Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
File: EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json)
Hash identifier: 4iVOCd6YdAbxJpIecY7PYKkYRJNfmcKy5g10t8E5k70=
Subject key identifier: 8D:E1:8D:41:A3:7D:81:CF:8A:A6:07:D0:8E:B8:8B:DD:52:50:79:2B
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial: 019A3BA4E8C1AB76EF12A78BF106318EB1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
Manifest number: 1695
Signing time: Fri 31 Oct 2025 19:00:54 +0000
Manifest this update: Fri 31 Oct 2025 19:00:54 +0000
Manifest next update: Sat 01 Nov 2025 19:00:54 +0000
Files and hashes: 1: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: s2UO6aKSrqHMH0eS8G1spP+OwYxF3wiwB+tGc1u6vzw=)
2: Mf8_fr0emM9VzKXxaSCkla0gpe8.roa (hash: M0YySaNEC7qXOCCeVLXEwEcDDAoxkin1ih/jS/04KOM=)
3: _LxyVkgbKLMaCoKf-wa-gjXEY9g.roa (hash: Tt/J7UaLJpGwa3pTn7jEj8mr5nT4j+av9OQ17W7ixzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:a4:e8:c1:ab:76:ef:12:a7:8b:f1:06:31:8e:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Validity
Not Before: Oct 31 19:00:54 2025 GMT
Not After : Nov 1 19:00:54 2025 GMT
Subject: CN=8de18d41a37d81cf8aa607d08eb88bdd5250792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:43:cb:85:97:fe:89:cc:89:e7:79:85:be:
f0:c6:e9:3a:70:c0:ba:82:3b:d0:a5:65:f0:f4:21:
a6:60:b3:98:cb:db:a0:ef:c2:f2:cf:d7:7e:15:1f:
de:e2:e7:31:5d:7e:40:e0:1e:77:b2:80:7b:bf:04:
1e:6e:a2:0b:ab:86:fe:80:06:fb:0f:13:61:bc:96:
05:0c:b0:71:03:f5:c4:13:af:8d:a5:58:01:05:ac:
38:9b:52:76:cb:6e:61:b0:ce:20:1d:38:42:4c:2b:
98:ab:2e:a2:fb:ff:09:1e:3d:8d:bb:86:9e:1f:4c:
fe:61:0c:c5:da:9a:7b:42:03:da:f5:74:d6:a7:be:
00:18:0f:4d:c0:04:3b:1b:25:5c:10:9e:d4:74:92:
58:38:11:2c:86:37:95:2f:f4:92:fa:0a:a3:51:2b:
6b:6c:d5:3c:bf:7a:9d:23:eb:13:c8:e9:07:4e:f2:
82:77:2c:25:11:9e:d5:b0:5d:ce:97:50:29:da:ab:
b9:08:3d:da:14:0d:2a:6e:0f:cd:a9:04:5e:af:37:
2c:a5:37:80:3f:8e:11:3b:72:61:25:39:ab:81:86:
fb:61:f8:ce:d0:63:20:fa:4e:d8:fb:04:83:eb:8f:
3c:29:84:c3:17:43:f0:1f:a2:2f:ec:64:d6:1b:89:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:8D:41:A3:7D:81:CF:8A:A6:07:D0:8E:B8:8B:DD:52:50:79:2B
X509v3 Authority Key Identifier:
keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2b:cc:c3:c9:0b:d3:da:a2:06:33:cb:eb:aa:d6:cd:4c:02:
48:ad:0c:c2:d4:46:0a:6f:dd:a5:bb:63:65:13:09:7b:82:f9:
94:c6:b4:8e:a7:4d:e7:1b:1a:2c:03:81:f8:22:d2:fb:31:50:
62:4f:41:c7:7b:ca:62:59:89:b2:2f:12:ea:46:84:d3:cf:9a:
1c:57:89:0c:01:66:f0:f0:a9:a4:ea:87:55:38:9f:fc:05:3e:
6f:3d:6b:eb:36:da:08:da:fb:b6:5a:68:86:37:c7:06:2d:6b:
1e:49:de:bd:0f:c1:ee:6a:40:c1:da:84:be:20:e4:d9:f6:b8:
ae:fd:0c:63:07:1d:a4:9f:ec:cf:c6:1a:6e:64:ce:34:39:79:
87:39:09:55:e9:82:08:56:ff:81:89:77:ef:c5:09:39:91:ba:
d4:d7:f8:83:45:c5:1f:64:c4:f3:cb:48:af:71:a1:76:4a:52:
a8:1a:00:24:75:5c:9e:ad:1a:c1:e4:d0:03:ee:49:f3:78:2f:
8a:0d:86:7d:a4:41:11:65:0b:02:bc:fd:1d:de:70:f8:b7:af:
03:70:5e:a2:7e:5d:88:ba:28:fb:f2:c2:35:5d:16:77:71:70:
00:03:9f:52:05:c7:22:90:85:64:7f:79:04:a0:8c:43:8d:4a:
21:a5:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 04:44:43 2025 by rpki-client