Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
File: EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft (raw, json)
Hash identifier: YATjlsngg1xszeuuMRRo4jZIK+B4spICEGMV/Hn1/RI=
Subject key identifier: 39:58:A1:6A:55:5F:6A:D0:79:0C:B1:43:79:0F:E1:F6:79:8B:DE:E9
Authority key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
Certificate issuer: /CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Certificate serial: 0199228C4B2F077F19DB5A582366FC195AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
Manifest number: AE
Signing time: Sun 07 Sep 2025 05:00:43 +0000
Manifest this update: Sun 07 Sep 2025 05:00:43 +0000
Manifest next update: Mon 08 Sep 2025 05:00:43 +0000
Files and hashes: 1: EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl (hash: 6ODrPydcsSWzZK6pJdW8a4sAY4Eld5IDlomOgg+oay8=)
2: cJMqlk4t_npV762YA6G1Urn8YC8.roa (hash: +q/bgqa1jjCMji99qFxLyo61sIU915VzUhks1PlXN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:4b:2f:07:7f:19:db:5a:58:23:66:fc:19:5a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Validity
Not Before: Sep 7 05:00:43 2025 GMT
Not After : Sep 8 05:00:43 2025 GMT
Subject: CN=3958a16a555f6ad0790cb143790fe1f6798bdee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:42:7d:79:8a:4b:48:23:31:bd:62:89:48:
64:e0:22:e1:a1:f9:14:b5:79:a7:bf:2f:8b:29:e0:
06:d6:de:ff:1a:7e:ac:4d:5d:36:08:ea:28:6e:96:
be:6a:07:20:3d:51:b9:de:14:5c:c3:09:8f:8d:7c:
59:0f:fb:f6:df:72:f0:8a:7a:42:7b:8c:2e:61:41:
ee:8c:d8:05:1a:58:fb:40:fc:00:36:e3:e3:72:66:
a5:f4:99:c6:7b:63:74:96:3e:06:4a:9b:7e:e9:ee:
7d:a9:b2:eb:e6:c1:51:63:14:57:84:2a:36:8f:e3:
36:14:10:62:57:c3:b5:ad:a6:81:35:3f:a2:f3:06:
b2:c7:99:df:8a:87:08:11:bc:70:c9:69:6f:4c:02:
f3:4b:c1:30:d1:e7:eb:26:9e:ab:ec:ad:98:f2:e8:
2c:41:65:e4:01:a8:90:7f:3d:7b:b2:b3:d4:c0:49:
6c:06:e3:01:95:00:7e:bd:44:ad:73:11:f5:c8:37:
91:b5:61:46:3f:f0:87:70:04:2b:c5:00:0b:af:72:
02:42:16:3a:d1:aa:dc:75:3e:42:9e:0f:bb:f9:0c:
d1:68:9f:02:d0:ab:ba:24:21:da:bc:9e:01:71:46:
52:08:29:4c:78:fb:26:b3:17:0d:f2:32:d0:76:d3:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:A1:6A:55:5F:6A:D0:79:0C:B1:43:79:0F:E1:F6:79:8B:DE:E9
X509v3 Authority Key Identifier:
keyid:12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:be:fa:47:33:de:d0:60:44:22:8d:9e:95:a7:bc:ea:c8:12:
ff:de:1f:7d:fc:10:e0:60:82:a5:bf:78:6a:2e:2f:56:98:79:
08:db:4d:b5:d1:2f:6a:43:9c:cd:22:fa:96:fd:a1:9d:e1:dc:
77:3e:0d:f5:32:ac:1b:da:52:fd:32:f3:11:fb:14:0c:08:77:
81:4c:60:b2:4c:86:1f:93:d6:56:bb:9f:f3:18:4a:14:a1:70:
be:a5:11:ad:06:81:12:b2:a8:6d:26:48:b3:a5:34:87:18:f7:
e1:0a:a9:98:4c:db:b5:c8:58:e9:35:9a:ca:bf:40:69:16:72:
f8:a9:6a:70:21:8c:cd:b5:31:c1:1b:6e:a2:cf:3e:2b:65:28:
5e:96:e6:57:2a:26:35:c5:5b:da:bf:98:fb:ed:d2:58:b2:7d:
8e:4f:3f:20:0a:9c:03:6c:ff:88:e4:e7:99:78:4d:2e:b5:13:
1e:79:01:59:f6:58:8c:9c:5e:bf:ea:5b:d6:ca:ec:22:80:a3:
b4:9d:b1:9b:b8:df:ca:ee:57:f9:87:33:e6:cf:9a:29:de:76:
4c:ba:5e:53:17:fc:d0:d6:60:ca:68:2e:fe:88:09:23:2c:04:
c4:0a:ba:15:38:b8:40:4b:70:f1:f0:ad:b1:de:7a:f1:4d:5b:
02:30:0f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:16 2025 by rpki-client