Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File: EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier: DgptRkpvsEULIRqOUh5eZG3Bc1hOcCrnBtOdOtj/h0k=
Subject key identifier: 57:96:9B:A9:7F:50:A3:88:5B:A4:85:4B:7A:20:D0:2D:2B:7D:6C:1E
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial: 0199FFC87B3CE7FDF7F7C9AE4F0395EB49A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:32 +0000
Manifest this update: Mon 20 Oct 2025 04:02:32 +0000
Manifest next update: Tue 21 Oct 2025 04:02:32 +0000
Files and hashes: 1: 2CUDnPzPHNqbCWKCZFVlFgWU_Ww.roa (hash: bthC2bFYzQs+lVNqZxrhsxyhvDDeUXNWtR+Uh+f7dJw=)
2: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: q03EZLi5rKftXm0JPlU05M/bTONfDUWm3KL2YedXoGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7b:3c:e7:fd:f7:f7:c9:ae:4f:03:95:eb:49:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Validity
Not Before: Oct 20 04:02:32 2025 GMT
Not After : Oct 21 04:02:32 2025 GMT
Subject: CN=57969ba97f50a3885ba4854b7a20d02d2b7d6c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:50:47:be:b0:85:16:ce:ae:e1:d5:58:b9:
6c:4d:9b:14:e1:80:14:56:96:e7:39:d8:9e:b5:00:
77:a0:64:81:b0:1b:9a:82:2c:28:40:04:bc:89:bd:
43:62:2d:9a:c4:f0:e2:9a:aa:30:db:26:2a:26:d4:
29:21:70:ba:79:47:8f:e5:01:9c:2a:b4:61:51:74:
df:98:d0:4a:ca:64:ad:0c:ac:d4:1f:b4:bc:fb:23:
22:20:ef:c8:2f:97:7e:98:7c:3a:00:a7:e5:34:e0:
d6:84:d9:b8:14:30:bf:64:43:36:53:e2:66:d2:5d:
89:a8:1a:c5:af:5b:b6:dd:43:5e:62:c8:7c:21:56:
b9:0c:30:9f:bd:b2:d5:5e:90:ec:34:3d:15:16:83:
10:39:4d:28:e2:ee:bc:94:6f:f6:01:d5:3a:f4:42:
b4:f0:54:96:9b:4f:15:19:43:9e:1d:76:2c:2b:51:
e4:81:12:b7:d1:72:d2:bd:e0:74:e6:cd:52:ab:17:
27:ab:a0:cc:59:a4:7f:e9:40:bb:95:1b:3e:db:10:
28:92:e8:dd:0e:61:37:e9:c0:0c:13:40:48:f0:3b:
86:87:01:dd:ff:6e:1c:df:c6:8c:35:8c:e9:c2:82:
de:22:56:84:ad:34:2e:d4:fd:0d:84:52:0f:dd:06:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:96:9B:A9:7F:50:A3:88:5B:A4:85:4B:7A:20:D0:2D:2B:7D:6C:1E
X509v3 Authority Key Identifier:
keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:6e:a9:e1:a2:29:f1:ad:66:81:5b:95:5f:57:a3:e3:ed:
61:1a:ab:42:45:04:52:c6:b9:b0:00:3f:e5:09:1f:f6:a8:7e:
41:33:c8:ed:71:9e:ef:d9:d4:9d:90:ad:c6:23:b4:de:d6:06:
7b:a2:d8:cd:f6:64:d1:71:f3:1f:a9:1e:1d:4a:bf:1b:95:24:
ce:07:7a:50:72:ef:f7:9c:78:21:6d:d1:21:b2:cc:cb:13:45:
f5:35:f4:4d:75:18:9b:ce:d5:69:ee:91:a4:33:5d:f9:09:96:
8a:d2:8e:f3:f0:42:9e:81:34:9b:4f:c2:3c:4b:e6:78:3b:c7:
20:56:85:07:6d:72:a7:96:f6:6a:4f:f8:47:fe:50:cb:ac:f0:
dd:92:16:07:31:39:ef:66:a6:0f:04:43:7c:2b:cb:6b:14:c2:
39:0c:f7:87:70:ec:79:54:a7:06:27:0a:cd:3a:e4:64:9d:a3:
8a:85:7b:a3:43:cc:52:b6:9c:c8:84:14:f8:76:7a:69:99:6d:
88:a0:31:33:98:69:11:56:1b:27:67:25:2b:08:34:11:6a:06:
7f:d4:ce:71:31:fd:29:15:e3:35:e3:2f:19:26:ca:8c:58:fc:
fd:fc:dc:8a:79:74:ca:47:de:7d:33:f4:06:4e:3e:0f:de:c6:
01:d0:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:29 2025 by rpki-client