Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: HJ1VcE1bd+NLKLf5sYVuxkdAAnX/14oUfW8Tq7Uaz6A=
Subject key identifier: DC:AB:A4:AF:CB:48:1E:33:7E:BC:43:80:BF:F6:82:4D:77:87:59:CD
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 0199FC8FA21A68BD6FBCE759A3F5A84C94FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: JjVi0xYLtOgrmR+Vn6rBBsmLT43OTnO9vUHpbbJUISw=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a2:1a:68:bd:6f:bc:e7:59:a3:f5:a8:4c:94:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=dcaba4afcb481e337ebc4380bff6824d778759cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:65:ef:94:21:47:01:51:c4:e5:64:ee:9e:7a:
bd:80:40:88:d5:5b:5f:bc:c0:17:30:cc:72:30:9d:
45:4c:89:55:aa:21:5c:c4:5d:6f:17:38:b0:8e:3f:
07:5f:e7:f4:ae:49:82:2e:18:83:7b:10:2e:b3:72:
48:1f:10:b7:6e:e0:c4:f2:f5:37:3c:61:2d:c9:7b:
2c:07:db:ef:53:bc:f1:4b:5f:1b:63:e2:a2:7f:bc:
b1:45:76:d0:f2:df:0b:e3:71:05:7e:6b:c8:fa:a6:
33:54:52:ba:50:51:ed:2d:be:08:46:f7:ca:ae:c3:
a4:bd:7f:8b:b2:55:02:2d:b6:f8:b9:40:08:9a:c5:
19:7e:b4:ba:3c:fa:6d:9b:00:d4:65:2b:ac:63:8e:
86:08:f1:80:c3:90:35:5c:c5:c9:b6:9a:80:a7:08:
c2:03:03:a8:29:78:5e:cf:fa:55:85:be:a6:07:26:
8a:34:d5:d0:97:c2:a2:e9:db:6f:cc:25:39:7b:4c:
66:ed:29:95:fd:10:8d:50:04:46:fe:2d:b7:bb:35:
06:fc:9f:5d:bb:48:cf:e8:4d:97:ab:3e:0c:43:5f:
65:c8:1e:81:58:a6:f8:bc:fa:e0:29:80:48:76:fc:
0c:97:ce:c0:6a:21:7a:b5:4a:17:a5:5d:10:fe:06:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AB:A4:AF:CB:48:1E:33:7E:BC:43:80:BF:F6:82:4D:77:87:59:CD
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:26:61:b2:83:78:b1:1c:88:a0:af:82:26:cb:07:b1:8b:
2a:85:64:1c:b5:47:9a:ad:d3:74:9d:25:0c:96:eb:b3:2f:96:
99:3a:b4:62:c5:3b:b7:35:99:b4:13:66:92:a8:a8:bc:e4:df:
0d:dc:83:e0:b2:de:3e:01:be:84:33:5e:b7:28:27:46:e9:8b:
50:23:b8:ca:27:63:6d:87:43:0e:04:3e:3b:5a:c2:41:c3:33:
98:b4:c0:05:a4:ab:5e:00:16:ef:d5:0b:a7:40:fb:c8:da:7e:
6e:16:32:d6:de:3b:c8:73:ff:45:13:54:1d:9e:49:64:70:0c:
f8:5e:f3:c6:ab:ee:42:60:ea:e2:e3:23:ad:4f:f5:93:4d:cf:
a9:5a:0d:b3:9e:59:80:ff:59:b5:97:d0:00:02:d9:dc:b7:21:
a9:12:9c:3b:60:78:46:87:06:27:e0:3c:f3:b7:26:84:41:56:
3f:78:f4:82:fc:e2:6e:df:f9:a2:8b:f9:71:be:7b:95:c6:22:
2d:8e:07:50:aa:86:08:b8:a1:d3:91:7d:16:14:aa:a6:89:08:
3f:32:16:2b:92:90:a1:45:9b:4d:fe:e9:3b:08:b5:77:cd:24:
88:c6:ea:d1:a7:ff:d9:2d:36:cb:27:94:db:6b:89:65:41:ae:
68:2d:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:47 2025 by rpki-client