2:31:8f:78:55:d4:5d:f8:
49:61:2d:a3:80:a4:21:75:63:4d:56:f1:65:7a:8c:87:36:79:
dc:32:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:39:54 2025 by rpki-client